CVE-2026-5773

High

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,253; of 17,790 indexed, latest versions
Container images: 1,175; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,253 of 17,790 indexed charts deploy, on 1,175 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+85 more	1:8.14.1-2+deb13u3+e2, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5+5 more	1,020
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	155

OSV records: ALPINE-CVE-2026-5773 DEBIAN-CVE-2026-5773 UBUNTU-CVE-2026-5773 ECHO-73da-59b1-befa
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,253 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

7,697

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,783

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,571

Container images carrying it

1,175 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
robiningelbrecht/strava-statistics :v5.0.0	40842cdfd616	curl@8.19.0-r0	8.20.0-r0	1
robotshop/rs-mongodb :latest	119b545823cd	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5	1
rocketchat/freeswitch :stable	cfba5c20a5cc	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
rommapp/romm :5.2.0	3512f2ca4557	curl@8.17.0-r1	8.20.0-r0	1
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
rundeck/rundeck :3.2.7	4d64fe56f767	curl@7.47.0-1ubuntu2.14	7.47.0-1ubuntu2.19+esm17	1
rundeck/rundeck :3.0.16	b13e8059ad72	curl@7.47.0-1ubuntu2.11	7.47.0-1ubuntu2.19+esm17	1
rustfs/rustfs :1.0.0-beta.1	3c2d55977829	curl@8.17.0-r1	8.20.0-r0	1
rustfs/rustfs :1.0.0-alpha.94	7d49faa88c04	curl@8.17.0-r1	8.20.0-r0	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1
santisbon/speedtest :latest	8ee3a1697227	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scrapinghub/splash :3.4.1	a5f89bc84606	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :10.0.1	70628f29c663	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5	1
securecodebox/persistence-elastic-dashboard-importer :5.7.0	afcefbd56d61	curl@8.17.0-r1	8.20.0-r0	1
seldonio/locust-core :0.8	1d0da98a2d76	curl@7.47.0-1ubuntu2.13	7.47.0-1ubuntu2.19+esm17	1
shamimkuet/nginx :1.0.2	b82902a76a04	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
shaowenchen/ops-server :latest	315444f703f4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1
siakhooi/query :1.0.0	f1f4b5b1b870	curl@8.17.0-r1	8.20.0-r0	1
signalen/frontend :2.27.8	1ab79cb7fe21	curl@8.19.0-r0	8.20.0-r0	1
sigp/siren :v3.0.4	2c219b04758e	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
sismics/docs :v1.10	f4b0ef019cf1	curl@7.58.0-2ubuntu3.3	7.58.0-2ubuntu3.24+esm10	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10	1
snipe/snipe-it :v8.3.1	141ebf2386fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
snipe/snipe-it :v6.0.14	55fb7636a98c	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	curl@7.68.0-1ubuntu2.19	7.68.0-1ubuntu2.25+esm5	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
soldevelo/kafka :4.0.0-debian-12-r0	cfdc08c2f577	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
soldevelo/postgresql-repmgr :17.6.0-debian-12-r0	3eaab21e40e5	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.25+esm5	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1