CVE-2026-5773

High

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,253; of 17,790 indexed, latest versions
Container images: 1,175; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,253 of 17,790 indexed charts deploy, on 1,175 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+85 more	1:8.14.1-2+deb13u3+e2, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5+5 more	1,020
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	155

OSV records: ALPINE-CVE-2026-5773 DEBIAN-CVE-2026-5773 UBUNTU-CVE-2026-5773 ECHO-73da-59b1-befa
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,253 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

7,697

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,783

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-5773.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,571

Container images carrying it

1,175 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mydecisive/octant-ui :0.0.1-testing	61e4066b22fb	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-03 :0.0.0-2026-08-17	3e56bdd1b90d	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/openclaw/openclaw :2026.6.10	af7ea052cf21	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/open-telemetry/demo :3.0.0-telemetry-docs	3519858704e7	curl@8.19.0-r0	8.20.0-r0	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	curl@8.5.0-2ubuntu10.4	8.5.0-2ubuntu10.9	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/port-labs/port-agent :v0.8.12	c92d1e223f5c	curl@1:8.14.1-2+deb13u3+e1	1:8.14.1-2+deb13u3+e2	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend :0.6.4	6a04b43b8d9a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1