CVE-2026-7168

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,201; of 17,787 indexed, latest versions
Container images: 1,133; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,201 of 17,787 indexed charts deploy, on 1,133 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+71 more	1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24+4 more	979
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	154

OSV records: ALPINE-CVE-2026-7168 DEBIAN-CVE-2026-7168 UBUNTU-CVE-2026-7168 ECHO-992e-5e26-c10d
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,201 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10

Open the chart page →

18,137

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,378

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,635

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

2,604

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

12,037

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,046

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24

Open the chart page →

7,740

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

5,299

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

5,222

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,896

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,145

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	curl@8.19.0-r0	8.20.0-r0

Open the chart page →

1,230

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

15,863

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,817

squestchristianhuth

6.6.7

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

9,971

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

8,466

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

3,749

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15

Open the chart page →

9,724

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,205

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24

Open the chart page →

5,398

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

38,346

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,854

dbrepodbrepo

1.13.3

4 of 25 See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

52,635

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,940

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

18,376

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,670

elchi-stackelchi

1.13.0

1 of 10 See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24

Open the chart page →

15,383

enavenav-service-architecture

0.0.7

1 of 10 See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

15,860

enbuildenbuild

0.0.50

2 of 6 See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

31,510

roundcubeencircle360-oss

0.8.3

1 of 1 See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

5,584

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

11,458

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,675

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm10

Open the chart page →

6,500

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

12,840

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,908

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,653

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10

Open the chart page →

11,662

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24

Open the chart page →

5,136

Container images carrying it

1,133 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	curl@8.14.1-2	8.14.1-2+deb13u4	1
project2team4/react :latest	3ff031a08887	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	curl@8.5.0-2ubuntu10.2	8.5.0-2ubuntu10.9	1
prowlercloud/prowler-api :5.31.1	4f252d579be2	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
pschichtel/mindustry-server :v145.1	b543e9c2d371	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
psorab/elibrary :latest	53b68896c4ce	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm5	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5	1
quickwit/quickwit :v0.8.1	d29332bdadcc	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
qumine/minecraft-server :v0.1.15	c0b650d51132	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.24	1
rabeh/apibootspring :1.0	941007b6946e	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.24	1
radarbase/radar-push-endpoint :0.4.0	e1758508e033	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
radarbase/radar-redcapintegration :1.0.6	fcd973d4796d	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
razorbladex401/dayz :latest	6a4d79248e7d	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24	1
readysettech/sqp :latest	588f3507280e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
readysettech/sqp-duckdb :latest	67a83203ce60	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
reallibrephotos/librephotos-proxy :1.0.3	98a13dabbadc	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
redash/redash :25.8.0	00d813437db5	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
redash/redash :26.3.0	c5c9148f5c38	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
redocly/redoc :latest	2e26bb660574	curl@8.19.0-r0	8.20.0-r0	1
reportportal/k8s-wait-for :latest	06cdf299b397	curl@8.19.0-r0	8.20.0-r0	1
resurfaceio/resurface :3.7.84	d5cda2f64109	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1
rezachalak/bzen-mongo :1.0.0	34f694325191	curl@7.68.0-1ubuntu2.19	7.68.0-1ubuntu2.25+esm5	1
rhasspy/wyoming-speech-to-phrase :1.4.3	e532f0dbc6b2	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
robiningelbrecht/strava-statistics :v5.0.0	40842cdfd616	curl@8.19.0-r0	8.20.0-r0	1
robotshop/rs-mongodb :latest	119b545823cd	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5	1
rocketchat/freeswitch :stable	cfba5c20a5cc	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
rommapp/romm :5.2.0	3512f2ca4557	curl@8.17.0-r1	8.20.0-r0	1
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
rustfs/rustfs :1.0.0-beta.1	3c2d55977829	curl@8.17.0-r1	8.20.0-r0	1
rustfs/rustfs :1.0.0-alpha.94	7d49faa88c04	curl@8.17.0-r1	8.20.0-r0	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1
santisbon/speedtest :latest	8ee3a1697227	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
scrapinghub/splash :3.4.1	a5f89bc84606	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :10.0.1	70628f29c663	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5	1
securecodebox/persistence-elastic-dashboard-importer :5.7.0	afcefbd56d61	curl@8.17.0-r1	8.20.0-r0	1
shamimkuet/nginx :1.0.2	b82902a76a04	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
shaowenchen/ops-server :latest	315444f703f4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1