CVE-2026-7168

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,204; of 17,787 indexed, latest versions
Container images: 1,139; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,204 of 17,787 indexed charts deploy, on 1,139 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+71 more	1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24+4 more	982
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	157

OSV records: ALPINE-CVE-2026-7168 DEBIAN-CVE-2026-7168 UBUNTU-CVE-2026-7168 ECHO-992e-5e26-c10d
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,204 by stars

Chart

Latest

Affected images

Radar Score

argocdtwomartens

0.1.1

1 of 3 See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v2.8.6	acaf37352569	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.24

Open the chart page →

10,355

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10

Open the chart page →

18,149

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,428

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,683

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

2,615

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,936

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,061

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24

Open the chart page →

7,790

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

5,301

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

5,231

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,946

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,199

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

13,513

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,239

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,108

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,239

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	curl@8.19.0-r0	8.20.0-r0

Open the chart page →

1,230

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,678

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,678

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

3,713

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

15,995

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,873

squestchristianhuth

6.6.7

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,008

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

8,524

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

3,749

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

10,076

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15

Open the chart page →

9,736

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,236

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

12,924

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24

Open the chart page →

5,438

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

38,424

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,909

dbrepodbrepo

1.13.3

4 of 25 See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

50,281

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,978

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24

Open the chart page →

10,884

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

18,402

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,724

elchi-stackelchi

1.13.0

1 of 10 See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24

Open the chart page →

15,501

enavenav-service-architecture

0.0.7

1 of 10 See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

15,865

enbuildenbuild

0.0.50

2 of 6 See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

31,572

roundcubeencircle360-oss

0.8.3

1 of 1 See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

5,615

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

11,483

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,676

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm10

Open the chart page →

6,515

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

12,988

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,914

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,438

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5

Open the chart page →

35,464

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,717

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10

Open the chart page →

11,684

Container images carrying it

1,139 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/radarr :6.0.4	c8a55bd83672	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	curl@7.58.0-2ubuntu3.14	7.58.0-2ubuntu3.24+esm10	1
ghcr.io/linuxserver/syslog-ng :4.10.2	47fae7f540f9	curl@8.19.0-r0	8.20.0-r0	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
ghcr.io/manyfold3d/manyfold :0.136.0	d14ca4d82475	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/marcuwynu23/vite-app-sample :latest	21247f2b97c4	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/mattn/picoclaw :latest	517556c8b144	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/mkutlak/alluredeck-ui :0.41.0	c19509b1b336	curl@8.19.0-r0	8.20.0-r0	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	curl@8.14.1-2	8.14.1-2+deb13u4	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24	1
ghcr.io/music-assistant/server :2.7.5	3522e8a7a8f0	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/mydecisive/octant-ui :0.0.1-testing	61e4066b22fb	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-03 :0.0.0-2026-08-17	3e56bdd1b90d	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/openclaw/openclaw :2026.6.10	af7ea052cf21	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/open-telemetry/demo :3.0.0-telemetry-docs	3519858704e7	curl@8.19.0-r0	8.20.0-r0	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	curl@8.5.0-2ubuntu10.4	8.5.0-2ubuntu10.9	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	curl@8.17.0-r1	8.20.0-r0	1
ghcr.io/port-labs/port-agent :v0.8.12	c92d1e223f5c	curl@1:8.14.1-2+deb13u3+e1	1:8.14.1-2+deb13u3+e2	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	curl@8.5.0-2ubuntu10.8	8.5.0-2ubuntu10.9	1