CVE-2026-7168

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,202; of 17,781 indexed, latest versions
Container images: 1,136; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,781 indexed charts deploy, on 1,136 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+71 more	1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24+4 more	980
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	156

OSV records: ALPINE-CVE-2026-7168 DEBIAN-CVE-2026-7168 UBUNTU-CVE-2026-7168 ECHO-992e-5e26-c10d
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,202 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10

Open the chart page →

18,137

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,378

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,635

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

2,604

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

12,037

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,046

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24

Open the chart page →

7,740

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

5,299

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

5,222

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,896

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,145

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	curl@8.19.0-r0	8.20.0-r0

Open the chart page →

1,230

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

15,863

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,817

squestchristianhuth

6.6.7

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

9,971

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

8,466

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

3,749

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15

Open the chart page →

9,724

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,205

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24

Open the chart page →

5,398

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

38,346

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,854

dbrepodbrepo

1.13.3

4 of 25 See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

52,635

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,940

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

18,376

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,670

elchi-stackelchi

1.13.0

1 of 10 See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24

Open the chart page →

15,383

enavenav-service-architecture

0.0.7

1 of 10 See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

15,860

enbuildenbuild

0.0.50

2 of 6 See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

31,510

roundcubeencircle360-oss

0.8.3

1 of 1 See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

5,584

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

11,458

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,675

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm10

Open the chart page →

6,500

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

12,840

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,908

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,653

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10

Open the chart page →

11,662

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24

Open the chart page →

5,136

Container images carrying it

1,136 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
aktosecurity/data-ingestion-service	213aded7adc5	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
alazidis/stornx :1.1.1	602d4f7f090c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
allegroai/clearml :2.0.0-613	713ae38f7daf	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10	1
alpine/helm :4.1.0	905a068da431	curl@8.18.0-r0	8.20.0-r0	1
alpine/kubectl :1.36.0	1ee9df6316d4	curl@8.17.0-r1	8.20.0-r0	1
alpine/kubectl :1.35.0	862d86046bbc	curl@8.17.0-r1	8.20.0-r0	1
alpine/kubectl :1.35.3	c4a11ae9a1cb	curl@8.17.0-r1	8.20.0-r0	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	curl@8.5.0-2ubuntu10.4	8.5.0-2ubuntu10.9	1
anguda/ant-media :2.5	c435285fc241	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm5	1
antrea/antrea-ui-frontend :v0.8.0	ee9686bcefb8	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
anujdatar/cups :25.07.01	685df04a643b	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
apache/activemq-artemis :2.44.0	0305c26f19ed	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
apache/activemq-artemis :2.37.0	bae523439ee3	curl@8.5.0-2ubuntu10.2	8.5.0-2ubuntu10.9	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
apache/airflow :2.8.1	e5560ad0b86e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.24	1
apache/hertzbeat :1.8.0	75d48a62748f	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
apache/iotdb :0.13.3-node	afa47bf1692a	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5	1
apache/nifi-registry :1.27.0	63b8e3e40742	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.24	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
apachepulsar/pulsar :3.0.7	9c9947de139d	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24	1
apachepulsar/pulsar :2.9.0	d056c89b7131	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
apachepulsar/pulsar :2.8.2	d538416d5afe	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	1
apache/rocketmq :5.3.0	434d8398f996	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.9	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
apache/skywalking-ui :9.2.0	295f1dc87d98	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24	1
apache/skywalking-ui :8.9.1	80530f0308a5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
apache/superset :4.0.1	ab9467fd712c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
appwrite/appwrite :1.9.0	1aaa70127114	curl@8.17.0-r1	8.20.0-r0	1
appwrite/appwrite :1.9.6	adc7d0e7ec23	curl@8.19.0-r0	8.20.0-r0	1
appwrite/console :8.7.38	3dcdc8492ac6	curl@8.17.0-r1	8.20.0-r0	1
aquasec/trivy :0.69.3	bcc376de8d77	curl@8.17.0-r1	8.20.0-r0	1
aristidetm/basic-notebook :3.6.5	469dbc951224	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
arunvelsriram/utils :latest	655ad18fd8d6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5	1
assistiot/location_processing :latest	e9bae124095f	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.24	1
assistiot/open_api_backend :1.1.2	30812ba93555	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	curl@7.68.0-1ubuntu2.19	7.68.0-1ubuntu2.25+esm5	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm5	1