CVE-2026-7168

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,202; of 17,781 indexed, latest versions
Container images: 1,136; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,781 indexed charts deploy, on 1,136 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+71 more	1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24+4 more	980
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	156

OSV records: ALPINE-CVE-2026-7168 DEBIAN-CVE-2026-7168 UBUNTU-CVE-2026-7168 ECHO-992e-5e26-c10d
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,202 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10

Open the chart page →

18,137

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,378

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,635

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

2,604

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

12,037

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,046

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24

Open the chart page →

7,740

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

5,299

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

5,222

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,896

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,145

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	curl@8.19.0-r0	8.20.0-r0

Open the chart page →

1,230

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

15,863

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,817

squestchristianhuth

6.6.7

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

9,971

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

8,466

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

3,749

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15

Open the chart page →

9,724

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,205

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24

Open the chart page →

5,398

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

38,346

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,854

dbrepodbrepo

1.13.3

4 of 25 See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

52,635

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,940

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

18,376

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,670

elchi-stackelchi

1.13.0

1 of 10 See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24

Open the chart page →

15,383

enavenav-service-architecture

0.0.7

1 of 10 See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

15,860

enbuildenbuild

0.0.50

2 of 6 See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

31,510

roundcubeencircle360-oss

0.8.3

1 of 1 See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

5,584

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

11,458

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,675

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm10

Open the chart page →

6,500

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

12,840

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,908

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,653

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10

Open the chart page →

11,662

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24

Open the chart page →

5,136

Container images carrying it

1,136 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dobtc/bitcoin :25.1	a870f7cb1105	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
docmost/docmost :0.95.0	41c8d777cf23	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
docuseal/docuseal :2.4.1	7493fd7f6728	curl@8.17.0-r1	8.20.0-r0	1
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	curl@8.14.1-2	8.14.1-2+deb13u4	1
dolibarr/dolibarr :22.0.4	7ad88fc9b13c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
domainmod/domainmod :4.23.0	4017bfe4c597	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
dremio/dremio-oss :24.1.0	80ed2e3b7c43	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.24	1
drpcorg/dshackle :0.54.0	8858fae1859d	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24	1
drumsergio/genieacs :1.2.16.0	28244054e1bf	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
dserio83/velero-api :0.3.1	6b3d9115fee2	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
dserio83/velero-watchdog :0.1.8	d5deae589229	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
duck1123/cert-downloader :latest	0e29f19fa67c	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.24	1
duck1123/lnd-fileserver :latest	9d6fb247b714	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.24	1
dunglas/mercure :v0.24.0	80fcb704a741	curl@8.17.0-r1	8.20.0-r0	1
dzikoysk/reposilite :3.5.26	4128c2d7a6ba	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
eclipseaerios/management-portal-frontend :1.2.2	3a8e4cf60629	curl@8.19.0-r0	8.20.0-r0	1
elastic/apm-server :7.17.6	c7a1c63257d0	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5	1
elastictranscoder/media :627e21dc	963ab3858c6b	curl@7.58.0-2ubuntu3.10	7.58.0-2ubuntu3.24+esm10	1
elastictranscoder/media-storage :f6d861a0	26208b8c2359	curl@7.58.0-2ubuntu3.10	7.58.0-2ubuntu3.24+esm10	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm10	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm10	1
elautoestopista/aeneabot :4.2.1	125ba620d528	curl@8.17.0-r1	8.20.0-r0	1
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	1
emqx/ecp-ui :2.5.1	e33e9816f147	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
emqx/emqx :5.8.9	35b46f7aa7a0	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.25+esm5	1
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	curl@7.58.0-2ubuntu3.22	7.58.0-2ubuntu3.24+esm10	1
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	curl@8.17.0-r1	8.20.0-r0	1
escaping/core-keeper-dedicated :latest	87fa79255962	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
esphome/esphome :2026.7.4	4866347cb5b4	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
esphome/esphome :2026.8.2	85abea33854b	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
esphome/esphome :2024.3.0	9ab8cc88b28c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
esphome/esphome :2024.12.2	b2c6322700ac	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
esphome/esphome :2025.3.0	def8b6e4f517	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
espocrm/espocrm :9.3.10	1b5a24504ed9	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
etherpad/etherpad :2.7.2	b723fe5f2594	curl@8.17.0-r1	8.20.0-r0	1
ethpandaops/assertoor :latest	1efa2fba6711	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
factoriotools/factorio :2.0.67-rootless	f7909f7361d6	curl@8.14.1-2	8.14.1-2+deb13u4	1
falcosecurity/event-generator :latest	932956d86c99	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	curl@8.19.0-r0	8.20.0-r0	1
firefart/requesttracker :5.0.4	0d6249906d8c	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	1
fireflyiii/core :version-6.6.6	ae69fdd95cde	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
flanksource/batch-runner :v1.0.44	689687a7cf95	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	1