CVE-2026-7168

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,202; of 17,781 indexed, latest versions
Container images: 1,136; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,781 indexed charts deploy, on 1,136 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+71 more	1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24+4 more	980
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0	8.20.0-r0	156

OSV records: ALPINE-CVE-2026-7168 DEBIAN-CVE-2026-7168 UBUNTU-CVE-2026-7168 ECHO-992e-5e26-c10d
Also known as: USN-8227-1, USN-8525-1

Charts affected

1,202 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10

Open the chart page →

18,137

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,378

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,635

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

2,604

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

12,037

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,046

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24

Open the chart page →

7,740

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

5,299

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

5,222

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,896

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5

Open the chart page →

13,145

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24

Open the chart page →

7,190

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	curl@8.19.0-r0	8.20.0-r0

Open the chart page →

1,230

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

84,444

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

15,863

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

10,817

squestchristianhuth

6.6.7

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

9,971

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

8,466

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

3,749

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15

Open the chart page →

9,724

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Open the chart page →

11,205

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24

Open the chart page →

5,398

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

38,346

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

4,854

dbrepodbrepo

1.13.3

4 of 25 See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

52,635

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,940

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	curl@7.81.0-1ubuntu1.17	7.81.0-1ubuntu1.24

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

18,376

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

5,670

elchi-stackelchi

1.13.0

1 of 10 See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24

Open the chart page →

15,383

enavenav-service-architecture

0.0.7

1 of 10 See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

15,860

enbuildenbuild

0.0.50

2 of 6 See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

31,510

roundcubeencircle360-oss

0.8.3

1 of 1 See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4

Open the chart page →

5,584

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15

Open the chart page →

11,458

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	curl@8.17.0-r1	8.20.0-r0

Open the chart page →

1,675

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm10

Open the chart page →

6,500

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9

Open the chart page →

12,840

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

12,908

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,653

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10

Open the chart page →

11,662

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-7168.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.24

Open the chart page →

5,136

Container images carrying it

1,136 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm5	79
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10	79
library/mongo :5.0.6-focal	8e70544b6c76	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	10
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	7
library/kong :3.6	a42d2b4503e7	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24	7
bitnamilegacy/rabbitmq :4.1.3 :4.1.3-debian-12-r1	9e635efba431	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	6
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	curl@8.17.0-r1	8.20.0-r0	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u15	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	5
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	5
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5	5
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	curl@8.17.0-r1	8.20.0-r0	5
bitnamilegacy/rabbitmq :4.1.2 :4.1.2-debian-12-r1	fac502149c40	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24	4
library/mongo :5.0-focal	5e15a3f014ed	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5	4
library/mongo :4.2.12-bionic	628741415fc9	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10	4
library/mongo :4.4.6	6efa05203990	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10	4
library/nginx :1.27.1	287ff321f9e3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	4
mastercloudapps/planner :v1.23	40a950b311b2	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.24	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24+esm10	4
bitnamilegacy/kubectl :latest	cd354d5b2556	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	3
codeurjc/planner :v1.0	800cf520c245	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.24	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5	3
gchq/hdfs :3.3.3	5ec58edbb2db	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	3
guacamole/guacamole :1.6.0	f344085e618b	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5	3
library/nginx :1.25 :1.25.5	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	3
natsio/nats-box :0.19.7	ffce8bd10338	curl@8.19.0-r0	8.20.0-r0	3
selenium/hub :3.141.59	02f251d48d5f	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5	3
xenondb/percona :5.7.33	0e26872a2b67	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm5	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u15	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.24	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.24	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	3
quay.io/jupyterhub/configurable-http-proxy :5.2.0	522738d5285e	curl@8.17.0-r1	8.20.0-r0	3
alpine/k8s :1.32.12	048f8d9c8cc7	curl@8.18.0-r0	8.20.0-r0	2
alpine/kubectl :1.35.4	9ccd82364762	curl@8.17.0-r1	8.20.0-r0	2
alpine/kubectl :1.35.2	ec8f734b0a10	curl@8.17.0-r1	8.20.0-r0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.24	2
apache/rocketmq :5.4.0	319cd8a81ed1	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.9	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	2
clamav/clamav :1.4.3_base	629a3050df6a	curl@8.17.0-r1	8.20.0-r0	2
dunglas/mercure :v0 :v0.24.2	916834e49961	curl@8.17.0-r1	8.20.0-r0	2
eqalpha/keydb :latest	6537505c4235	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.25+esm5	2