StackRadar

CVE-2026-80229

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
840
of 17,790 indexed, latest versions
Container images
648
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 840 of 17,790 indexed charts deploy, on 648 images.

Affected packageAffected versionsFixed inImages
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.15.0-r4+9 more8.22.0-r0359
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+12 moreno fix listed289
OSV records
ALPINE-CVE-2026-80229CGA-7v23-69r9-9qwjDEBIAN-CVE-2026-80229UBUNTU-CVE-2026-80229
Also known as
CGA-8mx8-358x-g636

Charts affected

840 by stars
ChartLatestAffected imagesRadar Score
trivytrivy-operator0.26.01 of 1See more

trivy trivy-operator 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

439
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
curl@8.18.0-1ubuntu2.4
no fix listed

Open the chart page →

1,293
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,556
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
bytebase/bytebase:latest9fcde38c0d5f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

443
rustfscloudpirates-rustfsVerified publisher0.11.41 of 1See more

rustfs cloudpirates-rustfs 0.11.4

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-beta.13c2d55977829
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

886
codefreshcodefresh-onpremOfficialVerified publisher2.12.142 of 42See more

codefresh codefresh-onprem 2.12.14

2 of the 42 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
curl@8.21.0-r0
8.22.0-r0
quay.io/codefresh/dind:3.0.250885ab519dac
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

15,093
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
curl@8.14.1-2+deb13u4
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,852
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,752
budibasebudibase0.0.0-master3 of 7See more

budibase budibase 0.0.0-master

3 of the 7 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
curl@8.21.0-r0
8.22.0-r0
budibase/proxy:3.41.38d780b6ee602
curl@8.14.1-2+deb13u4
no fix listed
budibase/worker:3.41.3de5e2e560ce8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

10,856
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

1,261
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

1,386
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
curl@8.18.0-1ubuntu2.4
no fix listed

Open the chart page →

3,124
caddyalekcVerified publisher0.9.01 of 1See more

caddy alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/caddy:2.11.4-alpine5f5c8640aae0
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

853
umamichristianhuthVerified publisher7.13.11 of 2See more

umami christianhuth 7.13.1

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,369
dependabot-gitlabdependabot-gitlabVerified publisher6.3.02 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

2 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/postgres:18.6-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,641
nextcloudgroundhog2k0.22.61 of 3See more

nextcloud groundhog2k 0.22.6

1 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4:34.0.4-apache8418c398d767
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,837
n8nhelmforgeVerified publisher2.0.11 of 2See more

n8n helmforge 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
n8nio/n8n:2.39.5cfa04788a34a
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

799
syncthingk8s-home-lab-repo5.2.01 of 1See more

syncthing k8s-home-lab-repo 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,230
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
curl@8.14.1-2
no fix listed

Open the chart page →

5,702
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,354
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

30,504
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
curl@8.12.0-r1
8.22.0-r0

Open the chart page →

17,370
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,553
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
curl@8.14.1-2+deb13u4
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,575
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,139
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,650
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,139
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,948
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

227
kubernetes-ingresshaproxytechVerified publisher1.54.11 of 1See more

kubernetes-ingress haproxytech 1.54.1

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:3.2.156185ab228aa6
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

400
docmosthelmforgeVerified publisher1.2.121 of 4See more

docmost helmforge 1.2.12

1 of the 4 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,113
piholehelmforgeVerified publisher2.0.131 of 1See more

pihole helmforge 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

571
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,215
mercuremercureOfficialVerified publisher0.24.01 of 1See more

mercure mercure 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.080fcb704a741
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,416
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,432
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

13,523
agonesagones1.60.01 of 5See more

agones agones 1.60.0

1 of the 5 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,122
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,402
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

8,923
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,008
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

17,413
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

398
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

551
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,186
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,626
adminerectobitVerified publisher0.3.11 of 1See more

adminer ectobit 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
library/adminer:6.0.1f742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

140
flannelflannel0.28.91 of 2See more

flannel flannel 0.28.9

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

616
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
redocly/redoc:latest2e26bb660574
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

3,282
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
curl@8.20.0-r1
8.22.0-r0
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

14,112
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-80229.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,917

Container images carrying it

648 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-80229.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.