StackRadar

CVE-2026-80231

High

Advisory

Published 6 Sept 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,781 indexed, latest versions
Container images
345
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 345 images.

Affected packageAffected versionsFixed inImages
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+3 more8.22.0-r0345
OSV records
ALPINE-CVE-2026-80231
Trending
Rank 26 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.09505c64720af
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

781
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

6,859
caddy-reverse-proxyromholdings0.10.11 of 1See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/caddy:latestdf7f1c2fb114
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

845
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,370
gitearubxkubeVerified publisher1.2.31 of 1See more

gitea rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
gitea/gitea:1.27.134e3f6b75f5c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

591
sonarrrubxkubeVerified publisher1.4.21 of 1See more

sonarr rubxkube 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.194d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

320
spindlerubxkubeVerified publisher0.1.12 of 2See more

spindle rubxkube 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/docker:29.7.2-dind3ef33f2e220b
curl@8.21.0-r0
8.22.0-r0
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,438
tranquil-pdsrubxkubeVerified publisher0.2.01 of 2See more

tranquil-pds rubxkube 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

634
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
curl@8.18.0-r0
8.22.0-r0

Open the chart page →

5,819
piholesantisbon0.2.01 of 1See more

pihole santisbon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
pihole/pihole:latestf7d1be836e3b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

571
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

12,668
cinnyappschoenwald1.0.111 of 1See more

cinnyapp schoenwald 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

804
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,133
synapse-adminschoenwald1.0.11 of 1See more

synapse-admin schoenwald 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,802
vaultwardenschoolguys-helmcharts0.3.91 of 1See more

vaultwarden schoolguys-helmcharts 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1-alpineb094afed4ed5
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

289
persistence-elasticsecurecodebox-persistence-elastic5.7.01 of 1See more

persistence-elastic securecodebox-persistence-elastic 5.7.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
securecodebox/persistence-elastic-dashboard-importer:5.7.0afcefbd56d61
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

885
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

7,708
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,690
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,674
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,321
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,321
frontendsignalen4.24.01 of 1See more

frontend signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
signalen/frontend:2.27.81ab79cb7fe21
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,161
pgadminsikalabs0.1.01 of 2See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

398
ipsecsinextraVerified publisher0.6.41 of 1See more

ipsec sinextra 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/ipsec:5.236f4e651d1fe
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

683
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,437
ingress-nginxsoftonic4.15.11 of 2See more

ingress-nginx softonic 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,547
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

4,974
buildkitsomaz94Verified publisher0.1.41 of 1See more

buildkit somaz94 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.06c2fa84a6b61
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

722
sqs-to-snssqs-to-sns2.0.151 of 1See more

sqs-to-sns sqs-to-sns 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
udhos/sqs-to-sns:2.0.15cf7979da82e1
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

956
hazelcaststakaterVerified publisher1.0.21 of 1See more

hazelcast stakater 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
hazelcast/hazelcast:latestf086bf0ecb23
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,702
anna-nginxstatic-nginx1.31.111 of 2See more

anna-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

416
hesselinkme-nginxstatic-nginx1.31.111 of 2See more

hesselinkme-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

416
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,025
mybbsudermanjr0.1.01 of 3See more

mybb sudermanjr 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
mybb/mybb:1.8f2a54bce31c5
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,157
qbittorrentsudo-kraken-qbittorrentVerified publisher5.1.51 of 2See more

qbittorrent sudo-kraken-qbittorrent 5.1.5

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.1.4bb82ad6668f8
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,129
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,396
poscatechnostructuresVerified publisher1.0.01 of 1See more

posca technostructures 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,115
mrasiftech-thinker1.0.41 of 1See more

mrasif tech-thinker 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,043
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
gitea/act_runner:nightly7940221bcfc9
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

4,212
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,825
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

6,973
hub-managertraefikVerified publisher1.0.01 of 1See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

634
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,675
ats-ingresstrafficserver-ingress-controller0.1.01 of 1See more

ats-ingress trafficserver-ingress-controller 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/apache/ats-ingress:latest2d4d776f6362
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

414
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

5,550
rstudiouninettsigma21.3.61 of 3See more

rstudio uninettsigma2 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
sigma2as/rstudio-proxy:20260818-1df6a44d899e81ee3eb
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

846
sparkuninettsigma21.1.41 of 3See more

spark uninettsigma2 1.1.4

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/nginx:1.31.3-alpine4a73073bd557
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

846
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
zimengxiong/excalidash-frontend:0.4.27242629350b06
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,620
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

45,239
argocd-image-updaterwenerme1.3.11 of 1See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

718

Container images carrying it

345 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
curl@8.20.0-r1
8.22.0-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.22.0-r0
2
ghcr.io/home-operations/radarr:6.4.3:6.4.3.106450ebb4ae26ee9
curl@8.21.0-r0
8.22.0-r0
2
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
curl@8.21.0-r0
8.22.0-r0
2
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
curl@8.21.0-r0
8.22.0-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.22.0-r0
2
ajilaag/clamav-rest:latestad689c7b75b1
curl@8.21.0-r0
8.22.0-r0
1
alpine/curl:8.21.0a1c44bab54d8
curl@8.21.0-r0
8.22.0-r0
1
alpine/helm:4.1.0905a068da431
curl@8.18.0-r0
8.22.0-r0
1
alpine/k8s:1.36.244ef4942e171
curl@8.20.0-r1
8.22.0-r0
1
alpine/k8s:1.35.6b7a12c5ddf26
curl@8.20.0-r1
8.22.0-r0
1
alpine/k8s:1.35.5d870622d0040
curl@8.20.0-r1
8.22.0-r0
1
alpine/kubectl:1.36.01ee9df6316d4
curl@8.17.0-r1
8.22.0-r0
1
alpine/kubectl:1.35.0862d86046bbc
curl@8.17.0-r1
8.22.0-r0
1
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.22.0-r0
1
apache/answer:2.0.2a0d71b0e30a5
curl@8.21.0-r0
8.22.0-r0
1
appwrite/appwrite:1.9.01aaa70127114
curl@8.17.0-r1
8.22.0-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
curl@8.19.0-r0
8.22.0-r0
1
appwrite/console:8.7.383dcdc8492ac6
curl@8.17.0-r1
8.22.0-r0
1
aquasec/trivy:0.74.062b1e65e8869
curl@8.21.0-r0
8.22.0-r0
1
aquasec/trivy:0.69.3bcc376de8d77
curl@8.17.0-r1
8.22.0-r0
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
curl@8.17.0-r1
8.22.0-r0
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
curl@8.17.0-r1
8.22.0-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.08f422b18d171
curl@8.17.0-r1
8.22.0-r0
1
budibase/apps:3.41.344fe6feab985
curl@8.21.0-r0
8.22.0-r0
1
budibase/worker:3.41.3de5e2e560ce8
curl@8.21.0-r0
8.22.0-r0
1
byjg/easy-haproxy:6.1.1230fdb7b00ae
curl@8.20.0-r1
8.22.0-r0
1
bytebase/bytebase:latest9fcde38c0d5f
curl@8.21.0-r0
8.22.0-r0
1
caligari/proxy-ipsec:latest9d537a9c883d
curl@8.21.0-r0
8.22.0-r0
1
cars10/elasticvue:1.15.0efddf4fa0fd8
curl@8.17.0-r1
8.22.0-r0
1
casbin/casdoor:3.62.17729da148c61
curl@8.19.0-r0
8.22.0-r0
1
casbin/casdoor:3.62.0e08231f16c00
curl@8.19.0-r0
8.22.0-r0
1
clamav/clamavd06c1d6a451d
curl@8.21.0-r0
8.22.0-r0
1
clamav/clamav:1.0dd0d9cc746af
curl@8.20.0-r1
8.22.0-r0
1
decisionrules/business-intelligence:latest1135a6d4f09b
curl@8.21.0-r0
8.22.0-r0
1
decisionrules/client:latest-rootless8c5e14b74a8b
curl@8.21.0-r0
8.22.0-r0
1
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.22.0-r0
1
dependencytrack/frontend:latest8854a8320475
curl@8.19.0-r0
8.22.0-r0
1
devkrishan001/frontend:latesta0ad60836e6b
curl@8.19.0-r0
8.22.0-r0
1
digitalist/matomo:5.12.0bc4aeeaea769
curl@8.21.0-r0
8.22.0-r0
1
docuseal/docuseal:2.4.17493fd7f6728
curl@8.17.0-r1
8.22.0-r0
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
curl@8.20.0-r0
8.22.0-r0
1
dunglas/mercure:v0.24.080fcb704a741
curl@8.17.0-r1
8.22.0-r0
1
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
curl@8.19.0-r0
8.22.0-r0
1
elautoestopista/aeneabot:4.2.1125ba620d528
curl@8.17.0-r1
8.22.0-r0
1
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
curl@8.21.0-r0
8.22.0-r0
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
curl@8.20.0-r0
8.22.0-r0
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.