StackRadar

CVE-2026-80231

High

Advisory

Published 6 Sept 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,781 indexed, latest versions
Container images
345
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 345 images.

Affected packageAffected versionsFixed inImages
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+3 more8.22.0-r0345
OSV records
ALPINE-CVE-2026-80231
Trending
Rank 26 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
gitlab-runnerwenerme0.92.11 of 1See more

gitlab-runner wenerme 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

904
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,889
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,639
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
curl@8.21.0-r0
8.22.0-r0
ghcr.io/shesselink81/wordpress-alpine:7.1.0.032ace450bcd9
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,990
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,042
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

878
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,571
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:18.4-alpine3.249a8afca54e78
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

7,849

Container images carrying it

345 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
curl@8.20.0-r1
8.22.0-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.22.0-r0
2
ghcr.io/home-operations/radarr:6.4.3:6.4.3.106450ebb4ae26ee9
curl@8.21.0-r0
8.22.0-r0
2
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
curl@8.21.0-r0
8.22.0-r0
2
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
curl@8.21.0-r0
8.22.0-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.22.0-r0
2
ajilaag/clamav-rest:latestad689c7b75b1
curl@8.21.0-r0
8.22.0-r0
1
alpine/curl:8.21.0a1c44bab54d8
curl@8.21.0-r0
8.22.0-r0
1
alpine/helm:4.1.0905a068da431
curl@8.18.0-r0
8.22.0-r0
1
alpine/k8s:1.36.244ef4942e171
curl@8.20.0-r1
8.22.0-r0
1
alpine/k8s:1.35.6b7a12c5ddf26
curl@8.20.0-r1
8.22.0-r0
1
alpine/k8s:1.35.5d870622d0040
curl@8.20.0-r1
8.22.0-r0
1
alpine/kubectl:1.36.01ee9df6316d4
curl@8.17.0-r1
8.22.0-r0
1
alpine/kubectl:1.35.0862d86046bbc
curl@8.17.0-r1
8.22.0-r0
1
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.22.0-r0
1
apache/answer:2.0.2a0d71b0e30a5
curl@8.21.0-r0
8.22.0-r0
1
appwrite/appwrite:1.9.01aaa70127114
curl@8.17.0-r1
8.22.0-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
curl@8.19.0-r0
8.22.0-r0
1
appwrite/console:8.7.383dcdc8492ac6
curl@8.17.0-r1
8.22.0-r0
1
aquasec/trivy:0.74.062b1e65e8869
curl@8.21.0-r0
8.22.0-r0
1
aquasec/trivy:0.69.3bcc376de8d77
curl@8.17.0-r1
8.22.0-r0
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
curl@8.17.0-r1
8.22.0-r0
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
curl@8.17.0-r1
8.22.0-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.08f422b18d171
curl@8.17.0-r1
8.22.0-r0
1
budibase/apps:3.41.344fe6feab985
curl@8.21.0-r0
8.22.0-r0
1
budibase/worker:3.41.3de5e2e560ce8
curl@8.21.0-r0
8.22.0-r0
1
byjg/easy-haproxy:6.1.1230fdb7b00ae
curl@8.20.0-r1
8.22.0-r0
1
bytebase/bytebase:latest9fcde38c0d5f
curl@8.21.0-r0
8.22.0-r0
1
caligari/proxy-ipsec:latest9d537a9c883d
curl@8.21.0-r0
8.22.0-r0
1
cars10/elasticvue:1.15.0efddf4fa0fd8
curl@8.17.0-r1
8.22.0-r0
1
casbin/casdoor:3.62.17729da148c61
curl@8.19.0-r0
8.22.0-r0
1
casbin/casdoor:3.62.0e08231f16c00
curl@8.19.0-r0
8.22.0-r0
1
clamav/clamavd06c1d6a451d
curl@8.21.0-r0
8.22.0-r0
1
clamav/clamav:1.0dd0d9cc746af
curl@8.20.0-r1
8.22.0-r0
1
decisionrules/business-intelligence:latest1135a6d4f09b
curl@8.21.0-r0
8.22.0-r0
1
decisionrules/client:latest-rootless8c5e14b74a8b
curl@8.21.0-r0
8.22.0-r0
1
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.22.0-r0
1
dependencytrack/frontend:latest8854a8320475
curl@8.19.0-r0
8.22.0-r0
1
devkrishan001/frontend:latesta0ad60836e6b
curl@8.19.0-r0
8.22.0-r0
1
digitalist/matomo:5.12.0bc4aeeaea769
curl@8.21.0-r0
8.22.0-r0
1
docuseal/docuseal:2.4.17493fd7f6728
curl@8.17.0-r1
8.22.0-r0
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
curl@8.20.0-r0
8.22.0-r0
1
dunglas/mercure:v0.24.080fcb704a741
curl@8.17.0-r1
8.22.0-r0
1
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
curl@8.19.0-r0
8.22.0-r0
1
elautoestopista/aeneabot:4.2.1125ba620d528
curl@8.17.0-r1
8.22.0-r0
1
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
curl@8.21.0-r0
8.22.0-r0
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
curl@8.20.0-r0
8.22.0-r0
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.