StackRadar

CVE-2026-80231

High

Advisory

Published 6 Sept 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,781 indexed, latest versions
Container images
345
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 345 images.

Affected packageAffected versionsFixed inImages
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+3 more8.22.0-r0345
OSV records
ALPINE-CVE-2026-80231
Trending
Rank 26 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,444
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,809
sonarrloeken-at-homeVerified publisher4.0.171 of 1See more

sonarr loeken-at-home 4.0.17

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.17b940520a2236
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

866
elasticvuelogic3579Verified publisher1.15.01 of 1See more

elasticvue logic3579 1.15.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
cars10/elasticvue:1.15.0efddf4fa0fd8
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,085
nubladolsst-sqre0.9.231 of 5See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:latest69a7170eeeda
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

5,786
arrluiscajl1.0.91 of 2See more

arr luiscajl 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

396
sonarrluiscajl0.1.171 of 1See more

sonarr luiscajl 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

320
tautulliluiscajl0.0.151 of 1See more

tautulli luiscajl 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/tautulli:latest5ce8c5f82f91
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

255
bazarrm0nsterrr-bazarrVerified publisher2.3.01 of 1See more

bazarr m0nsterrr-bazarr 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

898
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.34fcf15b7f265
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

756
decap-cmsm11sVerified publisher0.3.151 of 1See more

decap-cms m11s 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
m11s/decap-cms:0.2.11-s30cd6810c9885
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,151
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,706
ejabberdmartialblog0.3.11 of 1See more

ejabberd martialblog 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/processone/ejabberd:latest5aeb0faa39cf
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

385
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
openebs/provisioner-localpv:4.6.099f5116f5cb8
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

21,064
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,818
profilarrmedia-servarrVerified publisher2.2.01 of 1See more

profilarr media-servarr 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

337
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

11,689
mo-backupmogeniusOfficialVerified publisher1.0.291 of 1See more

mo-backup mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

813
mo-backup-mysqlmogeniusVerified publisher1.0.291 of 1See more

mo-backup-mysql mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

813
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,521
radicalemt1905024.1.11 of 1See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,546
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.0.328f263fe06f7
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

4,016
ingress-nginxmxytest4.15.11 of 2See more

ingress-nginx mxytest 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,547
szurubooru-clientmy0nVerified publisher0.3.11 of 1See more

szurubooru-client my0n 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
szurubooru/client:2.5880a53ca446d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

370
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

720
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,038
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
dependencytrack/frontend:latest8854a8320475
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,465
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,132
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,798
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/mariadb:latestcb61ec331e80
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

27,465
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,346
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,109
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,219
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

2,726
openobserveopenobserve0.92.21 of 6See more

openobserve openobserve 0.92.2

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

3,157
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,038
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

71,208
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
alpine/git:latest6f3b5029566d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,753
loki-standaloneot-container-kit1.0.21 of 5See more

loki-standalone ot-container-kit 1.0.2

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,580
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,288
stk-fluent-bit-loki-s3paxtecnologia0.2.01 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,739
picoclawpicoclawVerified publisher0.1.261 of 1See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mattn/picoclaw:latest517556c8b144
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,556
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/httpd:alpine1b766f17b840
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

6,565
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,270
powerdnspuckpuck2.0.02 of 4See more

powerdns puckpuck 2.0.0

2 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/adminer:51596436ca855
curl@8.21.0-r0
8.22.0-r0
library/postgres:18-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,616
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

6,525
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

895
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,302

Container images carrying it

345 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
espocrm/espocrm:10.0.8-fpm-alpine4bd92daf5f0c
curl@8.20.0-r0
8.22.0-r0
1
etherpad/etherpad:latest6020e7b57f4b
curl@8.21.0-r0
8.22.0-r0
1
etherpad/etherpad:2.7.2b723fe5f2594
curl@8.17.0-r1
8.22.0-r0
1
filebrowser/filebrowser:v2.63.15-s6dbac07403040
curl@8.19.0-r0
8.22.0-r0
1
folioci/mod-graphql:latestf0655a6a08fd
curl@8.20.0-r0
8.22.0-r0
1
fosrl/pangolin:1.13.0c32ad797ab96
curl@8.17.0-r1
8.22.0-r0
1
garethgeorge/backrest:v1.14.1b85297975428
curl@8.21.0-r0
8.22.0-r0
1
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
curl@8.20.0-r1
8.22.0-r0
1
gitea/act_runner:nightly7940221bcfc9
curl@8.17.0-r1
8.22.0-r0
1
gitea/act_runner:0.3.1c2a169c5e998
curl@8.17.0-r1
8.22.0-r0
1
gitea/gitea:1.27.3-rootless1c17ecaead42
curl@8.21.0-r0
8.22.0-r0
1
gitea/gitea:1.27.134e3f6b75f5c
curl@8.21.0-r0
8.22.0-r0
1
gitea/gitea:1.26.27d13848af126
curl@8.19.0-r0
8.22.0-r0
1
gitea/gitea:1.27.387a67ee09d3a
curl@8.21.0-r0
8.22.0-r0
1
glarad/mcp-management-portal-clr:0.6.8807e453354a7
curl@8.21.0-r0
8.22.0-r0
1
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
curl@8.21.0-r0
8.22.0-r0
1
gomods/athens:v0.17.10f61d1e62359
curl@8.17.0-r1
8.22.0-r0
1
gomods/athens:v0.18.197cc113b34b0
curl@8.20.0-r0
8.22.0-r0
1
google/cloud-sdk:alpinef7d3e6d6d4f4
curl@8.20.0-r0
8.22.0-r0
1
grafana/grafana:13.0.10f86bada30d6
curl@8.17.0-r1
8.22.0-r0
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
curl@8.17.0-r1
8.22.0-r0
1
grafana/grafana:13.1.3ab5cb380e3ff
curl@8.21.0-r0
8.22.0-r0
1
grafana/grafana:12.3.2ba93c9d192e5
curl@8.17.0-r1
8.22.0-r0
1
graviteeio/ae-engine:3.0.24140932887e0
curl@8.20.0-r0
8.22.0-r0
1
haproxytech/haproxy-alpine:3.4.37a3ef2dd8b5b
curl@8.20.0-r0
8.22.0-r0
1
haproxytech/haproxy-unified-gateway:1.0.7b9bffe2d0fd1
curl@8.20.0-r0
8.22.0-r0
1
haproxytech/kubernetes-ingress:3.2.14d90f628d659e
curl@8.20.0-r0
8.22.0-r0
1
hazelcast/hazelcast:latestf086bf0ecb23
curl@8.17.0-r1
8.22.0-r0
1
heartexlabs/label-studio:latestaa461572e8f9
curl@8.17.0-r1
8.22.0-r0
1
helmforge/openreel-video:v0.5.07ba0d47b943f
curl@8.17.0-r1
8.22.0-r0
1
helmforge/strapi-base:5.52.270e9143d6d92
curl@8.21.0-r0
8.22.0-r0
1
homeassistant/home-assistant:2026.75a531753cea9
curl@8.20.0-r1
8.22.0-r0
1
hoppscotch/hoppscotch:2026.8.0d50725df661f
curl@8.21.0-r0
8.22.0-r0
1
huacnlee/gobackup:v3.1.1560be93229a5
curl@8.21.0-r0
8.22.0-r0
1
hwdsl2/ipsec-vpn-server:latest2e939ffe5913
curl@8.20.0-r0
8.22.0-r0
1
jesec/flood:4.14.3c887dad96b40
curl@8.20.0-r1
8.22.0-r0
1
jhonbrownn/elchi:v1.5.146936e4f1caeb
curl@8.21.0-r0
8.22.0-r0
1
jitesoft/kubectl:latest9996dd28914f
curl@8.21.0-r0
8.22.0-r0
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
curl@8.20.0-r0
8.22.0-r0
1
kanboard/kanboard:v1.2.548df6c4339134
curl@8.21.0-r0
8.22.0-r0
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
curl@8.17.0-r1
8.22.0-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
curl@8.17.0-r1
8.22.0-r0
1
kubeshark/front:v53.4cc7f07b99fac
curl@8.21.0-r0
8.22.0-r0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
curl@8.17.0-r1
8.22.0-r0
1
lbenicio/stremio-web:latest732f9003de33
curl@8.17.0-r1
8.22.0-r0
1
library/adminer:51596436ca855
curl@8.21.0-r0
8.22.0-r0
1
library/adminer:5.4.2-standalone983261ecc40a
curl@8.21.0-r0
8.22.0-r0
1
library/caddy:latest13ba145cba2f
curl@8.19.0-r0
8.22.0-r0
1
library/caddy:2.11.2-alpine834468128c76
curl@8.17.0-r1
8.22.0-r0
1
library/docker:29.7.2-dind3ef33f2e220b
curl@8.21.0-r0
8.22.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.