StackRadar

CVE-2026-80231

High

Advisory

Published 6 Sept 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,781 indexed, latest versions
Container images
345
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 345 images.

Affected packageAffected versionsFixed inImages
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+3 more8.22.0-r0345
OSV records
ALPINE-CVE-2026-80231
Trending
Rank 26 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
gitlab-runnerwenerme0.92.11 of 1See more

gitlab-runner wenerme 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

904
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,889
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,639
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
curl@8.21.0-r0
8.22.0-r0
ghcr.io/shesselink81/wordpress-alpine:7.1.0.032ace450bcd9
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,990
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,042
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

878
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,571
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:18.4-alpine3.249a8afca54e78
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

7,849

Container images carrying it

345 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
curl@8.21.0-r0
8.22.0-r0
1
library/nginx:1.31.0-alpine2f07d83bf561
curl@8.19.0-r0
8.22.0-r0
1
library/nginx:1.31.3-alpine4a73073bd557
curl@8.21.0-r0
8.22.0-r0
1
library/nginx:1.29.8-alpine5616878291a2
curl@8.17.0-r1
8.22.0-r0
1
library/nginx:1.28-alpinea8b39bd9cf0f
curl@8.17.0-r1
8.22.0-r0
1
library/php:8-fpm-alpine22a4c414bb8e
curl@8.21.0-r0
8.22.0-r0
1
library/postgres:18.3-alpine54451ecb8ab3
curl@8.17.0-r1
8.22.0-r0
1
library/postgres:18.4-alpine3.249a8afca54e78
curl@8.21.0-r0
8.22.0-r0
1
librenms/librenms:26.8.28194a4a9ff49
curl@8.20.0-r0
8.22.0-r0
1
linuxserver/bazarr:latesta20fb11a440d
curl@8.20.0-r0
8.22.0-r0
1
linuxserver/bookstack:26.05.202605282ebf97852661
curl@8.19.0-r0
8.22.0-r0
1
linuxserver/deluge:2.2.09505c64720af
curl@8.20.0-r0
8.22.0-r0
1
linuxserver/heimdall:2.8.3287e48152967
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/lidarr:3.1.0c74c32408fdf
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/mariadb:latestcb61ec331e80
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
curl@8.20.0-r0
8.22.0-r0
1
linuxserver/prowlarr:version-2.4.0.53974fd7a166c8f4
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/prowlarr:2.5.291844fa2c927
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
curl@8.19.0-r0
8.22.0-r0
1
linuxserver/qbittorrent:latesta00b6a597a38
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/qbittorrent:5.2.2dd24a5f3db32
curl@8.19.0-r0
8.22.0-r0
1
linuxserver/radarr:version-6.2.1.10461549c4a075496
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/sonarr:version-4.0.17.295202bc962946fe
curl@8.19.0-r0
8.22.0-r0
1
linuxserver/tautulli:latest5ce8c5f82f91
curl@8.21.0-r0
8.22.0-r0
1
linuxserver/wireguard:latestbf03578ef731
curl@8.21.0-r0
8.22.0-r0
1
loeken/sonarr:4.0.17b940520a2236
curl@8.19.0-r0
8.22.0-r0
1
m11s/decap-cms:0.2.11-s30cd6810c9885
curl@8.19.0-r0
8.22.0-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
curl@8.20.0-r0
8.22.0-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
curl@8.20.0-r0
8.22.0-r0
1
metabase/metabase:v0.63.1.124f150effd484
curl@8.20.0-r0
8.22.0-r0
1
metabase/metabase:v0.63.16c6dd0c6a7861
curl@8.21.0-r0
8.22.0-r0
1
moby/buildkit:v0.33.06c2fa84a6b61
curl@8.20.0-r0
8.22.0-r0
1
moby/buildkit:v0.33.0-rootless80b15f0735e8
curl@8.20.0-r0
8.22.0-r0
1
moby/buildkit:v0.31.0a095b3d11ce1
curl@8.19.0-r0
8.22.0-r0
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
curl@8.17.0-r1
8.22.0-r0
1
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
curl@8.19.0-r0
8.22.0-r0
1
mybb/mybb:1.8f2a54bce31c5
curl@8.17.0-r1
8.22.0-r0
1
n8nio/n8n:2.36.8cfe2704ff858
curl@8.21.0-r0
8.22.0-r0
1
netbirdio/dashboard:v2.91.0aae926912ca4
curl@8.21.0-r0
8.22.0-r0
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
curl@8.17.0-r1
8.22.0-r0
1
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
curl@8.19.0-r0
8.22.0-r0
1
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
curl@8.21.0-r0
8.22.0-r0
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
curl@8.17.0-r1
8.22.0-r0
1
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
curl@8.21.0-r0
8.22.0-r0
1
nocodb/nocodb:latest4b760f0d2547
curl@8.20.0-r0
8.22.0-r0
1
nodered/node-red:5.0.410f40d0a83e7
curl@8.21.0-r0
8.22.0-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
curl@8.17.0-r1
8.22.0-r0
1
novosga/novosga:latest34b9acbe6e51
curl@8.17.0-r1
8.22.0-r0
1
octoboxio/octobox:latestd909041c46eb
curl@8.17.0-r1
8.22.0-r0
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
curl@8.21.0-r0
8.22.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.