StackRadar

CVE-2026-80231

High

Advisory

Published 6 Sept 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,781 indexed, latest versions
Container images
345
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 345 images.

Affected packageAffected versionsFixed inImages
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+3 more8.22.0-r0345
OSV records
ALPINE-CVE-2026-80231
Trending
Rank 26 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,444
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,809
sonarrloeken-at-homeVerified publisher4.0.171 of 1See more

sonarr loeken-at-home 4.0.17

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.17b940520a2236
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

866
elasticvuelogic3579Verified publisher1.15.01 of 1See more

elasticvue logic3579 1.15.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
cars10/elasticvue:1.15.0efddf4fa0fd8
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,085
nubladolsst-sqre0.9.231 of 5See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:latest69a7170eeeda
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

5,786
arrluiscajl1.0.91 of 2See more

arr luiscajl 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

396
sonarrluiscajl0.1.171 of 1See more

sonarr luiscajl 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

320
tautulliluiscajl0.0.151 of 1See more

tautulli luiscajl 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/tautulli:latest5ce8c5f82f91
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

255
bazarrm0nsterrr-bazarrVerified publisher2.3.01 of 1See more

bazarr m0nsterrr-bazarr 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

898
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.34fcf15b7f265
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

756
decap-cmsm11sVerified publisher0.3.151 of 1See more

decap-cms m11s 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
m11s/decap-cms:0.2.11-s30cd6810c9885
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,151
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,706
ejabberdmartialblog0.3.11 of 1See more

ejabberd martialblog 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/processone/ejabberd:latest5aeb0faa39cf
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

385
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
openebs/provisioner-localpv:4.6.099f5116f5cb8
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

21,064
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,818
profilarrmedia-servarrVerified publisher2.2.01 of 1See more

profilarr media-servarr 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

337
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

11,689
mo-backupmogeniusOfficialVerified publisher1.0.291 of 1See more

mo-backup mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

813
mo-backup-mysqlmogeniusVerified publisher1.0.291 of 1See more

mo-backup-mysql mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

813
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,521
radicalemt1905024.1.11 of 1See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,546
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.0.328f263fe06f7
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

4,016
ingress-nginxmxytest4.15.11 of 2See more

ingress-nginx mxytest 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,547
szurubooru-clientmy0nVerified publisher0.3.11 of 1See more

szurubooru-client my0n 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
szurubooru/client:2.5880a53ca446d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

370
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

720
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,038
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
dependencytrack/frontend:latest8854a8320475
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,465
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,132
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,798
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
linuxserver/mariadb:latestcb61ec331e80
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

27,465
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,346
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,109
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,219
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

2,726
openobserveopenobserve0.92.21 of 6See more

openobserve openobserve 0.92.2

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

3,157
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,038
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

71,208
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
alpine/git:latest6f3b5029566d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,753
loki-standaloneot-container-kit1.0.21 of 5See more

loki-standalone ot-container-kit 1.0.2

1 of the 5 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,580
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,288
stk-fluent-bit-loki-s3paxtecnologia0.2.01 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,739
picoclawpicoclawVerified publisher0.1.261 of 1See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
ghcr.io/mattn/picoclaw:latest517556c8b144
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,556
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/httpd:alpine1b766f17b840
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

6,565
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,270
powerdnspuckpuck2.0.02 of 4See more

powerdns puckpuck 2.0.0

2 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
library/adminer:51596436ca855
curl@8.21.0-r0
8.22.0-r0
library/postgres:18-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,616
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

6,525
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

895
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80231.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,302

Container images carrying it

345 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/postgres:18.6-alpine:18-alpine:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0
17
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0
12
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0
6
dpage/pgadmin4:9.17:latest2f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0
5
library/adminer:6.0.1:latestf742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0
5
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0
5
decisionrules/server:latestf38d8571fa06
curl@8.21.0-r0
8.22.0-r0
4
grafana/grafana:13.1.0121a7a9ece6d
curl@8.20.0-r1
8.22.0-r0
4
library/httpd:2.4-alpine:alpine1b766f17b840
curl@8.20.0-r1
8.22.0-r0
4
linuxserver/sonarr:4.0.19:latest4d9df314875e
curl@8.21.0-r0
8.22.0-r0
4
pihole/pihole:2026.07.2:latestf7d1be836e3b
curl@8.21.0-r0
8.22.0-r0
4
rustfs/rustfs:1.0.0-beta.12:latest41fe89380f41
curl@8.21.0-r0
8.22.0-r0
4
alpine/git:latest:v2.54.06f3b5029566d
curl@8.21.0-r0
8.22.0-r0
3
decisionrules/client:latest92e459f2c673
curl@8.21.0-r0
8.22.0-r0
3
grafana/grafana:13.1.17cb8c64c4d57
curl@8.21.0-r0
8.22.0-r0
3
natsio/nats-box:0.19.7ffce8bd10338
curl@8.19.0-r0
8.22.0-r0
3
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
curl@8.17.0-r1
8.22.0-r0
3
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
curl@8.21.0-r0
8.22.0-r0
3
alpine/git:latest4f9488b7295b
curl@8.21.0-r0
8.22.0-r0
2
alpine/k8s:1.32.12048f8d9c8cc7
curl@8.18.0-r0
8.22.0-r0
2
alpine/kubectl:1.35.49ccd82364762
curl@8.17.0-r1
8.22.0-r0
2
alpine/kubectl:1.35.2ec8f734b0a10
curl@8.17.0-r1
8.22.0-r0
2
clamav/clamav:1.4.3_base629a3050df6a
curl@8.17.0-r1
8.22.0-r0
2
dunglas/mercure:v0:v0.24.2916834e49961
curl@8.17.0-r1
8.22.0-r0
2
gisaia/agate:0.18.198213fa403ae
curl@8.21.0-r0
8.22.0-r0
2
gisaia/airs:0.18.15abfe00317bf
curl@8.21.0-r0
8.22.0-r0
2
gisaia/aproc-service:0.18.1ac6564921994
curl@8.21.0-r0
8.22.0-r0
2
gisaia/arlas-fam-wui:0.18.13700dcaf7a75
curl@8.20.0-r0
8.22.0-r0
2
gisaia/arlas-wui:28.0.3b83b3e067173
curl@8.19.0-r0
8.22.0-r0
2
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
curl@8.19.0-r0
8.22.0-r0
2
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
curl@8.19.0-r0
8.22.0-r0
2
gisaia/fam:0.18.1ae525930b4b6
curl@8.21.0-r0
8.22.0-r0
2
grafana/grafana:12.3.12175aaa91c96
curl@8.17.0-r1
8.22.0-r0
2
grafana/grafana:12.3.39e1e77ade304
curl@8.17.0-r1
8.22.0-r0
2
grafana/grafana:12.4.1e932bd6ed0e0
curl@8.17.0-r1
8.22.0-r0
2
jupyterhub/configurable-http-proxy:5.3.0:latest69a7170eeeda
curl@8.19.0-r0
8.22.0-r0
2
kubeshop/testkube-api-server:2.13.18ffed0d2d494
curl@8.21.0-r0
8.22.0-r0
2
library/caddy:2.11.4-alpine:2-alpine5f5c8640aae0
curl@8.19.0-r0
8.22.0-r0
2
library/caddy:latestdf7f1c2fb114
curl@8.19.0-r0
8.22.0-r0
2
linuxserver/jackett:latest609a1830692d
curl@8.21.0-r0
8.22.0-r0
2
metabase/metabase:v0.61.1.x9491ed11c901
curl@8.19.0-r0
8.22.0-r0
2
moby/buildkit:v0.32.2-rootless504731e577c2
curl@8.20.0-r0
8.22.0-r0
2
n8nio/n8n:2.36.714c4285bc303
curl@8.21.0-r0
8.22.0-r0
2
n8nio/n8n:2.38.45d9f0cc5672b
curl@8.21.0-r0
8.22.0-r0
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
curl@8.20.0-r0
8.22.0-r0
2
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
curl@8.21.0-r0
8.22.0-r0
2
requarks/wiki:2:latest68f0d1848261
curl@8.17.0-r1
8.22.0-r0
2
swaggerapi/swagger-ui:v5.32.143d9316996884
curl@8.21.0-r0
8.22.0-r0
2
syncthing/syncthing:2.1.1775c4aac4862
curl@8.19.0-r0
8.22.0-r0
2
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
curl@8.19.0-r0
8.22.0-r0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.