StackRadar

CVE-2026-80255

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
828
of 17,787 indexed, latest versions
Container images
630
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 828 of 17,787 indexed charts deploy, on 630 images.

Affected packageAffected versionsFixed inImages
curlapk8.17.0-r1, 8.18.0-r0, 8.19.0-r0, 8.20.0-r0+2 more8.22.0-r0345
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+12 moreno fix listed285
OSV records
ALPINE-CVE-2026-80255DEBIAN-CVE-2026-80255UBUNTU-CVE-2026-80255

Charts affected

828 by stars
ChartLatestAffected imagesRadar Score
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,140
lidarrk8s-home-lab-repo15.3.11 of 1See more

lidarr k8s-home-lab-repo 15.3.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,568
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,990
prowlarrk8s-home-lab-repo5.4.01 of 1See more

prowlarr k8s-home-lab-repo 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.4.0b7da6e9defbe
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

686
qbittorrentk8s-home-lab-repo14.5.01 of 1See more

qbittorrent k8s-home-lab-repo 14.5.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.224f2d793cb7f
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

719
syslog-ngk8s-home-lab-repo3.1.11 of 1See more

syslog-ng k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,299
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,833
k8s-mutating-admission-webhookk8s-mutating-admission-webhook1.15.11 of 1See more

k8s-mutating-admission-webhook k8s-mutating-admission-webhook 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

945
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

14,833
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,539
vaultwardenkagiso-me0.1.11 of 1See more

vaultwarden kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
vaultwarden/server:1.36.0-alpined3531610b486
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

886
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,487
kanboardkanboard1.2.61 of 1See more

kanboard kanboard 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
kanboard/kanboard:v1.2.548df6c4339134
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

174
kbot-self-hostedkbot-self-hostedVerified publisher0.1.82 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

2 of the 7 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
clamav/clamav:1.4.3_base629a3050df6a
curl@8.17.0-r1
8.22.0-r0
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed

Open the chart page →

32,522
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,131
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
alpine/kubectl:1.36.01ee9df6316d4
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,505
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

9,652
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,442
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,455
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
curl@8.18.0-1ubuntu2.4
no fix listed

Open the chart page →

1,229
kubecachekubecacheVerified publisher0.14.11 of 1See more

kubecache kubecache 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
udhos/kubecache:0.14.1f44ef986df49
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

388
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

4,416
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,513
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,519
syncthingkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.07c60eb0ec887
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,311
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,481
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,598
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,032
testkube-runnerkubeshop2.13.21 of 1See more

testkube-runner kubeshop 2.13.2

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.244166c28422f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

365
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,435
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,634
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
curl@8.14.1-2
no fix listed

Open the chart page →

20,299
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,601
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,434
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,032
librenmslibrenms10.1.11 of 5See more

librenms librenms 10.1.1

1 of the 5 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
librenms/librenms:26.8.28194a4a9ff49
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

3,139
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,450
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,615
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,809
sonarrloeken-at-homeVerified publisher4.0.171 of 1See more

sonarr loeken-at-home 4.0.17

1 of the 1 container images this version deploys carry CVE-2026-80255.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.17b940520a2236
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

866

Container images carrying it

630 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/yourls/yourls:1.10.69b220ea83329
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/zalando/postgres-operator:v2.0.275f69eac43ac
curl@8.21.0-r0
8.22.0-r0
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
curl@8.14.1-2+deb13u4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
curl@8.18.0-1ubuntu2.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
curl@8.18.0-1ubuntu2.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
curl@8.18.0-1ubuntu2.3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
curl@8.18.0-1ubuntu2.5
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
curl@8.18.0-1ubuntu2.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
curl@8.18.0-1ubuntu2.4
no fix listed
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
curl@8.18.0-1ubuntu2.3
no fix listed
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
curl@8.19.0-r0
8.22.0-r0
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/codefresh/dind:3.0.250885ab519dac
curl@8.21.0-r0
8.22.0-r0
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
curl@8.17.0-r1
8.22.0-r0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
curl@8.21.0-r0
8.22.0-r0
1
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
curl@8.21.0-r0
8.22.0-r0
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
curl@8.18.0-1ubuntu2.4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
curl@8.21.0-r0
8.22.0-r0
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
curl@8.14.1-2+deb13u4
no fix listed
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
curl@8.20.0-r0
8.22.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.