StackRadar

CVE-2026-82208

High

Advisory

Published 6 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
810
of 17,787 indexed, latest versions
Container images
609
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 810 of 17,787 indexed charts deploy, on 609 images.

Affected packageAffected versionsFixed inImages
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+12 more8.22.0-r0372
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+7 moreno fix listed237
OSV records
ALPINE-CVE-2026-82208DEBIAN-CVE-2026-82208CGA-2r8r-5xgj-phfc
Also known as
CGA-x94p-gcgx-vxvm
Trending
Rank 17 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

810 by stars
ChartLatestAffected imagesRadar Score
ingress-nginxingress-nginx4.15.11 of 2See more

ingress-nginx ingress-nginx 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,548
jenkinsjenkinsciOfficialVerified publisher5.9.621 of 2See more

jenkins jenkinsci 5.9.62

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,527
gitlab-runnergitlabVerified publisher0.92.11 of 1See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

905
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,538
pgadmin4runixVerified publisher1.66.01 of 1See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.172f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

398
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

10,782
piholemojo2600Verified publisher2.38.01 of 1See more

pihole mojo2600 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

571
n8ncommunity-chartsVerified publisher1.24.401 of 1See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

772
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

7,909
mimir-distributedgrafana6.2.01 of 6See more

mimir-distributed grafana 6.2.0

1 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

4,519
natsnatsVerified publisher2.14.61 of 3See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,315
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

718
metabasepmint932.27.61 of 1See more

metabase pmint93 2.27.6

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,640
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,039
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
curl@8.20.0-r1
no fix listed

Open the chart page →

5,309
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,890
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
openebs/provisioner-localpv:4.6.099f5116f5cb8
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

24,009
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,104
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,378
flux2fluxcd-community2.19.01 of 7See more

flux2 fluxcd-community 2.19.0

1 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/kustomize-controller:v1.9.23aecec8bafdb
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,957
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,756
zammadzammadOfficialVerified publisher18.2.01 of 5See more

zammad zammad 18.2.0

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

6,849
datahubdatahubVerified publisher1.1.43 of 4See more

datahub datahub 1.1.4

3 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
curl@8.22.0-r0
no fix listed
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
curl@8.22.0-r0
no fix listed
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
curl@8.22.0-r0
no fix listed

Open the chart page →

714
podinfopodinfo6.15.01 of 1See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

290
clamavwiremindVerified publisher3.7.31 of 1See more

clamav wiremind 3.7.3

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
clamav/clamav:1.4.3_base629a3050df6a
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,060
atlantisatlantis6.15.11 of 1See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,892
penpotpenpotOfficialVerified publisher1.9.01 of 4See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
penpotapp/frontend:2.17.294fa2864d8fc
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

4,412
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,717
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

3,663
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.4.01 of 3See more

kubeshark kubeshark-helm-charts 53.4.0

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
kubeshark/front:v53.4cc7f07b99fac
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

826
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
curl@8.18.0-r0
8.22.0-r0
grafana/grafana:12.4.1e932bd6ed0e0
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

9,869
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.15750e1111426e
curl@8.19.0-3
no fix listed
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

22,115
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,059
vaultwardenvaultwarden0.46.11 of 1See more

vaultwarden vaultwarden 0.46.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2-alpined16a304c2476
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

290
oktetooktetoOfficialVerified publisher0.0.0-2026-08-172 of 10See more

okteto okteto 0.0.0-2026-08-17

2 of the 10 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/okteto/buildkit:0.0.0-2026-08-1714527ca5d2a9
curl@8.20.0-r0
8.22.0-r0
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-173e56bdd1b90d
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

5,491
yourlsyourlsOfficialVerified publisher8.9.111 of 2See more

yourls yourls 8.9.11

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.69b220ea83329
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,233
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
curl@8.21.0-r1
no fix listed
gocd/gocd-server:v26.1.0720d1012b93f
curl@8.21.0-r1
no fix listed

Open the chart page →

1,474
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
openproject/openproject:17.8.0-slim48952034215d
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

19,998
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,234
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
google/cloud-sdk:alpinef7d3e6d6d4f4
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

8,387
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
factoriotools/factorio:lateste9227748c507
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,449
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,473
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

717
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,192
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
curl@8.21.0-2~bpo13+1
no fix listed

Open the chart page →

9,697
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
oneuptime/runner:release4accc516d800
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

10,896
postgres-operatorpostgres-operator2.0.21 of 1See more

postgres-operator postgres-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v2.0.275f69eac43ac
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

325
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,382
trivytrivy-operator0.26.01 of 1See more

trivy trivy-operator 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

431
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,448

Container images carrying it

609 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
curl@8.21.0-r0
8.22.0-r0
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
curl@8.14.1-2+deb13u4
no fix listed
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
curl@8.20.0-r0
8.22.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.