StackRadar

CVE-2026-82208

High

Advisory

Published 6 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
810
of 17,787 indexed, latest versions
Container images
609
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 810 of 17,787 indexed charts deploy, on 609 images.

Affected packageAffected versionsFixed inImages
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+12 more8.22.0-r0372
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+7 moreno fix listed237
OSV records
ALPINE-CVE-2026-82208DEBIAN-CVE-2026-82208CGA-2r8r-5xgj-phfc
Also known as
CGA-x94p-gcgx-vxvm
Trending
Rank 17 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

810 by stars
ChartLatestAffected imagesRadar Score
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
bytebase/bytebase:latest9fcde38c0d5f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

436
rustfscloudpirates-rustfsVerified publisher0.11.41 of 1See more

rustfs cloudpirates-rustfs 0.11.4

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-beta.13c2d55977829
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

886
codefreshcodefresh-onpremOfficialVerified publisher2.12.132 of 42See more

codefresh codefresh-onprem 2.12.13

2 of the 42 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
curl@8.21.0-r0
8.22.0-r0
quay.io/codefresh/dind:3.0.250885ab519dac
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

14,615
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
curl@8.14.1-2+deb13u4
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,747
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,716
budibasebudibase0.0.0-master3 of 7See more

budibase budibase 0.0.0-master

3 of the 7 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
curl@8.21.0-r0
8.22.0-r0
budibase/proxy:3.41.38d780b6ee602
curl@8.14.1-2+deb13u4
no fix listed
budibase/worker:3.41.3de5e2e560ce8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

10,810
caddyalekcVerified publisher0.9.01 of 1See more

caddy alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/caddy:2.11.4-alpine5f5c8640aae0
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

846
umamichristianhuthVerified publisher7.13.01 of 2See more

umami christianhuth 7.13.0

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,368
dependabot-gitlabdependabot-gitlabVerified publisher6.3.02 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

2 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/postgres:18.6-alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,604
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,538
n8nhelmforgeVerified publisher2.0.01 of 2See more

n8n helmforge 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

863
syncthingk8s-home-lab-repo5.2.01 of 1See more

syncthing k8s-home-lab-repo 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,230
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
curl@8.14.1-2
no fix listed

Open the chart page →

5,665
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,344
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

30,481
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
curl@8.12.0-r1
no fix listed

Open the chart page →

17,306
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,510
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
curl@8.14.1-2+deb13u4
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,555
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,139
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,613
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,139
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,921
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

227
kubernetes-ingresshaproxytechVerified publisher1.54.01 of 1See more

kubernetes-ingress haproxytech 1.54.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:3.2.14d90f628d659e
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

418
piholehelmforgeVerified publisher2.0.131 of 1See more

pihole helmforge 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

571
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,179
mercuremercureOfficialVerified publisher0.24.01 of 1See more

mercure mercure 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.080fcb704a741
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,409
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,416
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

13,455
agonesagones1.60.01 of 5See more

agones agones 1.60.0

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,122
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,392
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,990
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

17,346
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

398
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

544
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,176
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,615
adminerectobitVerified publisher0.3.11 of 1See more

adminer ectobit 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/adminer:6.0.1f742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

140
flannelflannel0.28.91 of 2See more

flannel flannel 0.28.9

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

610
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
redocly/redoc:latest2e26bb660574
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

3,282
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
curl@8.20.0-r1
8.22.0-r0
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

14,043
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,800
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,270
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,654
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,039
openctihelm-openctiVerified publisher3.0.91 of 8See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-beta.1241fe89380f41
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,396
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,796
testkubekubeshop2.13.21 of 5See more

testkube kubeshop 2.13.2

1 of the 5 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.244166c28422f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

5,012
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

481
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,495

Container images carrying it

609 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
curl@8.21.0-r0
8.22.0-r0
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
curl@8.14.1-2+deb13u4
no fix listed
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
curl@8.20.0-r0
8.22.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.