StackRadar

CVE-2026-82208

High

Advisory

Published 6 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
810
of 17,787 indexed, latest versions
Container images
609
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 810 of 17,787 indexed charts deploy, on 609 images.

Affected packageAffected versionsFixed inImages
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+12 more8.22.0-r0372
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+7 moreno fix listed237
OSV records
ALPINE-CVE-2026-82208DEBIAN-CVE-2026-82208CGA-2r8r-5xgj-phfc
Also known as
CGA-x94p-gcgx-vxvm
Trending
Rank 17 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

810 by stars
ChartLatestAffected imagesRadar Score
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,640
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
curl@8.21.0-r0
8.22.0-r0
ghcr.io/shesselink81/wordpress-alpine:7.1.0.032ace450bcd9
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

4,032
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

5,635
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,042
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

879
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,571
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-82208.

Container imageDigestPackageFixed in
library/postgres:18.4-alpine3.249a8afca54e78
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

7,916

Container images carrying it

609 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
redocly/redoc:latest2e26bb660574
curl@8.19.0-r0
8.22.0-r0
1
redpandadata/redpanda:latest468bd13a9f2b
curl@8.14.1-2+deb13u4
no fix listed
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
curl@8.10.1-r1
no fix listed
1
reportportal/k8s-wait-for:latest06cdf299b397
curl@8.19.0-r0
8.22.0-r0
1
reportportal/service-ui:5.15.5aea8747cb639
curl@8.21.0-r0
8.22.0-r0
1
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
curl@8.19.0-r0
8.22.0-r0
1
robustadev/kubewatch:v2.9.00457a51e36e8
curl@8.10.1-r0
no fix listed
1
rommapp/romm:5.2.03512f2ca4557
curl@8.17.0-r1
8.22.0-r0
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
curl@8.14.1-2+deb13u3
no fix listed
1
rustfs/rustfs:1.0.0-beta.13c2d55977829
curl@8.17.0-r1
8.22.0-r0
1
rustfs/rustfs:1.0.0-alpha.947d49faa88c04
curl@8.17.0-r1
8.22.0-r0
1
rustfs/rustfs:1.0.0-rc.3800cf3f352a0
curl@8.21.0-r0
8.22.0-r0
1
securecodebox/persistence-elastic-dashboard-importer:5.7.0afcefbd56d61
curl@8.17.0-r1
8.22.0-r0
1
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
curl@8.14.1-2+deb13u4
no fix listed
1
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
curl@8.21.0-r0
8.22.0-r0
1
siakhooi/query:1.0.0f1f4b5b1b870
curl@8.17.0-r1
8.22.0-r0
1
sigma2as/rstudio-proxy:20260818-1df6a44d899e81ee3eb
curl@8.21.0-r0
8.22.0-r0
1
signalen/frontend:2.27.81ab79cb7fe21
curl@8.19.0-r0
8.22.0-r0
1
sissbruecker/linkding:1.46.20c0a9a04c7eb
curl@8.14.1-2+deb13u4
no fix listed
1
sonatype/nexus3:3.96.056f8e1d24150
curl@8.21.0-r0
8.22.0-r0
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
curl@8.14.1-2+deb13u2
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
curl@8.14.1-2+deb13u4
no fix listed
1
stalwartlabs/stalwart:v0.16.1425001929f36a
curl@8.14.1-2+deb13u4
no fix listed
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
curl@8.14.1-2+deb13u5
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
curl@8.14.1-2+deb13u4
no fix listed
1
stardog/stardog:latest2714e5c4b3c1
curl@8.21.0-r3
no fix listed
1
stashapp/stash:v0.31.1df744af5a0c9
curl@8.17.0-r1
8.22.0-r0
1
supabase/logflare:latest49bfe526f1b4
curl@8.14.1-2+deb13u4
no fix listed
1
supabase/postgres:17.6.1.136f371b5f3f2ac
curl@8.19.0-r0
8.22.0-r0
1
supabase/realtime:latestd3aa0c86c7b3
curl@8.14.1-2+deb13u4
no fix listed
1
swaggerapi/swagger-ui:latest9ae209e3791e
curl@8.21.0-r0
8.22.0-r0
1
syncthing/syncthing:2.1.07c60eb0ec887
curl@8.17.0-r1
8.22.0-r0
1
szurubooru/client:2.5880a53ca446d
curl@8.21.0-r0
8.22.0-r0
1
tautulli/tautulli:latest670e68dd9efc
curl@8.14.1-2+deb13u4
no fix listed
1
temporalio/admin-tools:1.28cfde8170c92f
curl@8.17.0-r1
8.22.0-r0
1
temporalio/auto-setup:1.29.7f14912b699cf
curl@8.19.0-r0
8.22.0-r0
1
tenureai/tenure:v1.0.285f5b222df9a5
curl@8.14.1-2+deb13u3+dhi3
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
curl@8.14.1-2+deb13u2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
curl@8.14.1-2+deb13u2
no fix listed
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
curl@8.14.1-2+deb13u4
no fix listed
1
thingsboard/tbmq-node:2.4.070661025dba5
curl@8.14.1-2+deb13u4
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
curl@8.14.1-2+deb13u2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.