CVE-2026-82209
HighAdvisory
Published 2 Sept 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.005
- 44th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,937
- of 17,790 indexed, latest versions
- Container images
- 1,753
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,937 of 17,790 indexed charts deploy, on 1,753 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+107 more | 1:8.14.1-2+deb13u3+e3 | 1,387 |
| curlapk | 8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+11 more | 8.22.0-r0, 8.22.0-r2 | 366 |
- OSV records
- ALPINE-CVE-2026-82209DEBIAN-CVE-2026-82209UBUNTU-CVE-2026-82209CGA-9f3f-x983-mfhpCGA-j94g-crm5-pmj7ECHO-7268-3d2f-bfcf
- Also known as
- CGA-ccc6-3x2j-267v, CGA-j4hv-w3rj-j5r2, CGA-rmc2-h5mg-6v9h, CGA-vp94-fhjh-v5w8
- Trending
- Rank 42 in indexed charts, since 5 Sept 2026. See the ranking →
Charts affected
1,937 by stars
Container images carrying it
1,753 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| networktocode/ | ed484336b1ad | curl | no fix listed | 1 |
| newrelic/ | 1a448492b55a | curl | no fix listed | 1 |
| nginxinc/ | 4210a3296e7c | curl | no fix listed | 1 |
| nginxinc/ | 6320020c7da8 | curl | 8.22.0-r0 | 1 |
| nginxinc/ | b37d9945be77 | curl | 8.22.0-r0 | 1 |
| nginxinc/ | c5b989ebc150 | curl | no fix listed | 1 |
| nginxinc/ | e93571f3d083 | curl | 8.22.0-r0 | 1 |
| nginxinc/ | f972e5322b97 | curl | 8.22.0-r0 | 1 |
| nirmalnaveen/ | 8541a39162f3 | curl | no fix listed | 1 |
| nocodb/ | 4b760f0d2547 | curl | 8.22.0-r0 | 1 |
| nodered/ | 10f40d0a83e7 | curl | 8.22.0-r0 | 1 |
| nodered/ | d73ae167cb9b | curl | 8.22.0-r0 | 1 |
| nousresearch/ | e0df6adebddf | curl | no fix listed | 1 |
| novosga/ | 34b9acbe6e51 | curl | 8.22.0-r0 | 1 |
| nvidia/ | 964847cc3fd8 | curl | no fix listed | 1 |
| obolnetwork/ | cb7e97d39d46 | curl | no fix listed | 1 |
| octoboxio/ | d909041c46eb | curl | 8.22.0-r0 | 1 |
| offchainlabs/ | 9f779fa84b7b | curl | no fix listed | 1 |
| offchainlabs/ | e95865866129 | curl | no fix listed | 1 |
| oled01/ | 05d3e398e675 | curl | no fix listed | 1 |
| oled01/ | 6302fd2b5333 | curl | no fix listed | 1 |
| olvid/ | e0e6b165d879 | curl | no fix listed | 1 |
| omecproject/ | 28a90cc26716 | curl | no fix listed | 1 |
| omecproject/ | b4ae7d0d6b74 | curl | no fix listed | 1 |
| omecproject/ | 5715e5648aa0 | curl | no fix listed | 1 |
| omecproject/ | d109a8e57e71 | curl | no fix listed | 1 |
| oneuptime/ | 1069c9458fe7 | curl | no fix listed | 1 |
| oneuptime/ | f6f2c1c536bc | curl | no fix listed | 1 |
| onosproject/ | 44914a8d4b3f | curl | no fix listed | 1 |
| opea/ | 38c51b791efa | curl | no fix listed | 1 |
| opea/ | 58f91683892d | curl | no fix listed | 1 |
| opea/ | 2bee4eb66f3e | curl | no fix listed | 1 |
| opea/ | e2436483b73d | curl | no fix listed | 1 |
| opea/ | 3ef121f34610 | curl | no fix listed | 1 |
| opea/ | 3eaa91849512 | curl | no fix listed | 1 |
| opea/ | 7f854e9bffaf | curl | no fix listed | 1 |
| opea/ | 249afad3d268 | curl | no fix listed | 1 |
| openaev/ | 0a12ce8b3db9 | curl | no fix listed | 1 |
| openbas/ | a277796d9724 | curl | no fix listed | 1 |
| openbas/ | d986d80b0a75 | curl | no fix listed | 1 |
| opencloudeu/ | 6d992ccc5f1c | curl | 8.22.0-r0 | 1 |
| opencsghq/ | 2f03fead54db | curl | no fix listed | 1 |
| opencsghq/ | af7191a9cf8a | curl | no fix listed | 1 |
| opencsghq/ | 302c9d45d8a8 | curl | no fix listed | 1 |
| opencsghq/ | 04121fd19ef9 | curl | no fix listed | 1 |
| opencsghq/ | bdd2c58b9744 | curl | no fix listed | 1 |
| opencsghq/ | f6d7e7d6be5d | curl | no fix listed | 1 |
| opencsghq/ | b6d87e1048c2 | curl | no fix listed | 1 |
| opencsghq/ | 47e22aa71870 | curl | no fix listed | 1 |
| opencsghq/ | b4e849fcf94a | curl | no fix listed | 1 |