StackRadar

CVE-2026-82209

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,937
of 17,792 indexed, latest versions
Container images
1,749
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,937 of 17,792 indexed charts deploy, on 1,749 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+107 more1:8.14.1-2+deb13u3+e31,386
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+11 more8.22.0-r0, 8.22.0-r2363
OSV records
ALPINE-CVE-2026-82209DEBIAN-CVE-2026-82209UBUNTU-CVE-2026-82209CGA-9f3f-x983-mfhpCGA-j94g-crm5-pmj7ECHO-7268-3d2f-bfcf
Also known as
CGA-ccc6-3x2j-267v, CGA-j4hv-w3rj-j5r2, CGA-rmc2-h5mg-6v9h, CGA-vp94-fhjh-v5w8

Charts affected

1,937 by stars
ChartLatestAffected imagesRadar Score
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
curl@7.47.0-1ubuntu2.6
no fix listed

Open the chart page →

36,227
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
curl@7.47.0-1ubuntu2.5
no fix listed

Open the chart page →

27,523
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
curl@7.47.0-1ubuntu2.8
no fix listed

Open the chart page →

34,099
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine1b766f17b840
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

1,759
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,098
rundeckcloudnativeapp0.1.02 of 2See more

rundeck cloudnativeapp 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed
rundeck/rundeck:3.0.16b13e8059ad72
curl@7.47.0-1ubuntu2.11
no fix listed

Open the chart page →

23,721
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

11,848
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
curl@7.47.0-1ubuntu2.6
no fix listed

Open the chart page →

10,558
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
curl@7.47.0-1ubuntu2.9
no fix listed

Open the chart page →

14,086
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
curl@7.47.0-1ubuntu2.12
no fix listed

Open the chart page →

22,525
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
curl@7.47.0-1ubuntu2.5
no fix listed

Open the chart page →

77,916
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
curl@7.68.0-1ubuntu2.6
no fix listed

Open the chart page →

29,646
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
curl@7.81.0-1ubuntu1.20
no fix listed

Open the chart page →

18,400
cloudrevecloudreve0.2.01 of 2See more

cloudreve cloudreve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cloudreve/cloudreve:4.18.0f7a464100bf6
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,842
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/postgres:18.3-alpine54451ecb8ab3
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,180
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

12,521
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

12,224
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

11,656
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

5,610
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

10,599
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
curl@7.68.0-1ubuntu2.13
no fix listed

Open the chart page →

16,155
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,181
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
curl@7.58.0-2ubuntu3.9
no fix listed

Open the chart page →

13,187
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
curl@8.18.0-1ubuntu2.3
no fix listed
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

3,759
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,856
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

8,093
monitoringcluster-deploy0.3.01 of 11See more

monitoring cluster-deploy 0.3.0

1 of the 11 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

8,217
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

9,214
rustfscluster-deploy0.0.61 of 2See more

rustfs cluster-deploy 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-rc.3800cf3f352a0
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

290
clusterfactoryclusterfactory0.2.02 of 5See more

clusterfactory clusterfactory 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
curl@8.17.0-r1
8.22.0-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

7,191
gitea-jenkinsclusterfactory0.1.12 of 5See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
gitea/act_runner:latestb5c35d6bdbb9
curl@8.17.0-r1
8.22.0-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

6,980
clusterplexclusterplexVerified publisher1.1.102 of 3See more

clusterplex clusterplex 1.1.10

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
curl@8.18.0-1ubuntu2.4
no fix listed
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

3,950
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,861
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,861
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
curl@8.5.0-2ubuntu10.6
no fix listed

Open the chart page →

4,695
cobbler-webcobbler0.2.11 of 1See more

cobbler-web cobbler 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/cobbler/cobbler-web:v1.1.0c17978fb13dd
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

371
codehubcodehubVerified publisher6.2.183 of 5See more

codehub codehub 6.2.18

3 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
curl@7.88.1-10+deb12u12
no fix listed
jupyterhub/jupyterhub:5.4.63974ba945e65
curl@8.5.0-2ubuntu10.9
no fix listed
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

13,359
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.12 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/adminer:latestf742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

5,145
docker-composecoderstudio-strapi-devVerified publisher0.0.12 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/adminer:latestf742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

5,145
strapi-devcoderstudio-strapi-devVerified publisher0.0.12 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/adminer:latestf742dcf1b6ca
curl@8.21.0-r0
8.22.0-r0
library/postgres:alpined3e1620b530c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

5,145
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,796
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,861
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

5,425
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
curl@8.18.0-1ubuntu2.4
no fix listed

Open the chart page →

3,823
cortezacorteza1.1.02 of 3See more

corteza corteza 1.1.0

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
curl@7.81.0-1ubuntu1.20
no fix listed
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

8,456
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
curl@7.68.0-1ubuntu2.24
no fix listed

Open the chart page →

4,698
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
curl@8.5.0-2ubuntu10.6
no fix listed

Open the chart page →

2,993
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

14,740
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

6,220
logstream-leadercriblio4.20.01 of 1See more

logstream-leader criblio 4.20.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cribl/cribl:4.20.0dddc9c0f2a52
curl@8.5.0-2ubuntu10.13
no fix listed

Open the chart page →

870

Container images carrying it

1,749 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-82209.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.