StackRadar

CVE-2026-82209

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,935
of 17,803 indexed, latest versions
Container images
1,746
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,935 of 17,803 indexed charts deploy, on 1,746 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+108 more1:8.22.0-1+e11,387
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+11 more8.22.0-r0, 8.22.0-r2359
OSV records
ALPINE-CVE-2026-82209DEBIAN-CVE-2026-82209UBUNTU-CVE-2026-82209CGA-9f3f-x983-mfhpCGA-j94g-crm5-pmj7ECHO-7268-3d2f-bfcf
Also known as
CGA-ccc6-3x2j-267v, CGA-j4hv-w3rj-j5r2, CGA-rmc2-h5mg-6v9h, CGA-vp94-fhjh-v5w8

Charts affected

1,935 by stars
ChartLatestAffected imagesRadar Score
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

10,697
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,351
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,879
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,733
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,879
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

9,110
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
alpine/git:v2.54.06f3b5029566d
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,639
answerhelmforgeVerified publisher1.5.21 of 1See more

answer helmforge 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
apache/answer:2.0.2a0d71b0e30a5
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

557
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/httpd:2.4.68979c38c2228d
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,733
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
curl@8.14.1-2+deb13u2~bpo13+1
no fix listed

Open the chart page →

7,692
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

9,561
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,249
ckanhelmforgeVerified publisher1.3.82 of 6See more

ckan helmforge 1.3.8

2 of the 6 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
curl@7.88.1-10+deb12u15
no fix listed
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
curl@7.81.0-1ubuntu1.23
no fix listed

Open the chart page →

10,126
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
curl@7.68.0-1ubuntu2.22
no fix listed
library/mongo:8.3.85211c51171f5
curl@8.5.0-2ubuntu10.11
no fix listed

Open the chart page →

69,307
dawarichhelmforgeVerified publisher1.0.12 of 4See more

dawarich helmforge 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
curl@8.14.1-2+deb13u5
no fix listed
postgis/postgis:18-3.67e00e8c3539f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,542
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

30,389
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
curl@7.81.0-1ubuntu1.26
no fix listed

Open the chart page →

8,730
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

3,921
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,321
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,359
generichelmforgeVerified publisher3.1.51 of 1See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:1.31.505b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,879
giteahelmforgeVerified publisher1.1.201 of 1See more

gitea helmforge 1.1.20

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
gitea/gitea:1.27.3-rootless1c17ecaead42
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

543
heimdallhelmforgeVerified publisher1.1.141 of 1See more

heimdall helmforge 1.1.14

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.8.3287e48152967
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

438
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.0d50725df661f
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,142
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

11,268
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,517
jupyterhubhelmforgeVerified publisher1.0.62 of 3See more

jupyterhub helmforge 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:5.3.069a7170eeeda
curl@8.19.0-r0
8.22.0-r0
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

5,541
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

29,969
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,508
medikeephelmforgeVerified publisher2.0.11 of 3See more

medikeep helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

5,497
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

9,861
minecrafthelmforgeVerified publisher1.5.41 of 1See more

minecraft helmforge 1.5.4

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.1e8640538dac5
curl@8.5.0-2ubuntu10.13
no fix listed

Open the chart page →

4,175
mongodbhelmforgeVerified publisher1.8.11 of 1See more

mongodb helmforge 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:8.3.981a1c8842a09
curl@8.5.0-2ubuntu10.13
no fix listed

Open the chart page →

979
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

6,363
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

4,439
nextcloudhelmforgeVerified publisher1.0.01 of 3See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,302
opencloudhelmforgeVerified publisher1.0.01 of 1See more

opencloud helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
opencloudeu/opencloud:7.2.46d992ccc5f1c
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

678
openreel-videohelmforgeVerified publisher1.0.31 of 1See more

openreel-video helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,081
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
curl@8.14.1-2
no fix listed

Open the chart page →

4,867
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,238
poznotehelmforgeVerified publisher2.0.31 of 1See more

poznote helmforge 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/timothepoznanski/poznote:6.86.0182664fe1ca0
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

477
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

6,138
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

2,133
strava-statisticshelmforgeVerified publisher1.1.161 of 2See more

strava-statistics helmforge 1.1.16

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

863
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

5,870
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

2,597
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
curl@8.5.0-2ubuntu10.12
no fix listed

Open the chart page →

1,306
twentyhelmforgeVerified publisher1.0.11 of 5See more

twenty helmforge 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.40.06e3b2e68ad78
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

3,717
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
curl@7.81.0-1ubuntu1.26
no fix listed

Open the chart page →

3,158
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

12,717

Container images carrying it

1,746 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-82209.

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.