StackRadar

CVE-2026-86409

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
858
of 18,137 indexed, latest versions
Container images
724
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 858 of 18,137 indexed charts deploy, on 724 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+24 moreno fix listed724
OSV records
DEBIAN-CVE-2026-86409ECHO-b6fb-b123-10db
Trending
Rank 27 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

858 by stars
ChartLatestAffected imagesRadar Score
vaultwardensyself1.0.01 of 1See more

vaultwarden syself 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:latestefb3cde96201
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,537
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

12,692
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,164
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

6,853
supabaseteochenglim0.1.23 of 13See more

supabase teochenglim 0.1.2

3 of the 13 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
supabase/logflare:latest9d9c8f8c4626
curl@8.14.1-2+deb13u5
no fix listed
supabase/realtime:latest768b559241dd
curl@8.14.1-2+deb13u4
no fix listed
supabase/studio:latestd878dcd9dba7
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

10,769
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,677
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

13,234
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,053
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
chatqnatest-opea1.0.02 of 11See more

chatqna test-opea 1.0.0

2 of the 11 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
curl@7.88.1-10+deb12u7
no fix listed
opea/chatqna:1.038c51b791efa
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

43,210
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
curl@7.88.1-10+deb12u7
no fix listed
opea/codegen:1.058f91683892d
curl@7.88.1-10+deb12u7
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

32,602
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
curl@7.88.1-10+deb12u7
no fix listed
opea/codetrans:1.0e2436483b73d
curl@7.88.1-10+deb12u7
no fix listed
opea/codetrans-ui:1.03ef121f34610
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

32,096
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
curl@7.88.1-10+deb12u7
no fix listed
opea/docsum:1.03eaa91849512
curl@7.88.1-10+deb12u7
no fix listed
opea/docsum-ui:1.07f854e9bffaf
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

32,599
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

10,584
codeth-chartsVerified publisher0.1.01 of 1See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
collabora/code:24.04.13.2.101dc4ab83977
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

3,637
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

4,399
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

11,778
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,457
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,214
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,350
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,477
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
trident-protect-consoletrident-protect100.2609.1-console1 of 3See more

trident-protect-console trident-protect 100.2609.1-console

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,883
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

20,568
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

10,100
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
unlaunla0.10.01 of 3See more

unla unla 0.10.0

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

11,172
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,414
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
curl@7.88.1-10+deb12u8
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
curl@7.88.1-10+deb12u8
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
curl@7.88.1-10+deb12u8
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
curl@7.88.1-10+deb12u8
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
curl@7.88.1-10+deb12u8
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

49,662
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

15,849
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

5,772
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

12,183
video-dl-botvideo-dl-botVerified publisher1.4.31 of 1See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,516
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
voting-app-envvoting-example-with-env0.0.32 of 6See more

voting-app-env voting-example-with-env 0.0.3

2 of the 6 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
no fix listed
kerolosayman308/voting-app-env:examplevotingapp_result6e92e5a231fa
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,371
api-gatewaywallarmVerified publisher0.2.01 of 1See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
wallarm/api-gateway:0.2.0a3d4d2f780e8
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

2,617
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,413
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,605
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

7,829
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
curl@7.88.1-10
no fix listed

Open the chart page →

11,231
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,212
giteawener12.7.01 of 4See more

gitea wener 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

10,548
juicefs-csi-driverwener0.33.01 of 5See more

juicefs-csi-driver wener 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

12,356
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

10,548
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

12,356
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,899
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

6,015
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

3,267
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,200

Container images carrying it

724 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
curl@7.88.1-10+deb12u5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/groundcover/tools:20260929e8a79ea4cf39
curl@1:8.22.0-1+e1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.3995ed11e00e0
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.3fdcc114ea012
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.0b868b93e013d
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.