StackRadar

CVE-2026-87862

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
446
of 18,131 indexed, latest versions
Container images
277
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 446 of 18,131 indexed charts deploy, on 277 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 moreno fix listed277
OSV records
DEBIAN-CVE-2026-87862

Charts affected

446 by stars
ChartLatestAffected imagesRadar Score
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:mainlinef9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

44,456
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,522
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/wordpress:lateste04cf657f248
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,270
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
bitwardensinextraVerified publisher0.10.41 of 1See more

bitwarden sinextra 0.10.4

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,527
infisicalsinextraVerified publisher0.7.01 of 1See more

infisical sinextra 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,136
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed

Open the chart page →

5,235
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

10,088
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
service-deploymentsnowplow-devopsVerified publisher0.43.11 of 1See more

service-deployment snowplow-devops 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,824
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,895
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_app:v1.8.6c935e123030d
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_code_gen_python:v1.8.696805be717ff
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
curl@8.14.1-2+deb13u5
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

67,630
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
stalwartstalwart-helmVerified publisher0.7.221 of 2See more

stalwart stalwart-helm 0.7.22

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.26254ce5d7f3db
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,335
steadybit-agentsteadybit3.1.1831 of 6See more

steadybit-agent steadybit 3.1.183

1 of the 6 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,041
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,914
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,888
vaultwardensyself1.0.01 of 1See more

vaultwarden syself 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:latestefb3cde96201
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,527
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,111
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
supabase/logflare:latest9d9c8f8c4626
curl@8.14.1-2+deb13u5
no fix listed
supabase/realtime:latest768b559241dd
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,735
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,666
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,418
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,186
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,284
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,476
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
trident-protect-consoletrident-protect100.2609.1-console1 of 3See more

trident-protect-console trident-protect 100.2609.1-console

1 of the 3 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,829
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
video-dl-botvideo-dl-botVerified publisher1.4.31 of 1See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,513
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
voting-app-envvoting-example-with-env0.0.31 of 6See more

voting-app-env voting-example-with-env 0.0.3

1 of the 6 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,339
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,410
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,168
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-87862.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815

Container images carrying it

277 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
no fix listed
1
infisical/infisical:latest3f014f284cb9
curl@8.14.1-2+deb13u5
no fix listed
1
inventree/inventree:1.5.74aefd6e2bb0e
curl@8.14.1-2+deb13u5
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:latest357724bf0ae2
curl@8.14.1-2+deb13u5
no fix listed
1
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed
1
jertel/elastalert2:2.31.03cbf63f9b7dc
curl@8.14.1-2+deb13u4
no fix listed
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
no fix listed
1
kitware/cdash:v5.4.0da5abe941506
curl@8.14.1-2+deb13u5
no fix listed
1
kixote/typemill628f79a08cc7
curl@8.14.1-2+deb13u4
no fix listed
1
kixote/typemill7dfb517d24f0
curl@8.14.1-2+deb13u5
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
curl@8.19.0-3
no fix listed
1
library/buildpack-deps:curl3dd78c060b4d
curl@8.14.1-2+deb13u5
no fix listed
1
library/buildpack-deps:curlc0ecfde33724
curl@8.14.1-2+deb13u5
no fix listed
1
library/buildpack-deps:scmec9476a31fe1
curl@8.14.1-2+deb13u5
no fix listed
1
library/couchdb:3.53611ce43bd32
curl@8.14.1-2+deb13u5
no fix listed
1
library/golang:lateste0174e51e812
curl@8.14.1-2+deb13u5
no fix listed
1
library/matomo:5.14.0-apache1e0019262702
curl@8.14.1-2+deb13u5
no fix listed
1
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
curl@8.14.1-2+deb13u5
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
1
library/nginx:1.28146adea4768b
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.31.660f0d4e98656
curl@8.14.1-2+deb13u5
no fix listed
1
library/node:latest9965105b7a4e
curl@8.14.1-2+deb13u5
no fix listed
1
library/php:8.4-fpm1071b5609d16
curl@8.14.1-2+deb13u5
no fix listed
1
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
no fix listed
1
library/python:3.9da5aee29682d
curl@8.14.1-2
no fix listed
1
library/redmine:6.1.204ac44a2595b
curl@8.14.1-2+deb13u3
no fix listed
1
library/wordpress:latest4abf7a450ee4
curl@8.14.1-2+deb13u5
no fix listed
1
library/wordpress:7.1.3-apache8ecd8d8e3741
curl@8.14.1-2+deb13u5
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
curl@8.14.1-2+deb13u3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
no fix listed
1
localstack/localstack:latestdf6b89814326
curl@8.14.1-2+deb13u5
no fix listed
1
machines/filestash:latestaff504cd28a8
curl@8.14.1-2+deb13u5
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
curl@8.14.1-2+deb13u4
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
curl@8.14.1-2+deb13u4
no fix listed
1
matrixdotorg/synapse:v1.162.06b84a7bbac36
curl@8.14.1-2+deb13u5
no fix listed
1
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
no fix listed
1
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed
1
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
no fix listed
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
curl@8.14.1-2+deb13u3
no fix listed
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
no fix listed
1
netdata/netdata:v2.12.15cfa05a5fa56
curl@8.14.1-2+deb13u5
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
no fix listed
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
curl@8.14.1-2
no fix listed
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
curl@8.14.1-2+deb13u2
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.