StackRadar

CVE-2026-87865

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
858
of 18,137 indexed, latest versions
Container images
724
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 858 of 18,137 indexed charts deploy, on 724 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+24 moreno fix listed724
OSV records
DEBIAN-CVE-2026-87865ECHO-0d5c-d2fd-3d77
Trending
Rank 26 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

858 by stars
ChartLatestAffected imagesRadar Score
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

10,573
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

6,540
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,766
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

15,352
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
factoriotools/factorio:stableb4951bbde08f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,428
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

10,925
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

14,570
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,930
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
curl@8.14.1-2
no fix listed

Open the chart page →

11,533
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

4,597
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

13,221
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
curl@7.88.1-10+deb12u6
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

59,149
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

16,488
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
routergroundcover1.13.991 of 7See more

router groundcover 1.13.99

1 of the 7 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
quay.io/groundcover/tools:20260929e8a79ea4cf39
curl@1:8.22.0-1+e1
no fix listed

Open the chart page →

8,845
temporalgroundcover1.13.992 of 2See more

temporal groundcover 1.13.99

2 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
curl@1:8.22.0-1+e1
no fix listed
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
curl@8.14.1-2+e14
no fix listed

Open the chart page →

2,541
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:latestc5542543523c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,392
hatchet-hahatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-ha hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

9,580
hatchet-stackhatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-stack hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

9,580
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,856
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

80,137
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

6,401
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

6,394
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/httpd:latestc842ac797bd1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,466
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,212
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,637
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

4,337
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,837
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/httpd:latestc842ac797bd1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,466
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

10,842
apachehelmforgeVerified publisher1.0.71 of 1See more

apache helmforge 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/httpd:2.4.69c842ac797bd1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,466
archiveboxhelmforgeVerified publisher1.1.141 of 1See more

archivebox helmforge 1.1.14

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,393
atuinhelmforgeVerified publisher1.0.01 of 1See more

atuin helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/atuinsh/atuin:18.23.0f232feeead54
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

1,930
castopodhelmforgeVerified publisher1.2.111 of 3See more

castopod helmforge 1.2.11

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

11,025
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,979
ckanhelmforgeVerified publisher1.3.111 of 6See more

ckan helmforge 1.3.11

1 of the 6 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

11,713
dawarichhelmforgeVerified publisher1.0.52 of 4See more

dawarich helmforge 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
curl@8.14.1-2+deb13u5
no fix listed
postgis/postgis:18-3.67e00e8c3539f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,584
discount-bandithelmforgeVerified publisher2.0.91 of 3See more

discount-bandit helmforge 2.0.9

1 of the 3 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

36,792
drupalhelmforgeVerified publisher1.2.161 of 2See more

drupal helmforge 1.2.16

1 of the 2 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/drupal:11.4.8-php8.5-apache-bookwormdea8cf332565
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

4,218
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

5,376
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,970
generichelmforgeVerified publisher3.1.61 of 1See more

generic helmforge 3.1.6

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
library/nginx:1.31.660f0d4e98656
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
ghostfoliohelmforgeVerified publisher1.0.21 of 4See more

ghostfolio helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.84.28dd6b9bd5cad
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

5,195
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,136
immichhelmforgeVerified publisher1.2.111 of 5See more

immich helmforge 1.2.11

1 of the 5 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

13,287
jenkinshelmforgeVerified publisher1.0.101 of 1See more

jenkins helmforge 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-87865.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-lts-jdk21a660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,212

Container images carrying it

724 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
curl@7.88.1-10+deb12u5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/groundcover/tools:20260929e8a79ea4cf39
curl@1:8.22.0-1+e1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.3995ed11e00e0
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.3fdcc114ea012
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.0b868b93e013d
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.