StackRadar

CVE-2026-87866

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
844
of 18,137 indexed, latest versions
Container images
707
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 844 of 18,137 indexed charts deploy, on 707 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+24 moreno fix listed707
OSV records
DEBIAN-CVE-2026-87866ECHO-354c-d2e4-dde2
Trending
Rank 24 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

844 by stars
ChartLatestAffected imagesRadar Score
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
curl@7.88.1-10+deb12u12
no fix listed
moreillon/group-manager:latest3caa8f710ee0
curl@7.88.1-10+deb12u14
no fix listed
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
curl@7.88.1-10+deb12u4
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
curl@7.88.1-10+deb12u4
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
curl@7.88.1-10+deb12u5
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

71,749
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

19,341
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.201 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.20

1 of the 4 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,901
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,150
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,027
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

12,148
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,332
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

4,534
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,247
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

32,841
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

11,376
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,359
librephotosk8sonlabVerified publisher1.1.71 of 7See more

librephotos k8sonlab 1.1.7

1 of the 7 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.2.1111203b9551a
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

18,270
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,721
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,564
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed

Open the chart page →

39,053
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

10,321
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,405
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

3,810
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

3,844
cdashkitwareVerified publisher0.20.02 of 3See more

cdash kitware 0.20.0

2 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
curl@7.88.1-10+deb12u8
no fix listed
kitware/cdash:v5.4.0da5abe941506
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

13,663
kollectkollectVerified publisher0.21.01 of 1See more

kollect kollect 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,309
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

10,389
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

13,979
finops-notebookskrateo0.1.11 of 1See more

finops-notebooks krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

5,011
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

14,186
nginxkrateo0.1.01 of 1See more

nginx krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.28146adea4768b
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,001
oasgen-providerkrateo0.11.11 of 1See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,618
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

7,432
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

7,371
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
curl@7.88.1-10+deb12u1
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

87,642
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

12,213
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
kubeadapt-k8s-pulsekubeadaptVerified publisher1.0.21 of 1See more

kubeadapt-k8s-pulse kubeadapt 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

2,991
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

9,627
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

5,466
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

39,489
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.22 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/influxdb:2.8983c696655e8
curl@7.88.1-10+deb12u15
no fix listed
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

7,049
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,005
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,524
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

34,555
network-enforcerkubewardenVerified publisher0.1.31 of 3See more

network-enforcer kubewarden 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,458
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

11,195

Container images carrying it

707 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.0b868b93e013d
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.