StackRadar

CVE-2026-87866

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
858
of 18,137 indexed, latest versions
Container images
724
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 858 of 18,137 indexed charts deploy, on 724 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+24 moreno fix listed724
OSV records
DEBIAN-CVE-2026-87866ECHO-354c-d2e4-dde2
Trending
Rank 24 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

858 by stars
ChartLatestAffected imagesRadar Score
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

6,469
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

14,355
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
curl@7.88.1-10+deb12u5
no fix listed
microslac/conversations:latest1b24afcd71ff
curl@7.88.1-10+deb12u5
no fix listed
microslac/teams:latest0f75997fcbe5
curl@7.88.1-10+deb12u5
no fix listed
microslac/users:latest216ea6832a56
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

34,603
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

3,629
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

14,871
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

116,915
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

12,052
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
localstack/localstack:latestdf6b89814326
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

12,239
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,302
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

2,965
moodlemoodle2.0.01 of 2See more

moodle moodle 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.3.0.2d3e3607acf56
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

5,275
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
moreillon/camera-viewer:lateste418cc694bd5
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

14,180
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

11,097
user-manager-mongodbmoreillonVerified publisher0.6.22 of 4See more

user-manager-mongodb moreillon 0.6.2

2 of the 4 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
curl@7.88.1-10+deb12u4
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

29,192
user-manager-neo4jmoreillonVerified publisher0.9.73 of 6See more

user-manager-neo4j moreillon 0.9.7

3 of the 6 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
curl@7.88.1-10+deb12u6
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
curl@7.88.1-10+deb12u4
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

34,063
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

7,410
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
machines/filestash:latestaff504cd28a8
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,857
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

14,412
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.443498a94b22f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,415
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,363
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

15,218
apachemy-chart-repo0.1.01 of 2See more

apache my-chart-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/httpd:2.403f858efb82c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,100
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

5,929
nginx-chartmyk8scharts1.0.01 of 1See more

nginx-chart myk8scharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
nginx-appmy-nginx-app0.1.31 of 1See more

nginx-app my-nginx-app 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

5,232
helloworldmysql2s3bk0.1.01 of 1See more

helloworld mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
curl@7.88.1-10+deb12u8
no fix listed
hazegoodlife/haaze:milksite8d4c63169e14
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

10,622
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

20,521
my-nginxna-helm-chartsVerified publisher1.0.01 of 1See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latest4d41f29ce886
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,593
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
curl@7.88.1-10
no fix listed

Open the chart page →

14,394
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

19,172
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
curl@7.88.1-10+deb12u1
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
curl@7.88.1-10+deb12u1
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
curl@7.88.1-10+deb12u1
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

291,591
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

37,182
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,896
web-applicationnetology-yc-helmVerified publisher4.0.01 of 1See more

web-application netology-yc-helm 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
egorz/netology-diploma-web-app:4.05627a54bd1ad
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

6,877
networkconnectivitytestnetworkconnectivitytest1.0.01 of 1See more

networkconnectivitytest networkconnectivitytest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
nomansadiq11/connectivitytest:v1.0.0eb14ccf304a7
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

5,260
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:latestce1317316e27
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,773
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
curl@8.14.1-2
no fix listed

Open the chart page →

4,838
nginx-appnginx-app0.1.21 of 1See more

nginx-app nginx-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,854
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

5,879
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

5,879
nginx-examplengrok-ingress-helm0.3.01 of 2See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,662
nilchelanilchela-chartsVerified publisher0.1.21 of 1See more

nilchela nilchela-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
ghcr.io/infiniteprimates/nilchela:0.0.5098e6879c83c
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

4,468
basenn-coVerified publisher0.1.01 of 1See more

base nn-co 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,053
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87866.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

11,819

Container images carrying it

724 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
curl@7.88.1-10+deb12u5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/groundcover/tools:20260929e8a79ea4cf39
curl@1:8.22.0-1+e1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
curl@7.88.1-10+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.3995ed11e00e0
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.3fdcc114ea012
curl@7.88.1-10+deb12u15
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.0b868b93e013d
curl@8.14.1-2+deb13u7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.