StackRadar

CVE-2026-8924

Critical

Advisory

Published 24 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,702
of 17,828 indexed, latest versions
Container images
1,512
deployed by those charts
Fix available
3 of 3
affected packages

libpsl-devel-0.23.0-1.1 on GA media

Carried by container images the latest versions of 1,702 of 17,828 indexed charts deploy, on 1,512 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+99 more1:8.22.0-1+e1, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4+4 more1,299
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+2 more8.21.0-r0, 8.22.0-r0207
libpslrpm0.20.1-lp151.2.43, 0.20.1-lp152.3.70.23.0-1.16
OSV records
ALPINE-CVE-2026-8924DEBIAN-CVE-2026-8924UBUNTU-CVE-2026-8924ECHO-4b8f-d51c-29b8openSUSE-SU-2026:11266-1
Also known as
USN-8487-1

Charts affected

1,702 by stars
ChartLatestAffected imagesRadar Score
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-8924.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,424
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-8924.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,589

Container images carrying it

1,512 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
curl@7.88.1-10+deb12u12
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
curl@7.88.1-10+deb12u12
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
curl@7.88.1-10+deb12u6
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
curl@7.88.1-10+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
curl@7.88.1-10+deb12u6
no fix listed
1
splatform/stratos-config-init:4.4.0-bc65c315c9f4edaca0af7
libpsl@0.20.1-lp152.3.7
0.23.0-1.1
1
splatform/stratos-console:4.4.0-bc65c315c406b95a98b4a
libpsl@0.20.1-lp152.3.7
0.23.0-1.1
1
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
libpsl@0.20.1-lp152.3.7
0.23.0-1.1
1
splatform/stratos-mariadb:4.4.0-bc65c315c28560b598108
libpsl@0.20.1-lp152.3.7
0.23.0-1.1
1
sslhep/servicex_app:v1.8.51d12f943cec5
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
curl@8.14.1-2+deb13u4
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
curl@8.14.1-2+deb13u4
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2api:3.86f56d239d280
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2auth:3.833ecfda16608
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2notifier:3.8f190a6212195
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2rulesengine:3.8259503496ff9
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2scheduler:3.8b1de2055c362
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2stream:3.81c8904a3bf67
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2timersengine:3.81bf35bfaf00c
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2web:3.809989a26c8b7
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stackstorm/st2workflowengine:3.819fdfffdbba8
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm4
1
stalwartlabs/stalwart:v0.16.1425001929f36a
curl@8.14.1-2+deb13u4
no fix listed
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
curl@8.14.1-2+deb13u5
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
curl@8.14.1-2+deb13u4
no fix listed
1
stashapp/stash:v0.31.1df744af5a0c9
curl@8.17.0-r1
8.22.0-r0
1
stashapp/stash-box:latesta534c8afdf39
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.10
1
statcan/ckan:2.93921305425b8
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm4
1
strangebee/thehive:5.8.0-1a7f7b05fba24
curl@7.88.1-10+deb12u15
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm4
1
structurizr/onpremises:2025.11.094b5ffb5119c8
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.10
1
substratusai/verba:v0.4.0-baseURL261695be635eb
curl@7.88.1-10+deb12u5
no fix listed
1
supabase/logflare:latest49bfe526f1b4
curl@8.14.1-2+deb13u4
no fix listed
1
supabase/postgres:17.6.1.136f371b5f3f2ac
curl@8.19.0-r0
8.22.0-r0
1
supabase/realtime:v2.102.3aa1c92c0cf32
curl@7.88.1-10+deb12u14
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
curl@7.88.1-10+deb12u7
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
curl@8.14.1-2+deb13u4
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
curl@7.88.1-10+deb12u7
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
curl@7.88.1-10+deb12u15
no fix listed
1
supabase/studio:latest94a2a9d2906e
curl@7.88.1-10+deb12u15
no fix listed
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.25
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
curl@7.68.0-1ubuntu2.18
7.68.0-1ubuntu2.25+esm4
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.