CVE-2026-8925
CriticalAdvisory
Published 24 Jun 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.007
- 50th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 520
- of 17,787 indexed, latest versions
- Container images
- 475
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 520 of 17,787 indexed charts deploy, on 475 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+24 more | 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 | 261 |
| curlapk | 8.17.0-r1, 8.18.0-r0, 8.19.0-r0, 8.20.0-r0+1 more | 8.21.0-r0, 8.22.0-r0 | 214 |
- OSV records
- ALPINE-CVE-2026-8925UBUNTU-CVE-2026-8925
- Also known as
- USN-8487-1
Charts affected
520 by stars
Container images carrying it
475 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| scholtz2/ | 3a3b3d3277d2 | curl | 8.18.0-1ubuntu2.2 | 1 |
| scholtz2/ | 6770214bc881 | curl | 8.18.0-1ubuntu2.2 | 1 |
| seafileltd/ | d0c66e4621bd | curl | 7.81.0-1ubuntu1.25 | 1 |
| securecodebox/ | afcefbd56d61 | curl | 8.22.0-r0 | 1 |
| shaowenchen/ | 315444f703f4 | curl | 7.81.0-1ubuntu1.25 | 1 |
| siakhooi/ | f1f4b5b1b870 | curl | 8.22.0-r0 | 1 |
| signalen/ | 1ab79cb7fe21 | curl | 8.22.0-r0 | 1 |
| snipe/ | 141ebf2386fe | curl | 8.5.0-2ubuntu10.10 | 1 |
| softwaremill/ | 845b5e8f8056 | curl | 8.18.0-1ubuntu2.2 | 1 |
| stashapp/ | df744af5a0c9 | curl | 8.22.0-r0 | 1 |
| stashapp/ | a534c8afdf39 | curl | 8.5.0-2ubuntu10.10 | 1 |
| structurizr/ | 4b5ffb5119c8 | curl | 8.5.0-2ubuntu10.10 | 1 |
| supabase/ | f371b5f3f2ac | curl | 8.22.0-r0 | 1 |
| svtechnmaa/ | a934ffd63d25 | curl | 7.81.0-1ubuntu1.25 | 1 |
| svtechnmaa/ | 410a25b51f9f | curl | 7.81.0-1ubuntu1.25 | 1 |
| syncthing/ | 7c60eb0ec887 | curl | 8.22.0-r0 | 1 |
| temporalio/ | cfde8170c92f | curl | 8.22.0-r0 | 1 |
| temporalio/ | f14912b699cf | curl | 8.22.0-r0 | 1 |
| thmmniii/ | 5438517d9fc2 | curl | 7.81.0-1ubuntu1.25 | 1 |
| timescale/ | a8e3322e1cf9 | curl | 7.81.0-1ubuntu1.25 | 1 |
| timescale/ | cdb9ae118899 | curl | 7.81.0-1ubuntu1.25 | 1 |
| timescale/ | e8d0a9cc3db5 | curl | 7.81.0-1ubuntu1.25 | 1 |
| timescale/ | ed719c0cd19d | curl | 7.81.0-1ubuntu1.25 | 1 |
| tombursch/ | 517f808eee66 | curl | 8.22.0-r0 | 1 |
| tomsquest/ | a594c624c5a6 | curl | 8.22.0-r0 | 1 |
| trinodb/ | ee80ab5eeab2 | curl | 7.81.0-1ubuntu1.25 | 1 |
| trueosiris/ | 9356f98ad561 | curl | 7.81.0-1ubuntu1.25 | 1 |
| twentycrm/ | e7d9948bf284 | curl | 8.22.0-r0 | 1 |
| twentycrm/ | 2f78405a78be | curl | 7.81.0-1ubuntu1.25 | 1 |
| udhos/ | 196ef68af380 | curl | 8.22.0-r0 | 1 |
| udhos/ | e588db500edf | curl | 8.22.0-r0 | 1 |
| udhos/ | 615b6a7d742e | curl | 8.22.0-r0 | 1 |
| udhos/ | cf7979da82e1 | curl | 8.22.0-r0 | 1 |
| vaultwarden/ | d3531610b486 | curl | 8.22.0-r0 | 1 |
| wistefan/ | e0887302b2d8 | curl | 7.81.0-1ubuntu1.25 | 1 |
| wolveix/ | 199be1064b18 | curl | 7.81.0-1ubuntu1.25 | 1 |
| wolveix/ | 464d11e36e10 | curl | 7.81.0-1ubuntu1.25 | 1 |
| workadventure/ | 92b664c2a06f | curl | 7.81.0-1ubuntu1.25 | 1 |
| wsjbr/ | 5e594f5f09f6 | curl | 8.21.0-r0 | 1 |
| xeotek/ | 39a3b37a17c5 | curl | 7.81.0-1ubuntu1.25 | 1 |
| zabbix/ | 7322a94c5d7a | curl | 8.5.0-2ubuntu10.10 | 1 |
| zabbix/ | e5b594057c9c | curl | 7.81.0-1ubuntu1.25 | 1 |
| zabbix/ | 55d074b6b031 | curl | 8.5.0-2ubuntu10.10 | 1 |
| zabbix/ | 7e8c8e059533 | curl | 8.5.0-2ubuntu10.10 | 1 |
| zabbix/ | d59ffa07f615 | curl | 7.81.0-1ubuntu1.25 | 1 |
| zabbix/ | 0e5f69c4c54e | curl | 8.5.0-2ubuntu10.10 | 1 |
| zabbix/ | 7d4d58086515 | curl | 8.5.0-2ubuntu10.10 | 1 |
| zabbix/ | 99e9a090b516 | curl | 7.81.0-1ubuntu1.25 | 1 |
| zabbix/ | 915b3183e054 | curl | 8.5.0-2ubuntu10.10 | 1 |
| zimengxiong/ | 242629350b06 | curl | 8.22.0-r0 | 1 |