StackRadar

CVE-2026-8927

Critical

Advisory

Published 24 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,641
of 17,792 indexed, latest versions
Container images
1,433
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 1,641 of 17,792 indexed charts deploy, on 1,433 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16+103 more7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4+5 more1,217
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+2 more8.21.0-r0, 8.22.0-r0209
curlrpm8.12.1-4.el100:8.12.1-4.el10_2.47
OSV records
ALPINE-CVE-2026-8927DEBIAN-CVE-2026-8927UBUNTU-CVE-2026-8927RHSA-2026:55432RLSA-2026:55432ECHO-5c3c-57c5-8fb2
Also known as
USN-8487-1

Charts affected

1,641 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,433 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
curl@7.58.0-2ubuntu3.16
7.58.0-2ubuntu3.24+esm9
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
curl@8.5.0-2ubuntu10.9
8.5.0-2ubuntu10.10
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.25
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.10
1
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
curl@7.58.0-2ubuntu3.14
7.58.0-2ubuntu3.24+esm9
1
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
curl@8.19.0-r0
8.22.0-r0
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.10
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/mattn/picoclaw:latest517556c8b144
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
curl@7.88.1-10+deb12u8
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
curl@8.19.0-r0
8.22.0-r0
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
curl@8.14.1-2
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.25
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
curl@7.88.1-10+deb12u6
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
curl@7.88.1-10+deb12u8
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
curl@7.88.1-10+deb12u12
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
curl@8.20.0-r0
8.22.0-r0
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
curl@7.88.1-10+deb12u7
no fix listed
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
curl@7.88.1-10+deb12u8
no fix listed
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
curl@8.19.0-r0
8.22.0-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
curl@7.88.1-10+deb12u6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
curl@7.88.1-10+deb12u7
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.10
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.25+esm4
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
curl@7.88.1-10+deb12u7
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.