StackRadar

CVE-2026-92387

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
446
of 18,131 indexed, latest versions
Container images
277
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 446 of 18,131 indexed charts deploy, on 277 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 moreno fix listed277
OSV records
DEBIAN-CVE-2026-92387

Charts affected

446 by stars
ChartLatestAffected imagesRadar Score
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

8,041
webappbenc-uk1.4.31 of 1See more

webapp benc-uk 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
bdbablackduck2026.9.01 of 9See more

bdba blackduck 2026.9.0

1 of the 9 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.2.86806769c10ac
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,256
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
tautulli/tautulli:latesta4323bc09b27
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,685
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,859
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromium0d28ae9a9644
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,520
certmatecertmateVerified publisher2.48.61 of 1See more

certmate certmate 2.48.6

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
fabriziosalmi/certmate:2.48.67dacec6a47d3
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,288
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:trixief9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

18,470
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
kitchenowlchart-kitchenowl0.1.131 of 2See more

kitchenowl chart-kitchenowl 0.1.13

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,298
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,983
paperless-ngxcharts-derwitt-devVerified publisher2.1.71 of 1See more

paperless-ngx charts-derwitt-dev 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,335
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
kamaji-etcdclastixVerified publisher0.18.11 of 4See more

kamaji-etcd clastix 0.18.1

1 of the 4 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
cfssl/cfssl:latesta32a90480788
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,595
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

24,332
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apachee1d42a6985a9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,869
galaxycloudve6.8.91 of 3See more

galaxy cloudve 6.8.9

1 of the 3 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,543
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:maina63dadf119be
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,941
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,284
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,026
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

5,238
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
csghubcsghubVerified publisher2.5.23 of 35See more

csghub csghub 2.5.2

3 of the 35 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.9-ee7d0271e26521
curl@8.14.1-2+deb13u5
no fix listed
opencsghq/label-studio:v2.5.0-llm-back2a930f366b4c
curl@8.14.1-2+deb13u5
no fix listed
opencsghq/label-studio:v2.5.047e22aa71870
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

68,501
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

9,005
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,992
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
dakeradakera-helmVerified publisher0.12.21 of 3See more

dakera dakera-helm 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera:0.12.280072ed2d674
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,288
damap-chartdamapVerified publisher0.4.01 of 5See more

damap-chart damap 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
curl@8.21.0-2~bpo13+1
no fix listed

Open the chart page →

15,525
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
cron-jobdatarepo0.0.31 of 1See more

cron-job datarepo 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
google/cloud-sdk:slimc70885ba9f04
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,805
lakedeepdiverdeepdiverVerified publisher0.3.51 of 1See more

lakedeepdiver deepdiver 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/maltzsama/lakedeepdiver:0.3.5a6e0b03141ff
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,223
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,166
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
no fix listed

Open the chart page →

6,368
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

7,577
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestaa08a61b0dcf
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,360
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
curl@8.14.1-2
no fix listed

Open the chart page →

4,331
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

20,479
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

17,081
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
redpandadata/redpanda:latestc98c2f04a751
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,295
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,524
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,798
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-92387.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815

Container images carrying it

277 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
no fix listed
1
archivebox/archivebox:0.9.708c21bb233130
curl@8.14.1-2+deb13u5
no fix listed
1
baserow/backend:2.4.1497347d0ba74
curl@8.14.1-2+deb13u5
no fix listed
1
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
curl@8.14.1-2+deb13u5
no fix listed
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
curl@8.14.1-2+deb13u2
no fix listed
1
berkeleyskypilot/skypilot:0.14.0a8362d205365
curl@8.14.1-2+deb13u5
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
curl@8.14.1-2
no fix listed
1
boky/postfix:5.1.0:v5.1.0aafc77238423
curl@8.14.1-2+deb13u2
no fix listed
1
buall/postgres-stack:18.6881a785642cb
curl@8.14.1-2+deb13u4
no fix listed
1
budibase/proxy:3.41.38d780b6ee602
curl@8.14.1-2+deb13u4
no fix listed
1
caronc/apprise:latest0b2913b15c8e
curl@8.14.1-2+deb13u5
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
no fix listed
1
cfssl/cfssl:latesta32a90480788
curl@8.14.1-2+deb13u5
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
curl@8.14.1-2+deb13u4
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
curl@8.14.1-2+deb13u3
no fix listed
1
cm2network/squad:latest8cba47f53df5
curl@8.14.1-2+deb13u2
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
no fix listed
1
darkobas/tokenexporter:latestf26e016a9d7e
curl@8.14.1-2+deb13u5
no fix listed
1
defectdojo/defectdojo-django:3.4.100b8a8e82522a8
curl@8.14.1-2+deb13u5
no fix listed
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
curl@8.14.1-2+deb13u2
no fix listed
1
dependencytrack/apiserver:latest4d41f29ce886
curl@8.14.1-2+deb13u5
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
curl@8.14.1-2+deb13u4
no fix listed
1
diygod/rsshub:latestd5fd850a359a
curl@8.14.1-2+deb13u5
no fix listed
1
docmost/docmost:0.96.0b56947fcfd08
curl@8.14.1-2+deb13u4
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
curl@8.14.1-2
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
no fix listed
1
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
curl@8.14.1-2+deb13u2
no fix listed
1
esphome/esphome:2026.7.44866347cb5b4
curl@8.14.1-2+deb13u3
no fix listed
1
esphome/esphome:2026.9.14ad55931c018
curl@8.14.1-2+deb13u3
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
curl@8.14.1-2+deb13u3
no fix listed
1
ethpandaops/assertoor:latest1efa2fba6711
curl@8.14.1-2+deb13u3
no fix listed
1
fabriziosalmi/certmate:2.48.67dacec6a47d3
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:latest0be9e1d30572
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:stableb4951bbde08f
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:stablee157a3d8289f
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:lateste91a03290ef8
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
curl@8.14.1-2
no fix listed
1
filegator/filegator:latesta40a23c383c6
curl@8.14.1-2+deb13u5
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
no fix listed
1
freikin/dawarich:1.15.2e58334ca5697
curl@8.14.1-2+deb13u5
no fix listed
1
glpi/glpi:latest8888c5d8aa46
curl@8.14.1-2+deb13u5
no fix listed
1
google/cloud-sdk:slimc70885ba9f04
curl@8.14.1-2+deb13u5
no fix listed
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
curl@8.14.1-2+deb13u4
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
curl@8.20.0-5~bpo13+1
no fix listed
1
healthchecks/healthchecks:latestaa08a61b0dcf
curl@8.14.1-2+deb13u4
no fix listed
1
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
no fix listed
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
no fix listed
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
curl@8.14.1-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.