StackRadar

CVE-2026-92390

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
835
of 18,137 indexed, latest versions
Container images
688
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 835 of 18,137 indexed charts deploy, on 688 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+23 moreno fix listed688
OSV records
DEBIAN-CVE-2026-92390ECHO-6a92-2a78-c403
Trending
Rank 44 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

835 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

688 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
domainmod/domainmod:4.23.04017bfe4c597
curl@7.88.1-10+deb12u8
no fix listed
1
dragonflyoss/client:v1.5.59fe2a1d6206f
curl@7.88.1-10+deb12u15
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
curl@7.88.1-10+deb12u5
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
curl@7.88.1-10+deb12u12
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
curl@7.88.1-10+deb12u12
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
no fix listed
1
egorz/netology-diploma-web-app:4.05627a54bd1ad
curl@7.88.1-10+deb12u4
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
curl@7.88.1-10+deb12u8
no fix listed
1
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
curl@8.14.1-2+deb13u2
no fix listed
1
esphome/esphome:2026.9.14ad55931c018
curl@8.14.1-2+deb13u3
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
curl@7.88.1-10+deb12u5
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
curl@7.88.1-10+deb12u8
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
curl@7.88.1-10+deb12u12
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
curl@8.14.1-2+deb13u3
no fix listed
1
ethpandaops/assertoor:latest1efa2fba6711
curl@8.14.1-2+deb13u3
no fix listed
1
factoriotools/factorio:latest0be9e1d30572
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:stableb4951bbde08f
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:stablee157a3d8289f
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:lateste91a03290ef8
curl@8.14.1-2+deb13u5
no fix listed
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
curl@8.14.1-2
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
curl@7.88.1-10+deb12u14
no fix listed
1
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
curl@7.88.1-10+deb12u15
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
curl@7.88.1-10+deb12u8
no fix listed
1
filegator/filegator:latesta40a23c383c6
curl@8.14.1-2+deb13u5
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
curl@7.88.1-10+deb12u4
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
curl@7.88.1-10+deb12u14
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
curl@7.88.1-10+deb12u14
no fix listed
1
fosrl/pangolin:latest17774ddbb4bf
curl@7.88.1-10+deb12u15
no fix listed
1
frinx/frinx-graphql-proxy:7.0.017a139608024
curl@7.88.1-10+deb12u7
no fix listed
1
frinx/frinx-graphql-proxy:6.1.05f1368ef47b8
curl@7.88.1-10+deb12u6
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
curl@7.88.1-10+deb12u12
no fix listed
1
geldata/gel:6b3a2815a3956
curl@7.88.1-10+deb12u14
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
curl@7.88.1-10+deb12u7
no fix listed
1
getwud/wud:8.1.1b1cd01c43839
curl@7.88.1-10+deb12u12
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
curl@7.88.1-10+deb12u14
no fix listed
1
glpi/glpi:latest8888c5d8aa46
curl@8.14.1-2+deb13u5
no fix listed
1
google/cloud-sdk:slimc70885ba9f04
curl@8.14.1-2+deb13u5
no fix listed
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
curl@8.14.1-2+deb13u4
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed
1
gotenberg/gotenberg:8.7.0437b9cd3c351
curl@8.8.0-1~bpo12+1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
curl@8.20.0-5~bpo13+1
no fix listed
1
gotenberg/gotenberg:8.36.087c16b9f3642
curl@8.21.0-2~bpo13+1
no fix listed
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
curl@8.5.0-2~bpo12+1
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
curl@7.88.1-10
no fix listed
1
haohanyang/compass-web:0.5.054f2112602ee
curl@7.88.1-10+deb12u14
no fix listed
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
curl@7.88.1-10+deb12u15
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
curl@7.88.1-10+deb12u8
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
curl@7.88.1-10+deb12u8
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.