StackRadar

CVE-2026-92392

High

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
441
of 18,131 indexed, latest versions
Container images
270
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 441 of 18,131 indexed charts deploy, on 270 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+3 more8.14.1-2+deb13u7270
OSV records
DEBIAN-CVE-2026-92392

Charts affected

441 by stars
ChartLatestAffected imagesRadar Score
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
bitwardensinextraVerified publisher0.10.41 of 1See more

bitwarden sinextra 0.10.4

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,527
infisicalsinextraVerified publisher0.7.01 of 1See more

infisical sinextra 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

3,136
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u7

Open the chart page →

5,235
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

10,088
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,014
service-deploymentsnowplow-devopsVerified publisher0.43.11 of 1See more

service-deployment snowplow-devops 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,824
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

2,895
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_app:v1.8.6c935e123030d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_python:v1.8.696805be717ff
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

67,630
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
stalwartstalwart-helmVerified publisher0.7.221 of 2See more

stalwart stalwart-helm 0.7.22

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.26254ce5d7f3db
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,335
steadybit-agentsteadybit3.1.1831 of 6See more

steadybit-agent steadybit 3.1.183

1 of the 6 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

5,041
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

3,914
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

3,888
vaultwardensyself1.0.01 of 1See more

vaultwarden syself 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:latestefb3cde96201
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,527
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

4,111
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
supabase/logflare:latest9d9c8f8c4626
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
supabase/realtime:latest768b559241dd
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

10,735
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,666
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,014
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

2,418
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

4,186
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

3,284
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,476
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
trident-protect-consoletrident-protect100.2609.1-console1 of 3See more

trident-protect-console trident-protect 100.2609.1-console

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

7,829
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
video-dl-botvideo-dl-botVerified publisher1.4.31 of 1See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

2,513
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
voting-app-envvoting-example-with-env0.0.31 of 6See more

voting-app-env voting-example-with-env 0.0.3

1 of the 6 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

8,339
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7

Open the chart page →

2,410
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,168
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815

Container images carrying it

270 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
baserow/backend:2.4.1497347d0ba74
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
berkeleyskypilot/skypilot:0.14.0a8362d205365
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
curl@8.14.1-2
8.14.1-2+deb13u7
1
boky/postfix:5.1.0:v5.1.0aafc77238423
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
buall/postgres-stack:18.6881a785642cb
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
budibase/proxy:3.41.38d780b6ee602
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
caronc/apprise:latest0b2913b15c8e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
cfssl/cfssl:latesta32a90480788
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
chocobozzz/peertube:v8.1.5052712130691
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
cm2network/squad:latest8cba47f53df5
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
darkobas/tokenexporter:latestf26e016a9d7e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
defectdojo/defectdojo-django:3.4.100b8a8e82522a8
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
dependencytrack/apiserver:latest4d41f29ce886
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
diygod/rsshub:latestd5fd850a359a
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
docmost/docmost:0.96.0b56947fcfd08
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
curl@8.14.1-2
8.14.1-2+deb13u7
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
escaping/core-keeper-dedicated:latest87fa79255962
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
esphome/esphome:2026.7.44866347cb5b4
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
esphome/esphome:2026.9.14ad55931c018
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
espocrm/espocrm:9.3.101b5a24504ed9
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
ethpandaops/assertoor:latest1efa2fba6711
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
fabriziosalmi/certmate:2.48.67dacec6a47d3
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
factoriotools/factorio:latest0be9e1d30572
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
factoriotools/factorio:stableb4951bbde08f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
factoriotools/factorio:stablee157a3d8289f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
factoriotools/factorio:lateste91a03290ef8
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
curl@8.14.1-2
8.14.1-2+deb13u7
1
filegator/filegator:latesta40a23c383c6
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
freikin/dawarich:1.15.2e58334ca5697
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
glpi/glpi:latest8888c5d8aa46
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
google/cloud-sdk:slimc70885ba9f04
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
healthchecks/healthchecks:latestaa08a61b0dcf
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
curl@8.14.1-2
8.14.1-2+deb13u7
1
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
infisical/infisical:latest3f014f284cb9
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
inventree/inventree:1.5.74aefd6e2bb0e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
8.14.1-2+deb13u7
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.