StackRadar

CVE-2026-92392

High

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
441
of 18,131 indexed, latest versions
Container images
270
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 441 of 18,131 indexed charts deploy, on 270 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+3 more8.14.1-2+deb13u7270
OSV records
DEBIAN-CVE-2026-92392

Charts affected

441 by stars
ChartLatestAffected imagesRadar Score
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
bitwardensinextraVerified publisher0.10.41 of 1See more

bitwarden sinextra 0.10.4

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,527
infisicalsinextraVerified publisher0.7.01 of 1See more

infisical sinextra 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

3,136
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u7

Open the chart page →

5,235
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

10,088
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,014
service-deploymentsnowplow-devopsVerified publisher0.43.11 of 1See more

service-deployment snowplow-devops 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,824
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

2,895
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_app:v1.8.6c935e123030d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_python:v1.8.696805be717ff
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

67,630
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
stalwartstalwart-helmVerified publisher0.7.221 of 2See more

stalwart stalwart-helm 0.7.22

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.26254ce5d7f3db
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,335
steadybit-agentsteadybit3.1.1831 of 6See more

steadybit-agent steadybit 3.1.183

1 of the 6 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

5,041
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

3,914
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

3,888
vaultwardensyself1.0.01 of 1See more

vaultwarden syself 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:latestefb3cde96201
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,527
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

4,111
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
supabase/logflare:latest9d9c8f8c4626
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
supabase/realtime:latest768b559241dd
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

10,735
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,666
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,014
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

2,418
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

4,186
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

3,284
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,476
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
trident-protect-consoletrident-protect100.2609.1-console1 of 3See more

trident-protect-console trident-protect 100.2609.1-console

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

7,829
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
video-dl-botvideo-dl-botVerified publisher1.4.31 of 1See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

2,513
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
voting-app-envvoting-example-with-env0.0.31 of 6See more

voting-app-env voting-example-with-env 0.0.3

1 of the 6 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

8,339
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7

Open the chart page →

2,410
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,168
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815

Container images carrying it

270 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jellyfin/jellyfin:10.11.81694ff069f0c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
jellyfin/jellyfin:latest357724bf0ae2
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
jertel/elastalert2:2.31.03cbf63f9b7dc
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
kitware/cdash:v5.4.0da5abe941506
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
kixote/typemill628f79a08cc7
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
kixote/typemill7dfb517d24f0
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/buildpack-deps:curl3dd78c060b4d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/buildpack-deps:curlc0ecfde33724
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/buildpack-deps:scmec9476a31fe1
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/couchdb:3.53611ce43bd32
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/golang:lateste0174e51e812
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/matomo:5.14.0-apache1e0019262702
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/nextcloud:31.0.10-apacheb7faa1653c39
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
library/nginx:1.28146adea4768b
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
library/nginx:1.31.660f0d4e98656
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/node:latest9965105b7a4e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/php:8.4-fpm1071b5609d16
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/python:3.9da5aee29682d
curl@8.14.1-2
8.14.1-2+deb13u7
1
library/redmine:6.1.204ac44a2595b
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
library/wordpress:latest4abf7a450ee4
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/wordpress:7.1.3-apache8ecd8d8e3741
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
localstack/localstack:latestdf6b89814326
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
machines/filestash:latestaff504cd28a8
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
mariusm/vingress:0.5.0b3db186c3d72
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
matrixdotorg/synapse:v1.162.06b84a7bbac36
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
netdata/netdata:v2.12.15cfa05a5fa56
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
curl@8.14.1-2
8.14.1-2+deb13u7
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
nginxinc/nginx-unprivileged:latestce1317316e27
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
opencsghq/label-studio:v2.5.0-llm-back2a930f366b4c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
openhab/openhab:5.2.1bfd4a60e90da
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.