StackRadar

CVE-2026-92392

High

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
441
of 18,131 indexed, latest versions
Container images
270
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 441 of 18,131 indexed charts deploy, on 270 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+3 more8.14.1-2+deb13u7270
OSV records
DEBIAN-CVE-2026-92392

Charts affected

441 by stars
ChartLatestAffected imagesRadar Score
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

8,332
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
library/node:latest9965105b7a4e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,793
tokenexporterethersphereVerified publisher0.3.01 of 1See more

tokenexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
darkobas/tokenexporter:latestf26e016a9d7e
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

3,363
factorio-headless-serverfactorio-headless-server2.5.61 of 1See more

factorio-headless-server factorio-headless-server 2.5.6

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
factoriotools/factorio:stablee157a3d8289f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,310
factorio-server-chartsfactorio-headless-server2.5.41 of 1See more

factorio-server-charts factorio-headless-server 2.5.4

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
factoriotools/factorio:latest0be9e1d30572
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,310
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

9,086
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

5,904
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
fireflyiii/data-importer:version-2.2.3ab52bf932546
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

11,980
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

5,683
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,666
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,666
fluent-bit-aggregatorfluent-bit-aggregatorOfficialVerified publisher1.1.31 of 1See more

fluent-bit-aggregator fluent-bit-aggregator 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,011
fluent-bit-collectorfluent-bit-collectorOfficialVerified publisher1.1.31 of 1See more

fluent-bit-collector fluent-bit-collector 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,011
fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher1.1.01 of 2See more

fluentd-aggregator fluentd-aggregator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluentd-aggregator-docker-image:2.2.0f6ae79dfc5f9
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,567
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-gateway:2026.818.14094351d6f973843f
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

33,979
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,172
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7

Open the chart page →

3,747
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
factoriotools/factorio:stableb4951bbde08f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,427
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

2,926
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
curl@8.14.1-2
8.14.1-2+deb13u7

Open the chart page →

11,512
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/phpmyadmin:latest7ebeef41095c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

13,194
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

16,415
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:latestc5542543523c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

7,369
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,856
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/httpd:latestc842ac797bd1
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,465
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

2,194
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/httpd:latestc842ac797bd1
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,465
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/httpd:2.4.6803f858efb82c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,583
archiveboxhelmforgeVerified publisher1.1.131 of 1See more

archivebox helmforge 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.708c21bb233130
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

6,436
castopodhelmforgeVerified publisher1.2.101 of 3See more

castopod helmforge 1.2.10

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

10,952
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

9,047
dawarichhelmforgeVerified publisher1.0.32 of 4See more

dawarich helmforge 1.0.3

2 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
postgis/postgis:18-3.67e00e8c3539f
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

12,719
discount-bandithelmforgeVerified publisher2.0.91 of 3See more

discount-bandit helmforge 2.0.9

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

36,491
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

5,331
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

3,938
generichelmforgeVerified publisher3.1.61 of 1See more

generic helmforge 3.1.6

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nginx:1.31.660f0d4e98656
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,815
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

7,062
immichhelmforgeVerified publisher1.2.101 of 5See more

immich helmforge 1.2.10

1 of the 5 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u7

Open the chart page →

13,266
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7

Open the chart page →

3,552
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7

Open the chart page →

4,075
nextcloudhelmforgeVerified publisher2.0.01 of 3See more

nextcloud helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache8f2f0e93aca5
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

7,091
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
curl@8.14.1-2
8.14.1-2+deb13u7

Open the chart page →

5,639
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
library/httpd:latest41163d514c02
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,465
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-92392.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest357724bf0ae2
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7

Open the chart page →

1,582

Container images carrying it

270 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
ghcr.io/wgbh-mla/chowda:maina63dadf119be
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
ghcr.io/yourls/yourls:1.10.62f2879125903
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
8.14.1-2+deb13u7
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1394bc87d066d
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.2dc78bf0d3cbc
curl@8.14.1-2+deb13u5
8.14.1-2+deb13u7
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u7
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.