The current latest release of the metrics agent (cloudability/metrics-agent:2.14.6) still ships with a vulnerable curl version.
This image is affected by CVE-2025-9086, a high-severity curl vulnerability.
Upgrading to curl 8.16.0 or later is required to address the issue.
• CVE: CVE-2025-9086
• curl advisory: https://curl.se/docs/CVE-2025-9086.html
• curl changelog (8.16.0): https://curl.se/ch/8.16.0.html
The current latest release of the metrics agent (
cloudability/metrics-agent:2.14.6) still ships with a vulnerable curl version.This image is affected by CVE-2025-9086, a high-severity curl vulnerability.
Upgrading to curl 8.16.0 or later is required to address the issue.
• CVE: CVE-2025-9086
• curl advisory: https://curl.se/docs/CVE-2025-9086.html
• curl changelog (8.16.0): https://curl.se/ch/8.16.0.html