StackRadar

CVE-2026-40183

Medium

Advisory

Published 13 Apr 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
imagemagickdeb8:7.1.1.43+dfsg1-1, 8:7.1.1.43+dfsg1-1+deb13u2, 8:7.1.1.43+dfsg1-1+deb13u3, 8:7.1.1.43+dfsg1-1+deb13u5+4 more8:7.1.1.43+dfsg1-1+deb13u820
OSV records
DEBIAN-CVE-2026-40183UBUNTU-CVE-2026-40183

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

3,074
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

8,825
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
imagemagick@8:7.1.1.43+dfsg1-1+deb13u5
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

9,316
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

12,037
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
imagemagick@8:7.1.1.43+dfsg1-1+deb13u5
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

11,205
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
imagemagick@8:7.1.1.43+dfsg1-1+deb13u2
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

11,764
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
imagemagick@8:7.1.2.3+dfsg1-1
no fix listed

Open the chart page →

11,103
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

7,696
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
imagemagick@8:7.1.1.43+dfsg1-1
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

7,489
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

3,773
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

13,391
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

7,233
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
imagemagick@8:7.1.1.43+dfsg1-1+deb13u6
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

10,849
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

9,103
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

9,620
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

8,698
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

11,950
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

10,605
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
imagemagick@8:7.1.1.43+dfsg1-1+deb13u2
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

9,534
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8

Open the chart page →

9,755
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-40183.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

10,348

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
2
apache/tika:latest-full80072bb73dd3
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
imagemagick@8:7.1.1.43+dfsg1-1+deb13u6
8:7.1.1.43+dfsg1-1+deb13u8
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
imagemagick@8:7.1.1.43+dfsg1-1
8:7.1.1.43+dfsg1-1+deb13u8
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
1
itzg/bungeecord:latest1c59f9631f3b
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
1
library/python:3.9da5aee29682d
imagemagick@8:7.1.1.43+dfsg1-1+deb13u2
8:7.1.1.43+dfsg1-1+deb13u8
1
library/wordpress:php8.1-apachef73396626d2f
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
1
mindsdb/mindsdb:latest163011c09299
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8
1
photoprism/photoprism:260601650c6ad5a651
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
photoprism/photoprism:260728958642220223
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
imagemagick@8:7.1.2.3+dfsg1-1
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
imagemagick@8:7.1.1.43+dfsg1-1+deb13u5
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
imagemagick@8:7.1.1.43+dfsg1-1+deb13u5
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
imagemagick@8:7.1.1.43+dfsg1-1+deb13u2
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
imagemagick@8:7.1.1.43+dfsg1-1+deb13u3
8:7.1.1.43+dfsg1-1+deb13u8
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
imagemagick@8:7.1.1.43+dfsg1-1+deb13u7
8:7.1.1.43+dfsg1-1+deb13u8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.