StackRadar

CVE-2026-40200

High

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,056
of 17,787 indexed, latest versions
Container images
1,114
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more1,113
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200

Charts affected

1,056 by stars
ChartLatestAffected imagesRadar Score
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

9,381
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,571
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

569
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,159

Container images carrying it

1,114 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/rabbitmq:3.13.1-alpine4bcec9fde55c
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
library/rabbitmq:3.12-alpine97907aceae0a
musl@1.2.5-r0
1.2.5-r3
1
library/rabbitmq:3.13.0-alpineb4abd8d41c68
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
musl@1.2.5-r0
1.2.5-r3
1
library/redis:6.2.20-alpine77697a75da9f
musl@1.2.5-r9
1.2.5-r11
1
library/redis:7.4.1-alpinec1e88455c852
musl@1.2.5-r0
1.2.5-r3
1
library/redis:7.0-alpinec9d92d840fd0
musl@1.2.5-r0
1.2.5-r3
1
library/traefik:v2.11.00a5157f742d2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
library/traefik:3.3.5104204dadedf
musl@1.2.5-r9
1.2.5-r11
1
library/varnish:7.3-alpine6db2c9e4c2dd
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
library/varnish:alpinea84e1d4adb58
musl@1.2.5-r21
1.2.5-r23
1
librenms/librenms:24.11.00920bc9117a8
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
lifailon/openrouter-bot:latestea37e4b6b952
musl@1.2.5-r10
1.2.5-r12
1
linkstackorg/linkstack:latest1c8b05399ee4
musl@1.2.5-r10
1.2.5-r12
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
musl@1.2.5-r21
1.2.5-r23
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
musl@1.2.5-r9
1.2.5-r11
1
linuxserver/heimdall:2.6.371597f4461e4
musl@1.2.5-r1
1.2.5-r3
1
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
musl@1.2.5-r0
1.2.5-r3
1
linuxserver/overseerr:1.35.06108ed066d4a
musl@1.2.5-r10
1.2.5-r12
1
linuxserver/smokeping:2.8.2b7f906899cd3
musl@1.2.5-r1
1.2.5-r3
1
lissy93/networking-toolbox:latest700862839553
musl@1.2.5-r21
1.2.5-r23
1
listmonk/listmonk:v6.0.0bf3903d54a46
musl@1.2.5-r21
1.2.5-r23
1
litlyx/litlyx-consumer:latest02225e77d316
musl@1.2.5-r10
1.2.5-r12
1
litlyx/litlyx-dashboard:lateste64ff2d52385
musl@1.2.5-r10
1.2.5-r12
1
litlyx/litlyx-producer:latest10407f36613f
musl@1.2.5-r10
1.2.5-r12
1
livekit/livekit-server:v1.9.03602a85840d5
musl@1.2.5-r10
1.2.5-r12
1
loeken/radarr:5.27.0-nightlya24409d3846d
musl@1.2.5-r9
1.2.5-r11
1
maildev/maildev:2.2.1180ef51f65ee
musl@1.2.5-r8
1.2.5-r11
1
mathieuruellan/piwigo:latest04572c8a1b04
musl@1.2.5-r0
1.2.5-r3
1
mathnao/certs:2.1.3b900e6b64684
musl@1.2.5-r9
1.2.5-r11
1
mauricenino/dashdot:5.9.2236997816917
musl@1.2.5-r9
1.2.5-r11
1
mavrick1/kubestellar-b:latest45ca0429a1d4
musl@1.2.5-r9
1.2.5-r11
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
musl@1.2.5-r9
1.2.5-r11
1
megaease/easegress:latestfad1c7452958
musl@1.2.5-r21
1.2.5-r23
1
metabase/metabase:v0.53.4.17807bc5cad17
musl@1.2.5-r9
1.2.5-r11
1
mikefarah/yq:4.45.12c100efaca06
musl@1.2.5-r8
1.2.5-r11
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
musl@1.2.5-r21
1.2.5-r23
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
musl@1.2.5-r0
1.2.5-r3
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
musl@1.2.5-r21
1.2.5-r23
1
mvisonneau/tailscale:v1.68.1fc45ad8abf10
musl@1.2.5-r0
1.2.5-r3
1
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
musl@1.2.5-r0
1.2.5-r3
1
n8nio/n8n:1.86.08b39ed5a2de9
musl@1.2.5-r9
1.2.5-r11
1
n8nio/n8n:1.33.1dd171d45102a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
n8nio/n8n:1.115.1ed16e560c40e
musl@1.2.5-r10
1.2.5-r12
1
nacos/nacos-server:v3.0.20e951a1d07bb
musl@1.2.5-r10
1.2.5-r12
1
nacos/nacos-server:v3.0.130a39cb0c54d
musl@1.2.5-r9
1.2.5-r11
1
natsio/nats-box:0.14.31cc420186664
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
natsio/nats-box:0.18.0abdc9f9f0120
musl@1.2.5-r10
1.2.5-r12
1
natsio/nats-box:0.14.2e808e0644ce1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
natsio/nats-server-config-reloader:0.14.10d50270fa374
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.