StackRadar

CVE-2026-40200

High

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,056
of 17,787 indexed, latest versions
Container images
1,114
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more1,113
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200

Charts affected

1,056 by stars
ChartLatestAffected imagesRadar Score
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

9,381
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,571
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

569
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,159

Container images carrying it

1,114 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
natsio/nats-server-config-reloader:0.20.147094fcae2f4
musl@1.2.5-r10
1.2.5-r12
1
natsio/nats-server-config-reloader:0.15.05b21830a9e9d
musl@1.2.5-r0
1.2.5-r3
1
natsio/nats-server-config-reloader:0.19.181edf32a3680
musl@1.2.5-r10
1.2.5-r12
1
natsio/nats-surveyor:0.9.9104a3e938b23
musl@1.2.5-r21
1.2.5-r23
1
natsio/prometheus-nats-exporter:0.18.002469dc907bc
musl@1.2.5-r10
1.2.5-r12
1
neo4j/helm-charts-reverse-proxy:2026.08.1ea1b8444808d
musl@1.2.5-r9
1.2.5-r11
1
neoskop/ixy:2.1.125152b474f54
musl@1.2.5-r21
1.2.5-r23
1
neosmemo/memos:0.26.23eefcc231141
musl@1.2.5-r9
1.2.5-r11
1
neosmemo/memos:0.24c6defc2dfb98
musl@1.2.5-r10
1.2.5-r12
1
neosu/kubebadges:v0.0.5256530d8e5c6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
netapp/trident-protect-utils:v1.0.058b9fac358bd
musl@1.2.5-r10
1.2.5-r12
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
musl@1.2.5-r21
1.2.5-r23
1
nginxdemos/hello:plain-text751bf8933179
musl@1.2.5-r10
1.2.5-r12
1
nginxdemos/hello:0.4b28d1e16c676
musl@1.2.5-r10
1.2.5-r12
1
nginxinc/nginx-unprivileged:1.29.5-alpine-slim08c2bc93448b
musl@1.2.5-r21
1.2.5-r23
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
musl@1.2.5-r9
1.2.5-r11
1
nginxinc/nginx-unprivileged:1.25-alpine8265b1df5a89
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
musl@1.2.5-r10
1.2.5-r12
1
nginxinc/nginx-unprivileged8f14986c54fa
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
musl@1.2.5-r21
1.2.5-r23
1
nocodb/nocodb:0.258.06779a4ddedf2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
nocodb/nocodb:0.301.5d9516f0bf546
musl@1.2.5-r8
1.2.5-r11
1
nodered/node-red:4.1.2216e7403aab9
musl@1.2.5-r10
1.2.5-r12
1
nodered/node-red:3.0.2-18e2632a7a35dd
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
noooste/garage-ui:v0.12.10b68a9237da6
musl@1.2.5-r21
1.2.5-r23
1
nsqio/nsq:v1.3.01a369c146af7
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
oada/auth:4.0.0c0d077e79ef4
musl@1.2.5-r10
1.2.5-r12
1
oada/http-handler:4.0.0d87efe8ba4b0
musl@1.2.5-r10
1.2.5-r12
1
oada/rev-graph-update:4.0.0ebc8343f05ff
musl@1.2.5-r10
1.2.5-r12
1
oada/shares:4.0.0c6ffb4e8ed63
musl@1.2.5-r10
1.2.5-r12
1
oada/startup:4.0.0fc09495e2f3c
musl@1.2.5-r10
1.2.5-r12
1
oada/sync-handler:4.0.0b7a2cfc137cf
musl@1.2.5-r10
1.2.5-r12
1
oada/users:4.0.0b6c562fa5b1b
musl@1.2.5-r10
1.2.5-r12
1
oada/webhooks:4.0.06590c60de347
musl@1.2.5-r10
1.2.5-r12
1
oada/well-known:4.0.07943fde43b19
musl@1.2.5-r10
1.2.5-r12
1
oada/write-handler:4.0.08464c7f48aae
musl@1.2.5-r10
1.2.5-r12
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
musl@1.2.5-r21
1.2.5-r23
1
octoboxio/octobox:latestd909041c46eb
musl@1.2.5-r21
1.2.5-r23
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
musl@1.2.5-r0
1.2.5-r3
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
musl@1.2.5-r21
1.2.5-r23
1
opea/chatqna-conversation-ui:v0.9bdb9ec215872
musl@1.2.5-r0
1.2.5-r3
1
opencsghq/agenticflow-importer:v1.0.57682270cf585
musl@1.2.4_git20230717-r5
1.2.4_git20230717-r6
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
musl@1.2.5-r9
1.2.5-r11
1
openebs/lvm-driver:1.10.141f73aba7f31
musl@1.2.5-r10
1.2.5-r12
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
musl@1.2.5-r1
1.2.5-r3
1
openkruise/kruise-manager:v1.8.30482722b4e56
musl@1.2.5-r9
1.2.5-r11
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
musl@1.2.5-r0
1.2.5-r3
1
openruntimes/executor:0.11.42228f186dcbb
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
openzipkin/zipkin:2.24197a9692f6a9
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.