StackRadar

CVE-2026-40200

High

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,056
of 17,787 indexed, latest versions
Container images
1,114
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more1,113
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200

Charts affected

1,056 by stars
ChartLatestAffected imagesRadar Score
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

9,381
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,571
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

569
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,159

Container images carrying it

1,114 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
openzipkin/zipkin-slim:3.6.0a69e1057df36
musl@1.2.5-r21
1.2.5-r23
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
musl@1.2.5-r9
1.2.5-r11
1
oranhack7/solidproject:77c6453942223f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
musl@1.2.5-r9
1.2.5-r11
1
oryd/hydra:v2.3.0b94007e19a1f
musl@1.2.5-r0
1.2.5-r3
1
oryd/hydra:v26.2.0ff67c7fb5f95
musl@1.2.5-r9
1.2.5-r11
1
oryd/hydra-login-consent-node:v26.2.06465e95993b5
musl@1.2.5-r9
1.2.5-r11
1
oryd/keto:v26.2.0bfdb8b9e283a
musl@1.2.5-r9
1.2.5-r11
1
oryd/kratos:v26.2.02a13bb8d362c
musl@1.2.5-r1
1.2.5-r3
1
oryd/oathkeeper:v26.2.0467329abde34
musl@1.2.5-r9
1.2.5-r11
1
owncloud/ocis:7.1.388e7c854517d
musl@1.2.5-r1
1.2.5-r3
1
owncloud/ocis:8.0.1b38fd8fdd58f
musl@1.2.5-r21
1.2.5-r23
1
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
musl@1.2.5-r1
1.2.5-r3
1
pgsharding/spqr-router:nightly-2.8.3-1839-f66048d84734940216d3
musl@1.2.4_git20230717-r5
1.2.4_git20230717-r6
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
musl@1.2.5-r21
1.2.5-r23
1
phpipam/phpipam-cron:v1.7.354468713454e
musl@1.2.5-r0
1.2.5-r3
1
phpipam/phpipam-www:v1.7.3ace0efd24830
musl@1.2.5-r0
1.2.5-r3
1
platzio/backend:v0.6.5d5e5972f344b
musl@1.2.5-r10
1.2.5-r12
1
platzio/frontend:v0.6.073083749b46a
musl@1.2.5-r10
1.2.5-r12
1
pmoscode/excalidraw:v0.18.08ee61554699c
musl@1.2.5-r10
1.2.5-r12
1
pnnlmiscscripts/k8s-node-image:1.22.17-nginx-362b3ae9b5ec25
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
pnnlmiscscripts/k8s-node-image:1.24.17-nginx-23952d87cca3d2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
pnnlmiscscripts/k8s-node-image:1.23.17-nginx-36a5ee1dea30e4
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
pnnlmiscscripts/k8s-node-image:1.21.14-nginx-36c19a40d7435d
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
musl@1.2.5-r0
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
musl@1.2.5-r0
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
musl@1.2.5-r0
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
musl@1.2.5-r0
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
musl@1.2.5-r0
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
musl@1.2.5-r1
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
musl@1.2.5-r1
1.2.5-r3
1
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
musl@1.2.5-r0
1.2.5-r3
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
musl@1.2.5-r0
1.2.5-r3
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
musl@1.2.5-r21
1.2.5-r23
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
providus/undefined:lateste0b9f03bcd98
musl@1.2.5-r21
1.2.5-r23
1
prowlercloud/prowler-ui:5.31.179ee83c8e702
musl@1.2.5-r21
1.2.5-r23
1
psono/psono-server:5.0.03b974b43ea03
musl@1.2.5-r0
1.2.5-r3
1
pubeldev/prusa_exporter:2.0.01091665a020a
musl@1.2.5-r21
1.2.5-r23
1
pvillaverde/radio_dixital:1.5.0326a793e509f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
pypiserver/pypiserver:v2.4.1e935e19433ef
musl@1.2.5-r1
1.2.5-r3
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
qmcgaw/gluetun:v3.41.11a5bf4b4820a
musl@1.2.5-r10
1.2.5-r12
1
qmcgaw/gluetun:v3.40.02b42bfa04675
musl@1.2.5-r0
1.2.5-r3
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
musl@1.2.5-r10
1.2.5-r12
1
rancher/local-path-provisioner:v0.0.329289da488b07
musl@1.2.5-r10
1.2.5-r12
1
rancher/local-path-provisioner:v0.0.309b9148811700
musl@1.2.5-r0
1.2.5-r3
1
rapidfort/curl:8.7.18483c9f4490f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
reaper99/recipya:v1.2.27f7ec3aeb88c
musl@1.2.5-r8
1.2.5-r11
1
redis/redisinsight:2.68019fcf774631
musl@1.2.5-r0
1.2.5-r3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.