CVE-2026-40200
HighAdvisory
Published 10 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.002
- 6th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,052
- of 17,790 indexed, latest versions
- Container images
- 1,109
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,052 of 17,790 indexed charts deploy, on 1,109 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| muslapk | 1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more | 1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more | 1,108 |
| musldeb | 1.2.2-4 | no fix listed | 1 |
- OSV records
- ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200
Charts affected
1,052 by stars
Container images carrying it
1,109 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | bcad696f03ee | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | d7db5cd4079b | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | 976be6506eb6 | musl | 1.2.5-r23 | 1 |
| ghcr.io/ | 9b4e856d18f6 | musl | 1.2.5-r12 | 1 |
| ghcr.io/ | a558ceae6cdb | musl | 1.2.5-r23 | 1 |
| ghcr.io/ | aaab005242ae | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 8344061b2f22 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 2e059589f7f7 | musl | 1.2.5-r23 | 1 |
| ghcr.io/ | 63cce7624f65 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 7fe76551a78e | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 8c68abbe1cff | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | ee1eb3c9c9a1 | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | c739b74dabb0 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 5c47ef99443a | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | ff0cd9db78d3 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 96c25035cb02 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 0881d3c9359b | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 5d0656fce7d4 | musl | 1.2.5-r12 | 1 |
| ghcr.io/ | 8186d6dd81f4 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 4ba3adf47f5c | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 5b8cfa805cb6 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | ec06685b9ff4 | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | 6b8e02430649 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | ab3f7d0a1d50 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 2d15d14b201a | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | 9ce55520e7bd | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | c90ca8389c87 | musl | 1.2.5-r12 | 1 |
| ghcr.io/ | 121dc29eb14d | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | ded173632986 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 2f5be9cde5f9 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 7e5630757299 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 5470b2ec3161 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | d090bb2060d9 | musl | 1.2.5-r23 | 1 |
| ghcr.io/ | a0b272f6682a | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 18e30413dac2 | musl | 1.2.5-r23 | 1 |
| ghcr.io/ | 561c8f23bdb6 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 2a611369ad1d | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 5c9e99ff7167 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 7cde8c3fa2d1 | musl | 1.2.5-r3 | 1 |
| ghcr.io/ | 274a179fd402 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 62eaa9c9a929 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 00cd9316a379 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | c99e8ef2c545 | musl | 1.2.5-r12 | 1 |
| ghcr.io/ | 6efef5d19d56 | musl | 1.2.5-r12 | 1 |
| ghcr.io/ | 324f9b7b689c | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | cdba39e3f3d0 | musl | 1.2.4_git20230717-r6 | 1 |
| ghcr.io/ | 27f85bb98da3 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 5f7b4c6dd299 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 34c5a1e351d6 | musl | 1.2.5-r11 | 1 |
| ghcr.io/ | 6dfdbc9853bb | musl | 1.2.4_git20230717-r6 | 1 |