StackRadar

CVE-2026-40200

High

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,055
of 17,790 indexed, latest versions
Container images
1,113
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,055 of 17,790 indexed charts deploy, on 1,113 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more1,112
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200

Charts affected

1,055 by stars
ChartLatestAffected imagesRadar Score
firecrawlobeoneVerified publisher3.0.41 of 5See more

firecrawl obeone 3.0.4

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-management-alpine606d8c0d6b3c
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

10,060
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
musl@1.2.5-r10
1.2.5-r12
grafana/grafana:12.1.1a1701c218024
musl@1.2.5-r10
1.2.5-r12
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

17,134
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

2,353
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

5,826
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

4,226
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,124
open-cacheopen-cacheVerified publisher0.1.01 of 1See more

open-cache open-cache 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/atolat/open-cache:latestd6105dd73eb4
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

302
opencost-lensopencost-lens1.0.01 of 2See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,110
everest-db-namespaceopeneverestVerified publisher1.16.21 of 1See more

everest-db-namespace openeverest 1.16.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
percona/everest-helmtools:0.0.1904458d04a18
musl@1.2.5-r1
1.2.5-r3

Open the chart page →

769
cron-connectoropenfaas0.6.161 of 1See more

cron-connector openfaas 0.6.16

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaas/cron-connector:0.7.0982498e8a41e
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

741
federated-gatewayopenfaas0.1.01 of 1See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,240
gcp-pubsub-connectoropenfaas0.0.11 of 1See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,162
kafka-connectoropenfaas0.7.151 of 1See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,164
postgres-connectoropenfaas0.1.21 of 1See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

1,071
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

2,745
rabbitmq-connectoropenfaas0.0.41 of 1See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

777
sns-connectoropenfaas0.1.31 of 1See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

849
sqs-connectoropenfaas0.2.71 of 1See more

sqs-connector openfaas 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

767
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
musl@1.2.5-r1
1.2.5-r3

Open the chart page →

918
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

858
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/alpine:3.196baf43584bcb
musl@1.2.4_git20230717-r5
1.2.4_git20230717-r6

Open the chart page →

2,064
openobserveopenobserve0.92.21 of 6See more

openobserve openobserve 0.92.2

1 of the 6 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
natsio/nats-server-config-reloader:0.23.064cb6c858e79
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

3,166
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/redis:7.2.5-alpine6aaf3f5e6bc8
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

3,465
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
musl@1.2.5-r1
1.2.5-r3

Open the chart page →

7,866
operatonoperatonVerified publisher1.0.51 of 1See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
operaton/operaton:1.0.0-beta-4b35867ffe4d8
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

2,005
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alpine/curl:8.12.08943e8c7e8e4
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

4,550
example-idpory0.64.01 of 1See more

example-idp ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
oryd/hydra-login-consent-node:v26.2.06465e95993b5
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

838
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.07 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

7 of the 40 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/bash:5.2.21a422913be6a4
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
library/nginx:1.25.5-alpine-slim22414422d1ba
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
library/postgres:17.5-alpine6567bca8d7bc
musl@1.2.5-r10
1.2.5-r12
library/postgres:17.2-alpine7e5df973a748
musl@1.2.5-r8
1.2.5-r11
library/redis:7.4.2-alpine02419de7eddf
musl@1.2.5-r9
1.2.5-r11
yetiplatform/bloomcheck:dev85683ddfccbb
musl@1.2.5-r9
1.2.5-r11
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

72,547
lokiot-container-kit1.0.11 of 5See more

loki ot-container-kit 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/memcached:1.6.23-alpine41d19476c100
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

4,844
pgaot-container-kit1.0.32 of 6See more

pga ot-container-kit 1.0.3

2 of the 6 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

5,143
vmot-container-kit0.0.32 of 7See more

vm ot-container-kit 0.0.3

2 of the 7 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

5,418
outscale-s3-exploreroutscale-s3-explorer0.1.41 of 1See more

outscale-s3-explorer outscale-s3-explorer 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,812
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,289
parcaparca-rr0.1.01 of 2See more

parca parca-rr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

2,383
parcial-1parcial-1-chart1.0.02 of 5See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
musl@1.2.5-r10
1.2.5-r12
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

3,863
clickhousepascaliskeVerified publisher1.0.01 of 1See more

clickhouse pascaliske 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6.70-alpinecd450891db46
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

345
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

2,036
hammondpascaliskeVerified publisher2.0.01 of 2See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,807
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

4,805
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

960
stk-fluent-bit-loki-s3paxtecnologia0.2.12 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.1

2 of the 6 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpinec8503d4491ed
musl@1.2.5-r21
1.2.5-r23
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

3,749
everest-db-namespacepercona1.13.01 of 1See more

everest-db-namespace percona 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
percona/everest-helmtools:0.0.1904458d04a18
musl@1.2.5-r1
1.2.5-r3

Open the chart page →

769
picoclawpicoclawVerified publisher0.1.261 of 1See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/mattn/picoclaw:latest517556c8b144
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,557
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
musl@1.2.4_git20230717-r5
1.2.5-r3

Open the chart page →

1,688
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
musl@1.2.5-r0
1.2.5-r3
gitea/act_runner:0.2.11c57233403eff
musl@1.2.5-r0
1.2.5-r3
library/redis:7.4.2-alpine02419de7eddf
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

26,118
plausibleplausible0.1.22 of 2See more

plausible plausible 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,338
k8s-node-image-1-21pnnl-miscscripts0.2.1491 of 2See more

k8s-node-image-1-21 pnnl-miscscripts 0.2.149

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.21.14-nginx-36c19a40d7435d
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,403
k8s-node-image-1-22pnnl-miscscripts0.2.1171 of 2See more

k8s-node-image-1-22 pnnl-miscscripts 0.2.117

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.22.17-nginx-362b3ae9b5ec25
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,403
k8s-node-image-1-23pnnl-miscscripts0.2.1231 of 2See more

k8s-node-image-1-23 pnnl-miscscripts 0.2.123

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.23.17-nginx-36a5ee1dea30e4
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,403
k8s-node-image-1-24pnnl-miscscripts0.2.1281 of 2See more

k8s-node-image-1-24 pnnl-miscscripts 0.2.128

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.24.17-nginx-23952d87cca3d2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,403

Container images carrying it

1,113 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
musl@1.2.5-r0
1.2.5-r3
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
musl@1.2.5-r9
1.2.5-r11
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
musl@1.2.5-r10
1.2.5-r12
1
registry.gitlab.com/dyff/dyff-frontend:0.20.2481be0beaafe
musl@1.2.5-r9
1.2.5-r11
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
musl@1.2.5-r21
1.2.5-r23
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
musl@1.2.5-r21
1.2.5-r23
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
musl@1.2.5-r10
1.2.5-r12
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
musl@1.2.5-r10
1.2.5-r12
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
musl@1.2.5-r0
1.2.5-r3
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
musl@1.2.5-r8
1.2.5-r11
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
musl@1.2.5-r21
1.2.5-r23
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.