StackRadar

CVE-2026-40200

High

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,052
of 17,790 indexed, latest versions
Container images
1,109
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,052 of 17,790 indexed charts deploy, on 1,109 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more1,108
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200

Charts affected

1,052 by stars
ChartLatestAffected imagesRadar Score
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_im:1.0.0a942dc14030a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

8,042
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
devopsfaith/krakend:latestf8bdaa8a1a43
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

42,460
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,165
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
musl@1.2.5-r10
1.2.5-r12
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,502
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

3,921
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

3,921
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

3,587
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

6,239
sequencer-faucetastria0.9.21 of 1See more

sequencer-faucet astria 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,312
attestkeepattestkeepVerified publisher1.1.01 of 2See more

attestkeep attestkeep 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/postgres:16.4-alpine5660c2cbfea5
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,588
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,191
qbittorrent-vpnbdclark-helm-chartsVerified publisher0.7.61 of 2See more

qbittorrent-vpn bdclark-helm-charts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.41.11a5bf4b4820a
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,010
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

2,137
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

2,738
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
blipai/deckard:0.0.28737d5d19a312
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

13,499
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,800
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.26.2e271016441af
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
musl@1.2.5-r0
1.2.5-r3
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

6,035
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

1,859
branchdbbranch-dbVerified publisher0.1.41 of 3See more

branchdb branch-db 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

517
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

1,721
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

3,072
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

951
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,306
memcachedbysamioVerified publisher1.0.21 of 1See more

memcached bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/memcached:1.6.24-alpineeff78098089f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

311
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

2,399
stable-hacalltelemetry0.11.43 of 7See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
natsio/nats-box:0.14.2e808e0644ce1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
natsio/nats-server-config-reloader:0.14.10d50270fa374
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

4,705
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
temporalio/admin-tools:1.26.237e2e33dbd7b
musl@1.2.5-r0
1.2.5-r3
temporalio/server:1.26.21e2626efcbc1
musl@1.2.5-r0
1.2.5-r3
temporalio/ui:2.33.05c586a3c8ec5
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.313See more

catalyst-agents catalyst-agents 0.1.31

3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
musl@1.2.5-r9
1.2.5-r11
grafana/tempo:2.5.0f0200a9bff6d
musl@1.2.5-r0
1.2.5-r3
library/memcached:1.6.23-alpine41d19476c100
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

—
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,321
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
musl@1.2.5-r8
1.2.5-r11

Open the chart page →

1,263
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

1,087
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,073
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,339
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,339
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

1,124
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

4,409
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

7,457
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

4,083
yas3pcharts-derwitt-devVerified publisher0.3.11 of 1See more

yas3p charts-derwitt-dev 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
denniswitt/yas3p:0.2.488a235619af6
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

737
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

1,977
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

660
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

961
supersetchoerodon1.0.01 of 3See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
apache/superset:dockerizeafe59523a6c8
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,439
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,459
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
musl@1.2.5-r21
1.2.5-r23

Open the chart page →

1,986
mailcow-exporterchristianhuthVerified publisher1.5.01 of 1See more

mailcow-exporter christianhuth 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/mailcow/prometheus-exporter:2.1.0cb76395b84eb
musl@1.2.5-r9
1.2.5-r11

Open the chart page →

607
ethereumchronicleVerified publisher0.3.11 of 1See more

ethereum chronicle 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ethereum/client-go:v1.16.532b878e4144a
musl@1.2.5-r10
1.2.5-r12

Open the chart page →

1,350
sith-exporterschronicleVerified publisher0.2.41 of 1See more

sith-exporters chronicle 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-40200.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
musl@1.2.5-r0
1.2.5-r3

Open the chart page →

996

Container images carrying it

1,109 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
musl@1.2.5-r21
1.2.5-r23
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
musl@1.2.5-r21
1.2.5-r23
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
musl@1.2.5-r10
1.2.5-r12
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
musl@1.2.5-r10
1.2.5-r12
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
musl@1.2.5-r0
1.2.5-r3
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
musl@1.2.5-r8
1.2.5-r11
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
musl@1.2.5-r21
1.2.5-r23
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.