CVE-2026-40200
HighAdvisory
Published 10 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.002
- 6th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,056
- of 17,787 indexed, latest versions
- Container images
- 1,114
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| muslapk | 1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+5 more | 1.2.4_git20230717-r6, 1.2.5-r3, 1.2.5-r11, 1.2.5-r12+2 more | 1,113 |
| musldeb | 1.2.2-4 | no fix listed | 1 |
- OSV records
- ALPINE-CVE-2026-40200UBUNTU-CVE-2026-40200
Charts affected
1,056 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| silence-operatorwiremindVerified publisher | 0.0.8 | 1 of 1See more | 789 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,197 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
| language-toolzekker6Verified publisher | 1.12.1 | 1 of 2See more | 1,571 |
| zerossl-cert-managerzerossl-cert-manager | 0.1.0 | 1 of 2See more | 569 |
| zipkinzipkinVerified publisher | 0.5.0 | 1 of 1See more | 1,159 |
Container images carrying it
1,114 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oryd/ | fe2428f103a6 | musl | 1.2.5-r3 | 2 |
| percona/ | 904458d04a18 | musl | 1.2.5-r3 | 2 |
| rancher/ | 34ff0847cc47 | musl | 1.2.5-r23 | 2 |
| rancher/ | 9bebefa0b908 | musl | 1.2.5-r3 | 2 |
| rclone/ | 74c51b8817e5 | musl | 1.2.5-r3 | 2 |
| sysnet4admin/ | c5bd3bb1b5a6 | musl | 1.2.5-r11 | 2 |
| timberio/ | 2d16ae87ec39 | musl | 1.2.5-r12 | 2 |
| uselagoon/ | 2c89ed939b8b | musl | 1.2.5-r11 | 2 |
| valkey/ | 10328d00120d | musl | 1.2.5-r23 | 2 |
| ghcr.io/ | c181abe1093d | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | df576862b7c0 | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | e192ad567e0b | musl | 1.2.5-r23 | 2 |
| ghcr.io/ | f6e481386d70 | musl | 1.2.5-r23 | 2 |
| ghcr.io/ | 4249e403225a | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | 4768ea1c5fd2 | musl | 1.2.5-r3 | 2 |
| ghcr.io/ | f115777d1112 | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | 81afafdd96a5 | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | 156beafae7ca | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | 49bce0dd876d | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | c137478627cc | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | 8f7551205fbd | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | 42002d66ddb3 | musl | 1.2.5-r11 | 2 |
| ghcr.io/ | fba6fb872281 | musl | 1.2.5-r23 | 2 |
| ghcr.io/ | ca31ec35b829 | musl | 1.2.5-r12 | 2 |
| ghcr.io/ | d44135b02d77 | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | e84ea9d93b60 | musl | 1.2.4_git20230717-r6 | 2 |
| ghcr.io/ | 5f26407fd2ed | musl | 1.2.5-r12 | 2 |
| quay.io/ | b17b13321678 | musl | 1.2.5-r12 | 2 |
| quay.io/ | 8745af1f9bbb | musl | 1.2.5-r12 | 2 |
| quay.io/ | 716b0b33ff2d | musl | 1.2.5-r12 | 2 |
| quay.io/ | b8d5067137fe | musl | 1.2.4_git20230717-r6 | 2 |
| quay.io/ | f6ed71d0f9f1 | musl | 1.2.5-r3 | 2 |
| registry.gitlab.com/ | b1198ea741d1 | musl | 1.2.5-r23 | 2 |
| registry.gitlab.com/ | 9bdb1062d960 | musl | 1.2.5-r23 | 2 |
| registry.k8s.io/ | 695d79381ee6 | musl | 1.2.5-r12 | 2 |
| registry.k8s.io/ | b3aba22b1da8 | musl | 1.2.4_git20230717-r6 | 2 |
| registry.k8s.io/ | d2fbc4ec70d8 | musl | 1.2.5-r11 | 2 |
| 2martens/ | bf1cdb80239d | musl | 1.2.5-r3 | 1 |
| 2martens/ | bd1ba6ab84c9 | musl | 1.2.5-r12 | 1 |
| 2martens/ | ba2c3040dab0 | musl | 1.2.5-r12 | 1 |
| abdullahkhawer/ | 28a6c3f7e0a9 | musl | 1.2.5-r11 | 1 |
| abhinavsingh/ | 51adc989fd03 | musl | 1.2.5-r11 | 1 |
| abiondevelopment/ | c741988fbd23 | musl | 1.2.5-r11 | 1 |
| adguard/ | 7fbf01d73ecb | musl | 1.2.5-r23 | 1 |
| adguard/ | d765078d2140 | musl | 1.2.5-r11 | 1 |
| ahmetgrbzz/ | 08e10f9c0f53 | musl | 1.2.4_git20230717-r6 | 1 |
| ahmetgrbzz/ | 35c37ae2bafd | musl | 1.2.4_git20230717-r6 | 1 |
| ahmetgrbzz/ | 2e7fef69c29f | musl | 1.2.4_git20230717-r6 | 1 |
| ahmetgrbzz/ | f018bafd2b0c | musl | 1.2.4_git20230717-r6 | 1 |
| airbyte/ | 3b6985a0ce75 | musl | 1.2.5-r12 | 1 |