StackRadar

CVE-2026-40225

Medium

Advisory

Published 23 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,415
of 17,790 indexed, latest versions
Container images
1,487
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,415 of 17,790 indexed charts deploy, on 1,487 images.

Affected packageAffected versionsFixed inImages
systemddeb245.4-4ubuntu3.1, 245.4-4ubuntu3.2, 245.4-4ubuntu3.3, 245.4-4ubuntu3.4+56 more245.4-4ubuntu3.24+esm3, 249.11-0ubuntu3.19, 252.39-1~deb12u2, 255.4-1ubuntu8.14+3 more1,487
OSV records
DEBIAN-CVE-2026-40225UBUNTU-CVE-2026-40225ECHO-5372-36f1-2a63
Also known as
USN-8119-2

Charts affected

1,415 by stars
ChartLatestAffected imagesRadar Score
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
systemd@252.19-1~deb12u1
252.39-1~deb12u2

Open the chart page →

15,044
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
systemd@249.11-0ubuntu3.11
249.11-0ubuntu3.19

Open the chart page →

9,320
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
systemd@255.4-1ubuntu8.12
255.4-1ubuntu8.14

Open the chart page →

2,235
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
systemd@252.38-1~deb12u1
252.39-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
systemd@252.39-1~deb12u1
252.39-1~deb12u2

Open the chart page →

7,664
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
systemd@245.4-4ubuntu3.24
245.4-4ubuntu3.24+esm3

Open the chart page →

6,326
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
systemd@252.19-1~deb12u1
252.39-1~deb12u2

Open the chart page →

5,559
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
systemd@252.39-1~deb12u1
252.39-1~deb12u2

Open the chart page →

2,496
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
systemd@252.39-1~deb12u1
252.39-1~deb12u2

Open the chart page →

2,136
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.19

Open the chart page →

14,173
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
systemd@252.31-1~deb12u1
252.39-1~deb12u2

Open the chart page →

11,603
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
systemd@252.22-1~deb12u1
252.39-1~deb12u2

Open the chart page →

7,697
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
systemd@252.30-1~deb12u2
252.39-1~deb12u2
hamzaarshad10/querypodpy:1.7154f38e8668e
systemd@252.30-1~deb12u2
252.39-1~deb12u2
murtazashah46/helmfile:latest4d11726cf803
systemd@252.30-1~deb12u2
252.39-1~deb12u2

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
systemd@255.4-1ubuntu8
255.4-1ubuntu8.14

Open the chart page →

2,142
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
systemd@252.22-1~deb12u1
252.39-1~deb12u2

Open the chart page →

2,684
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-40225.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
systemd@245.4-4ubuntu3.15
245.4-4ubuntu3.24+esm3

Open the chart page →

9,256

Container images carrying it

1,487 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
systemd@249.11-0ubuntu3.6
249.11-0ubuntu3.19
2
openebs/node-disk-operator:2.1.06afe2123c457
systemd@249.11-0ubuntu3.6
249.11-0ubuntu3.19
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
systemd@249.11-0ubuntu3.6
249.11-0ubuntu3.19
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
systemd@252.22-1~deb12u1
252.39-1~deb12u2
2
quickwit/quickwit:v0.8.2363ff56ce456
systemd@252.22-1~deb12u1
252.39-1~deb12u2
2
rajnandan1/kener:3.2.1930407afca731
systemd@252.33-1~deb12u1
252.39-1~deb12u2
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.19
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.19
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.19
2
sigp/lighthouse:v8.1.344aa773dcf27
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.19
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
systemd@245.4-4ubuntu3.18
245.4-4ubuntu3.24+esm3
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
systemd@252.22-1~deb12u1
252.39-1~deb12u2
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
systemd@245.4-4ubuntu3.23
245.4-4ubuntu3.24+esm3
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
systemd@249.11-0ubuntu3
249.11-0ubuntu3.19
2
taigaio/taiga-protected:latestfd4568a97a59
systemd@257.9-1~deb13u1
257.13-1~deb13u1
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
systemd@249.11-0ubuntu3.9
249.11-0ubuntu3.19
2
uffizzi/controller:latest0344805f267b
systemd@252.19-1~deb12u1
252.39-1~deb12u2
2
valkey/valkey:9.0.1546304417fea
systemd@257.9-1~deb13u1
257.13-1~deb13u1
2
valkey/valkey:8.1.481db6d39e1bb
systemd@257.8-1~deb13u2
257.13-1~deb13u1
2
vdiogov/glpi-conteiner:latest6945f84f0058
systemd@252.26-1~deb12u2
252.39-1~deb12u2
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
systemd@249.11-0ubuntu3.16
249.11-0ubuntu3.19
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
systemd@255.4-1ubuntu8.4
255.4-1ubuntu8.14
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.19
2
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
systemd@252.39-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
systemd@255.4-1ubuntu8.6
255.4-1ubuntu8.14
2
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
systemd@257.9-1~deb13u1
257.13-1~deb13u1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
systemd@249.11-0ubuntu3.6
249.11-0ubuntu3.19
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
systemd@249.11-0ubuntu3.4
249.11-0ubuntu3.19
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
systemd@252.39-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
systemd@245.4-4ubuntu3.11
245.4-4ubuntu3.24+esm3
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
systemd@245.4-4ubuntu3.11
245.4-4ubuntu3.24+esm3
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
systemd@245.4-4ubuntu3.11
245.4-4ubuntu3.24+esm3
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
systemd@252.26-1~deb12u2
252.39-1~deb12u2
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
systemd@252.38-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
systemd@252.30-1~deb12u2
252.39-1~deb12u2
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
systemd@252.38-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
systemd@252.38-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
systemd@252.19-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
systemd@252.33-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
systemd@249.11-0ubuntu3.1
249.11-0ubuntu3.19
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
systemd@252.36-1~deb12u1
252.39-1~deb12u2
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
systemd@252.39-1~deb12u1
252.39-1~deb12u2
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
systemd@245.4-4ubuntu3.22
245.4-4ubuntu3.24+esm3
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
systemd@257.8-1~deb13u1
257.13-1~deb13u1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
systemd@255.4-1ubuntu8.6
255.4-1ubuntu8.14
2
1dev/server:11.9.0cd5b12fe5471
systemd@255.4-1ubuntu8.6
255.4-1ubuntu8.14
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
systemd@252.12-1~deb12u1
252.39-1~deb12u2
1
5200710/hadoop:3.2.3-java8092d3088a5fb
systemd@245.4-4ubuntu3.22
245.4-4ubuntu3.24+esm3
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
systemd@257.9-1~deb13u1
257.13-1~deb13u1
1
aboogie/login_test_backend:new9c41a4483ac8
systemd@252.26-1~deb12u2
252.39-1~deb12u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.