StackRadar

CVE-2026-40228

Low

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,552
of 17,828 indexed, latest versions
Container images
2,551
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,552 of 17,828 indexed charts deploy, on 2,551 images.

Affected packageAffected versionsFixed inImages
systemddeb204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+115 moreno fix listed2,551
OSV records
DEBIAN-CVE-2026-40228UBUNTU-CVE-2026-40228

Charts affected

2,552 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
systemd@237-3ubuntu10.53
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
systemd@245.4-4ubuntu3.15
no fix listed

Open the chart page →

9,340
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
systemd@249.11-0ubuntu3.21
no fix listed

Open the chart page →

8,105

Container images carrying it

2,551 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sondresjo/garge-operator:v1.9.5c17f4ecd1adf
systemd@255.4-1ubuntu8.17
no fix listed
1
sondresjo/nstuning-api:v1.6.12ca4e311d2712
systemd@255.4-1ubuntu8.17
no fix listed
1
sondresjo/nstuning-app:v1.6.1249cb4535a2fd
systemd@257.13-1~deb13u1
no fix listed
1
sondresjo/pyttogpanne-api:v1.0.18248b508de68
systemd@255.4-1ubuntu8.17
no fix listed
1
sondresjo/pyttogpanne-app:v1.0.0ef6ee3d8912c
systemd@257.13-1~deb13u1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
systemd@257.9-1~deb13u1
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
systemd@252.39-1~deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
systemd@252.26-1~deb12u2
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
systemd@252.30-1~deb12u2
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
systemd@252.36-1~deb12u1
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
systemd@252.38-1~deb12u1
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
systemd@252.19-1~deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
systemd@252.26-1~deb12u2
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
systemd@252.26-1~deb12u2
no fix listed
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
systemd@252.19-1~deb12u1
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
systemd@252.22-1~deb12u1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
systemd@252.22-1~deb12u1
no fix listed
1
spy86/rabbitmq-stomp:latestea649101b9fb
systemd@245.4-4ubuntu3.20
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
systemd@257.13-1~deb13u1
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
systemd@257.13-1~deb13u1
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2api:3.86f56d239d280
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
systemd@245.4-4ubuntu3.22
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
systemd@245.4-4ubuntu3.22
no fix listed
1
stalwartlabs/stalwart:v0.16.1425001929f36a
systemd@257.13-1~deb13u1
no fix listed
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
systemd@257.13-1~deb13u1
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
systemd@257.13-1~deb13u1
no fix listed
1
stalwartlabs/stalwart:v0.15.5dcf575db2d53
systemd@257.9-1~deb13u1
no fix listed
1
stashapp/stash:latest24dbd7607174
systemd@245.4-4ubuntu3.5
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
systemd@255.4-1ubuntu8.6
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.