StackRadar

CVE-2026-40228

Low

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,492
of 17,828 indexed, latest versions
Container images
2,481
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,492 of 17,828 indexed charts deploy, on 2,481 images.

Affected packageAffected versionsFixed inImages
systemddeb204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+115 moreno fix listed2,481
OSV records
DEBIAN-CVE-2026-40228UBUNTU-CVE-2026-40228

Charts affected

2,492 by stars
ChartLatestAffected imagesRadar Score
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
systemd@249.11-0ubuntu3.12
no fix listed

Open the chart page →

13,153
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
systemd@245.4-4ubuntu3.17
no fix listed

Open the chart page →

101,953
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,887
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
systemd@252.30-1~deb12u2
no fix listed

Open the chart page →

12,133
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
systemd@255.4-1ubuntu8.4
no fix listed

Open the chart page →

3,313
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
systemd@252.36-1~deb12u1
no fix listed

Open the chart page →

6,039
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
systemd@252.22-1~deb12u1
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

16,636
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
systemd@252.26-1~deb12u2
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

16,669
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
systemd@252.19-1~deb12u1
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
systemd@252.19-1~deb12u1
no fix listed

Open the chart page →

14,885
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
systemd@252.26-1~deb12u2
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

16,669
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
systemd@252.22-1~deb12u1
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

14,429
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
systemd@252.22-1~deb12u1
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

14,429
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
systemd@252.26-1~deb12u2
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

16,287
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
systemd@252.30-1~deb12u2
no fix listed

Open the chart page →

15,882
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
systemd@252.38-1~deb12u1
no fix listed

Open the chart page →

11,312
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,772
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
systemd@255.4-1ubuntu8.12
no fix listed

Open the chart page →

51,225
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
systemd@237-3ubuntu10.53
no fix listed

Open the chart page →

66,245
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm0637954999d0
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,833
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
systemd@249.11-0ubuntu3.12
no fix listed

Open the chart page →

2,333
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

2,455
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,621
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
systemd@245.4-4ubuntu3.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
systemd@237-3ubuntu10.39
no fix listed

Open the chart page →

20,287
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
systemd@257.13-1~deb13u1
no fix listed
ncsa/checks:main0b738bbc8d70
systemd@257.7-1
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
systemd@257.13-1~deb13u1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

70,106
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,451
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
systemd@252.12-1~deb12u1
no fix listed

Open the chart page →

20,487
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
systemd@252.31-1~deb12u1
no fix listed

Open the chart page →

3,003
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
systemd@249.11-0ubuntu3.15
no fix listed

Open the chart page →

2,043
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
systemd@252.33-1~deb12u1
no fix listed

Open the chart page →

4,124
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
systemd@255.4-1ubuntu8.6
no fix listed

Open the chart page →

2,100
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
systemd@245.4-4ubuntu3.15
no fix listed

Open the chart page →

6,609
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
systemd@249.11-0ubuntu3.15
no fix listed

Open the chart page →

2,039
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
systemd@252.33-1~deb12u1
no fix listed

Open the chart page →

7,067
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
systemd@255.4-1ubuntu8.6
no fix listed

Open the chart page →

3,249
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
systemd@252.26-1~deb12u2
no fix listed

Open the chart page →

3,525
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,451
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickbc058c992eec
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,062
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
systemd@257.8-1~deb13u2
no fix listed

Open the chart page →

4,363
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
systemd@237-3ubuntu10.53
no fix listed

Open the chart page →

14,629
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
systemd@249.11-0ubuntu3.6
no fix listed

Open the chart page →

13,950
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
systemd@245.4-4ubuntu3.19
no fix listed

Open the chart page →

13,673
steadybit-agentsteadybit3.1.1693 of 6See more

steadybit-agent steadybit 3.1.169

3 of the 6 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
systemd@257.13-1~deb13u1
no fix listed
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
systemd@257.13-1~deb13u1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

3,875
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
systemd@245.4-4ubuntu3.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
systemd@237-3ubuntu10.39
no fix listed

Open the chart page →

20,287
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,533
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,887
sn-platform-slimstreamnative1.11.451See more

sn-platform-slim streamnative 1.11.45

1 container image this version deploys carries CVE-2026-40228.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
systemd@245.4-4ubuntu3.23
no fix listed

Open the chart page →

—
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

5,202
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
systemd@255.4-1ubuntu8.11
no fix listed

Open the chart page →

12,815
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
systemd@255.4-1ubuntu8.11
no fix listed

Open the chart page →

12,815
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
systemd@252.36-1~deb12u1
no fix listed

Open the chart page →

2,505

Container images carrying it

2,481 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

No deployed image carries CVE-2026-40228.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.