CVE-2026-40228

Low

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.3; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,552; of 17,828 indexed, latest versions
Container images: 2,551; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,552 of 17,828 indexed charts deploy, on 2,551 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+115 more	no fix listed	2,551

OSV records: DEBIAN-CVE-2026-40228 UBUNTU-CVE-2026-40228

Charts affected

2,552 by stars

Chart

Latest

Affected images

Radar Score

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	systemd@255.4-1ubuntu8.4	no fix listed
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	systemd@255.4-1ubuntu8.4	no fix listed
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	systemd@255.4-1ubuntu8.4	no fix listed

Open the chart page →

13,222

ferriskeyferriskey

0.8.0

1 of 3 See more

ferriskey ferriskey 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

2,205

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	systemd@237-3ubuntu10.29	no fix listed

Open the chart page →

77,529

rss-bridgegabe565

0.5.2

1 of 1 See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/rss-bridge/rss-bridge :latest	606896116558	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

2,220

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	systemd@245.4-4ubuntu3.15	no fix listed

Open the chart page →

17,632

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	systemd@237-3ubuntu10.47	no fix listed

Open the chart page →

23,096

games-on-whalesgeek-cookbook

1.8.2

3 of 7 See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	systemd@245.4-4ubuntu3.11	no fix listed
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	systemd@245.4-4ubuntu3.11	no fix listed
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	systemd@245.4-4ubuntu3.11	no fix listed

Open the chart page →

109,149

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	systemd@245.4-4ubuntu3.17	no fix listed

Open the chart page →

84,448

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	systemd@237-3ubuntu10.47	no fix listed

Open the chart page →

11,769

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	systemd@245.4-4ubuntu3.6	no fix listed

Open the chart page →

14,062

omada-controllergeek-cookbook

4.4.2

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	systemd@237-3ubuntu10.57	no fix listed

Open the chart page →

11,662

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	systemd@249.11-0ubuntu3.4	no fix listed

Open the chart page →

5,223

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	systemd@237-3ubuntu10.47	no fix listed

Open the chart page →

8,095

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	systemd@245.4-4ubuntu3.15	no fix listed

Open the chart page →

11,832

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	systemd@245.4-4ubuntu3.6	no fix listed

Open the chart page →

10,345

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	systemd@249.11-0ubuntu3.4	no fix listed

Open the chart page →

13,378

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	systemd@245.4-4ubuntu3.5	no fix listed

Open the chart page →

15,958

tdarrgeek-cookbook

4.6.2

2 of 2 See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr :2.00.18	1256348872ce	systemd@245.4-4ubuntu3.16	no fix listed
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	systemd@245.4-4ubuntu3.3	no fix listed

Open the chart page →

101,443

valheimgeek-cookbook

4.4.2

1 of 1 See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/lloesche/valheim-server :latest	c885aa902faf	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

2,667

wireguardgeek-cookbook

1.4.2

1 of 1 See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	systemd@245.4-4ubuntu3.6	no fix listed

Open the chart page →

7,735

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.8	512bb8a21483	systemd@245.4-4ubuntu3.23	no fix listed
library/postgres :15.3	8775adb39f0d	systemd@252.12-1~deb12u1	no fix listed

Open the chart page →

14,665

ghostfolioghostfolio

0.5.4

1 of 3 See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghostfolio/ghostfolio :3.7.0	e3c6ab53e49b	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

3,168

leantimegissilabs

1.3.0

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.21	8a16204dc96c	systemd@245.4-4ubuntu3.24	no fix listed

Open the chart page →

6,516

openbaogitlab

0.18.1

1 of 1 See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.5.5-gitlab2	5b7636dfba3f	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

1,823

meta-monitoringgrafana

1.3.0

1 of 2 See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.4.3	06bdcbb51fc2	systemd@255.4-1ubuntu8.4	no fix listed

Open the chart page →

3,627

greenkubegreenkube

0.3.0

1 of 3 See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
greenkube/greenkube :0.3.0	0c01932282a4	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

1,526

ghostgroundhog2k

0.212.13

1 of 1 See more

ghost groundhog2k 0.212.13

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/ghost :6.64.0	a31d03f1f629	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

2,010

IMgrycap

1.8.0

1 of 3 See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ghcr.io/grycap/im :latest	06a16d4f279f	systemd@255.4-1ubuntu8.10	no fix listed

Open the chart page →

4,260

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	systemd@252.30-1~deb12u2	no fix listed

Open the chart page →

10,089

haproxy-redis-sentinelhaproxy-redis-sentinel

0.1.3

2 of 2 See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/haproxy :3.1-bookworm	49a0a0d6f0b8	systemd@252.38-1~deb12u1	no fix listed
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	systemd@252.36-1~deb12u1	no fix listed

Open the chart page →

4,365

harp-proxyharp

0.8.1

1 of 1 See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
makersquad/harp-proxy :0.8.1	a40dd258c527	systemd@252.36-1~deb12u1	no fix listed

Open the chart page →

6,569

hawkhawk

1.1.5

2 of 4 See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/postgres :16.1	09f23e02d766	systemd@252.19-1~deb12u1	no fix listed
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	systemd@249.11-0ubuntu3.12	no fix listed

Open the chart page →

13,784

clickstackhdx-oss-v2

1.1.1

1 of 5 See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/mongo :5.0.32-focal	3b6c281e1c08	systemd@245.4-4ubuntu3.24	no fix listed

Open the chart page →

4,794

hello-helmhellok8s

0.1.0

1 of 2 See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

1,762

guacamolehelmforge

1.5.2

3 of 5 See more

guacamole helmforge 1.5.2

3 of the 5 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.6.0	f344085e618b	systemd@255.4-1ubuntu8.6	no fix listed
library/postgres :18.6-trixie	86c951e05bf5	systemd@257.13-1~deb13u1	no fix listed
library/postgres :17.5-bookworm	fbcea1bd13b6	systemd@252.38-1~deb12u1	no fix listed

Open the chart page →

8,672

mariadbhelmforge

2.1.1

1 of 1 See more

mariadb helmforge 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.3	805c8e104bd5	systemd@255.4-1ubuntu8.17	no fix listed

Open the chart page →

1,674

matomohelmforge

2.3.0

1 of 3 See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/matomo :5.13.0-apache	8e6bdd396496	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

2,826

uptime-kumahelmforge

1.5.13

1 of 1 See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

30,720

valkeyhelmforge

2.0.4

1 of 1 See more

valkey helmforge 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.2	c123e3715db6	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

858

vaultwardenhelmforge

1.14.1

1 of 1 See more

vaultwarden helmforge 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.37.3	1587c45feaa4	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

1,526

mywebapphelm-nginx

0.1.0

1 of 1 See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	systemd@257.13-1~deb13u1	no fix listed

Open the chart page →

1,589

helmuphelmup

0.1.0

3 of 3 See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
sirrend/helmup-engine :0.1.13	699e79e3d4e2	systemd@252.26-1~deb12u2	no fix listed
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	systemd@252.26-1~deb12u2	no fix listed
sirrend/helmup-notifications-service :0.1.3	997866417011	systemd@252.26-1~deb12u2	no fix listed

Open the chart page →

16,732

hivemq-platform-operatorhivemq

0.2.26

1 of 1 See more

hivemq-platform-operator hivemq 0.2.26

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
hivemq/hivemq-platform-operator :2.2.2	a919f990141b	systemd@259.5-0ubuntu3	no fix listed

Open the chart page →

992

hivemq-swarmhivemq

0.2.70

1 of 1 See more

hivemq-swarm hivemq 0.2.70

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
hivemq/hivemq-swarm :4.54.0	f9746d5d70fa	systemd@255.4-1ubuntu8.16	no fix listed

Open the chart page →

1,450

hiverhiver

0.1.45

10 of 10 See more

hiver hiver 0.1.45

10 of the 10 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
hiversh/antigravity :0.1.45-microvm	0e36d98402bc	systemd@252.39-1~deb12u2	no fix listed
hiversh/browser :0.1.45-microvm	b5048c6342ce	systemd@252.39-1~deb12u2	no fix listed
hiversh/claude :0.1.45-microvm	2fbf9f264498	systemd@252.39-1~deb12u2	no fix listed
hiversh/codex :0.1.45-microvm	4f43130f51e5	systemd@252.39-1~deb12u2	no fix listed
hiversh/controller :0.1.45	b0b85f8942c7	systemd@252.39-1~deb12u2	no fix listed
hiversh/copilot :0.1.45-microvm	50c07b84f298	systemd@252.39-1~deb12u2	no fix listed
hiversh/gateway :0.1.45	839226cc6e41	systemd@249.11-0ubuntu3.17	no fix listed
hiversh/node :0.1.45-alpine-microvm	836a37641941	systemd@252.39-1~deb12u2	no fix listed
hiversh/openclaw :0.1.45-microvm	958b7ebb4eb4	systemd@252.39-1~deb12u2	no fix listed
hiversh/python :0.1.45-3.13-alpine-microvm	63a5ae179a9f	systemd@252.39-1~deb12u2	no fix listed

Open the chart page →

22,177

holoinsightholoinsight

0.2.5

2 of 6 See more

holoinsight holoinsight 0.2.5

2 of the 6 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
ceresdb/ceresdb-server :v1.0.0	53b2d0dbba1f	systemd@245.4-4ubuntu3.19	no fix listed
library/elasticsearch :7.16.1	8d5fd89230d7	systemd@245.4-4ubuntu3.13	no fix listed