StackRadar

CVE-2026-40228

Low

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,552
of 17,828 indexed, latest versions
Container images
2,551
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,552 of 17,828 indexed charts deploy, on 2,551 images.

Affected packageAffected versionsFixed inImages
systemddeb204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+115 moreno fix listed2,551
OSV records
DEBIAN-CVE-2026-40228UBUNTU-CVE-2026-40228

Charts affected

2,552 by stars
ChartLatestAffected imagesRadar Score
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
systemd@252.39-1~deb12u2
no fix listed
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

5,630
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
systemd@249.11-0ubuntu3.22
no fix listed

Open the chart page →

2,448
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
systemd@252.19-1~deb12u1
no fix listed

Open the chart page →

19,484
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
systemd@255.4-1ubuntu8.10
no fix listed

Open the chart page →

3,067
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
systemd@229-4ubuntu19
no fix listed

Open the chart page →

13,608
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
systemd@252.17-1~deb12u1
no fix listed

Open the chart page →

9,664
matrixzekker6Verified publisher3.31.01 of 4See more

matrix zekker6 3.31.0

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.161.06b95dd129e35
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

5,659
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,310
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
systemd@237-3ubuntu10.57
no fix listed

Open the chart page →

19,538
changedetectionalekcVerified publisher0.14.51 of 1See more

changedetection alekc 0.14.5

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

2,701
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
systemd@249.11-0ubuntu3.6
no fix listed

Open the chart page →

8,313
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,526
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.100708ba6617f33c9
systemd@259.5-0ubuntu3.4
no fix listed

Open the chart page →

956
limesurveyarea-42Verified publisher0.3.962 of 2See more

limesurvey area-42 0.3.96

2 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.2b642712ce9a6
systemd@257.13-1~deb13u1
no fix listed
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
systemd@252.38-1~deb12u1
no fix listed

Open the chart page →

4,539
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
systemd@229-4ubuntu17
no fix listed

Open the chart page →

11,064
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
systemd@245.4-4ubuntu3.22
no fix listed

Open the chart page →

66,682
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
systemd@259.5-0ubuntu3.4
no fix listed
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
systemd@259.5-0ubuntu3.4
no fix listed

Open the chart page →

11,751
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
systemd@252.39-1~deb12u1
no fix listed

Open the chart page →

5,358
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

4,224
lighthousechronicleVerified publisher0.0.81 of 1See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.1.0870934e38931
systemd@249.11-0ubuntu3.16
no fix listed

Open the chart page →

2,006
ghostcloudpirates-ghostVerified publisher0.20.253 of 3See more

ghost cloudpirates-ghost 0.20.25

3 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/ghost:6.64.0a31d03f1f629
systemd@252.39-1~deb12u2
no fix listed
library/mariadb:12.0.25b6a1eac15b8
systemd@255.4-1ubuntu8.10
no fix listed
library/mariadb:13.0.2d4fdec0510ad
systemd@259.5-0ubuntu3.4
no fix listed

Open the chart page →

7,086
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
systemd@257.8-1~deb13u2
no fix listed

Open the chart page →

5,685
convertigoconvertigoOfficialVerified publisher8.4.33 of 5See more

convertigo convertigo 8.4.3

3 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
systemd@252.31-1~deb12u1
no fix listed
library/convertigo:8.4.3faa719b117b2
systemd@255.4-1ubuntu8.17
no fix listed
library/couchdb:3.4.22817ad50b5c5
systemd@252.36-1~deb12u1
no fix listed

Open the chart page →

17,204
cosmocosmo-platformOfficialVerified publisher0.20.05 of 10See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
systemd@252.26-1~deb12u2
no fix listed
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
systemd@252.38-1~deb12u1
no fix listed
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
systemd@252.22-1~deb12u1
no fix listed
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
systemd@252.33-1~deb12u1
no fix listed
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
systemd@252.33-1~deb12u1
no fix listed

Open the chart page →

29,743
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,433
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

9,426
deepflowdeepflow6.2.2011 of 8See more

deepflow deepflow 6.2.201

1 of the 8 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
systemd@245.4-4ubuntu3.17
no fix listed

Open the chart page →

16,073
defectdojodefectdojo1.9.531 of 4See more

defectdojo defectdojo 1.9.53

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.2001cee5281e176
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,679
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
systemd@255.4-1ubuntu8.4
no fix listed

Open the chart page →

4,273
dyff-apidyff-apiVerified publisher0.57.51 of 1See more

dyff-api dyff-api 0.57.5

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,365
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
systemd@245.4-4ubuntu3.18
no fix listed

Open the chart page →

4,913
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
systemd@255.4-1ubuntu8.4
no fix listed

Open the chart page →

2,458
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
systemd@245.4-4ubuntu3.22
no fix listed

Open the chart page →

5,344
flyte-binaryflyte2.0.491 of 4See more

flyte-binary flyte 2.0.49

1 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

4,018
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,430
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
systemd@245.4-4ubuntu3.15
no fix listed

Open the chart page →

10,710
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
systemd@245.4-4ubuntu3.17
no fix listed

Open the chart page →

9,872
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
systemd@245.4-4ubuntu3.15
no fix listed

Open the chart page →

10,330
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
systemd@245.4-4ubuntu3.13
no fix listed

Open the chart page →

10,899
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
systemd@237-3ubuntu10.57
no fix listed

Open the chart page →

12,022
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
systemd@257.8-1~deb13u2
no fix listed

Open the chart page →

5,692
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
systemd@257.13-1~deb13u1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

4,290
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
systemd@259.5-0ubuntu3.4
no fix listed

Open the chart page →

1,965
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
systemd@252.39-1~deb12u1
no fix listed

Open the chart page →

4,294
netbirdhelmforgeVerified publisher1.0.102 of 4See more

netbird helmforge 1.0.10

2 of the 4 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
systemd@257.13-1~deb13u1
no fix listed
netbirdio/netbird-server:0.78.13086534361a1
systemd@255.4-1ubuntu8.17
no fix listed

Open the chart page →

3,130
redishelmforgeVerified publisher3.0.01 of 1See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,008
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,275
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
systemd@229-4ubuntu21.31
no fix listed

Open the chart page →

3,919
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.24 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

4 of the 5 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
systemd@252.31-1~deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
systemd@252.38-1~deb12u1
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
systemd@252.38-1~deb12u1
no fix listed
library/neo4j:2026.05.0-enterprise2caf944aa4a5
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

10,755
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-40228.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
systemd@257.9-1~deb13u1
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
systemd@257.9-1~deb13u1
no fix listed
instill/model-backend:611f0f2e980125e5ba5
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

31,052

Container images carrying it

2,551 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
systemd@252.36-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.