CVE-2026-40228

Low

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.3; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,552; of 17,828 indexed, latest versions
Container images: 2,551; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,552 of 17,828 indexed charts deploy, on 2,551 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+115 more	no fix listed	2,551

OSV records: DEBIAN-CVE-2026-40228 UBUNTU-CVE-2026-40228

Charts affected

2,552 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	no fix listed

Open the chart page →

9,340

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-40228.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	systemd@249.11-0ubuntu3.21	no fix listed

Open the chart page →

8,105

Container images carrying it

2,551 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/wordpress :latest	a85a30d9e752	systemd@257.13-1~deb13u1	no fix listed	2
library/wordpress :7.1.0-apache	edeeae67330a	systemd@257.13-1~deb13u1	no fix listed	2
library/zookeeper :3.9.5	7d0f24ebb67b	systemd@249.11-0ubuntu3.22	no fix listed	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	systemd@229-4ubuntu21.16	no fix listed	2
linuxserver/cloud9 :latest :version-1.29.2	45c5fe102ff3	systemd@237-3ubuntu10.53	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	systemd@252.30-1~deb12u2	no fix listed	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	systemd@245.4-4ubuntu3.13	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	systemd@252.39-1~deb12u2	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	systemd@252.39-1~deb12u1	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	systemd@252.39-1~deb12u2	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	systemd@237-3ubuntu10.57	no fix listed	2
memgraph/memgraph :3.13.1	bd3fe13228f4	systemd@255.4-1ubuntu8.17	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	systemd@245.4-4ubuntu3.2	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	systemd@252.26-1~deb12u2	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	systemd@252.17-1~deb12u1	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	systemd@252.17-1~deb12u1	no fix listed	2
nacos/nacos-server :latest	1c191c30c8cd	systemd@259.5-0ubuntu3.4	no fix listed	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	systemd@237-3ubuntu10	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	systemd@257.9-1~deb13u1	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	systemd@245.4-4ubuntu3.15	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	systemd@229-4ubuntu21.15	no fix listed	2
opea/embedding-tei :1.0	5c9639de61c1	systemd@252.30-1~deb12u2	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	systemd@252.30-1~deb12u2	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	systemd@252.30-1~deb12u2	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	systemd@252.33-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	systemd@252.33-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	systemd@252.33-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	systemd@252.33-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	systemd@252.33-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	systemd@252.33-1~deb12u1	no fix listed	2
opencsghq/label-studio :v2.5.0	47e22aa71870	systemd@257.13-1~deb13u1	no fix listed	2
opendatacube/ows :latest	668cbb41473c	systemd@255.4-1ubuntu8.4	no fix listed	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	systemd@252.38-1~deb12u1	no fix listed	2
patrikx3/p3x-redis-ui :latest	f19eb45b0694	systemd@252.39-1~deb12u2	no fix listed	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	systemd@257.13-1~deb13u1	no fix listed	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	systemd@252.39-1~deb12u2	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	systemd@249.11-0ubuntu3.6	no fix listed	2
polyaxon/polyaxon-agent :2.17.0	da877a2647fc	systemd@257.13-1~deb13u1	no fix listed	2
polyaxon/polyaxon-cli :2.17.0	297ed47ed63a	systemd@257.13-1~deb13u1	no fix listed	2
proxysql/proxysql :3.0.11	0e95d1b7cc32	systemd@257.13-1~deb13u1	no fix listed	2
qdrant/qdrant :v1.19.1	12364fe851b9	systemd@257.13-1~deb13u1	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	systemd@252.22-1~deb12u1	no fix listed	2
quickwit/quickwit :v0.8.2	363ff56ce456	systemd@252.22-1~deb12u1	no fix listed	2
rajnandan1/kener :3.2.19	30407afca731	systemd@252.33-1~deb12u1	no fix listed	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	systemd@249.11-0ubuntu3.12	no fix listed	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	systemd@249.11-0ubuntu3.12	no fix listed	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	systemd@249.11-0ubuntu3.12	no fix listed	2
rotationalio/quarterdeck :0.16.0	0e7ad3a031dc	systemd@252.39-1~deb12u2	no fix listed	2
safeglobal/safe-config-service :latest	09a5e495c219	systemd@257.13-1~deb13u1	no fix listed	2
safeglobal/safe-transaction-service :latest	80db836cc5d5	systemd@257.13-1~deb13u1	no fix listed	2