StackRadar

CVE-2026-40335

Medium

Advisory

Published 18 Apr 2026In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
5.2
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
libgphoto2deb2.5.9-3, 2.5.25-0ubuntu0.1, 2.5.27-1build2, 2.5.30-1+3 more2.5.27-1ubuntu0.1, 2.5.31-2.1ubuntu1.1, 2.5.33-1ubuntu1.110
OSV records
DEBIAN-CVE-2026-40335UBUNTU-CVE-2026-40335
Also known as
USN-8586-1

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libgphoto2@2.5.31-4build1
no fix listed

Open the chart page →

11,103
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libgphoto2@2.5.9-3
no fix listed

Open the chart page →

77,758
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libgphoto2@2.5.31-2.1build2
2.5.31-2.1ubuntu1.1

Open the chart page →

16,954
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libgphoto2@2.5.25-0ubuntu0.1
no fix listed

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libgphoto2@2.5.30-1
no fix listed

Open the chart page →

13,241
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libgphoto2@2.5.27-1build2
2.5.27-1ubuntu0.1

Open the chart page →

19,503
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
libgphoto2@2.5.9-3
no fix listed

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libgphoto2@2.5.9-3
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libgphoto2@2.5.9-3
no fix listed

Open the chart page →

29,124
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
libgphoto2@2.5.30-1
no fix listed

Open the chart page →

7,685
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
libgphoto2@2.5.27-1build2
2.5.27-1ubuntu0.1

Open the chart page →

7,295
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-40335.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libgphoto2@2.5.33-1ubuntu1
2.5.33-1ubuntu1.1

Open the chart page →

10,348

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libgphoto2@2.5.9-3
no fix listed
3
anujdatar/cups:25.07.01685df04a643b
libgphoto2@2.5.30-1
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libgphoto2@2.5.25-0ubuntu0.1
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
libgphoto2@2.5.27-1build2
2.5.27-1ubuntu0.1
1
photoprism/photoprism:260601650c6ad5a651
libgphoto2@2.5.33-1ubuntu1
2.5.33-1ubuntu1.1
1
photoprism/photoprism:251130db16ee6b1ba3
libgphoto2@2.5.31-4build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
libgphoto2@2.5.31-2.1build2
2.5.31-2.1ubuntu1.1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libgphoto2@2.5.30-1
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libgphoto2@2.5.9-3
no fix listed
1
trueosiris/vrising:latest9356f98ad561
libgphoto2@2.5.27-1build2
2.5.27-1ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.