StackRadar

CVE-2026-40355

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
913
of 17,790 indexed, latest versions
Container images
969
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 913 of 17,790 indexed charts deploy, on 969 images.

Affected packageAffected versionsFixed inImages
krb5deb1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more969
OSV records
DEBIAN-CVE-2026-40355UBUNTU-CVE-2026-40355ECHO-3921-9f59-f2e1
Also known as
USN-8585-1

Charts affected

913 by stars
ChartLatestAffected imagesRadar Score
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

8,874
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

9,183
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
openebs/node-disk-operator:2.1.06afe2123c457
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8

Open the chart page →

10,587
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

9,320
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,235
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,664
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,559
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

2,496
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

4,063
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

14,173
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

7,697
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
hamzaarshad10/querypodpy:1.7154f38e8668e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
murtazashah46/helmfile:latest4d11726cf803
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7

Open the chart page →

2,142

Container images carrying it

969 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:2.2.1-slim059b49d64739
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
louislam/uptime-kuma:2.0.24c364ef96aad
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
luligu/matterbridge:3.0.28f97884bebc2
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
makersquad/harp-proxy:0.8.1a40dd258c527
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
martinhelmich/typo3:12.4c83a4f3fd7ae
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
matterlabs/external-node:v24.0.06cbfea4c694a
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
mawad98/backstage-pyactions:demo99422c56a274
krb5@1.21.3-5
1.21.3-5+deb13u1
1
mbround18/valheim:3.1.070bd4da591cd
krb5@1.19.2-2ubuntu0.5
1.19.2-2ubuntu0.8
1
mediagis/nominatim:5.3.27923a8e67197
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
mediagis/nominatim:4.2d0eae7b51374
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
merlos/zookeeper:3.9.3a38fc7e09ed7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
middlewareeng/middleware:0.3.1747d880812f1
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
mindsdb/mindsdb:latest163011c09299
krb5@1.21.3-5
1.21.3-5+deb13u1
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
mlikiowa/napcat-docker:latest1336a777f9a4
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
moreillon/api-proxy:latestd7d4a5463525
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
moreillon/camera-viewer:lateste418cc694bd5
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
moreillon/food-manager:lateste8fd856e593d
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
moreillon/group-manager:latest3caa8f710ee0
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
moreillon/group-manager-front:latest5f0a38498271
krb5@1.21.3-5
1.21.3-5+deb13u1
1
moreillon/user-manager-front:v5.1.06597e6b98d21
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
muhammedgamal/fp23:latest74b4cd69b6fa
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
murtazashah46/helmfile:latest4d11726cf803
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
netboxcommunity/netbox:v3.2.83d652dca5351
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
nethermind/nethermind:1.14.615517708c3b6
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
networkboot/dhcpd:lateste99bbfbd6fb2
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
krb5@1.21.3-5
1.21.3-5+deb13u1
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
krb5@1.21.3-5
1.21.3-5+deb13u1
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
krb5@1.21.3-5
1.21.3-5+deb13u1
1
nirmalnaveen/supermario:latest8541a39162f3
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
obolnetwork/helios:e10e753cb7e97d39d46
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
oled01/automx2:2025.1.105d3e398e675
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
oled01/db-backup:0.1.06302fd2b5333
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
olvid/bot-daemon:2.0.1e0e6b165d879
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
opea/asr:1.025dd26d9cd09
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/chatqna:1.038c51b791efa
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/codegen:1.058f91683892d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/codegen-ui:1.02bee4eb66f3e
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
opea/codetrans:1.0e2436483b73d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.