StackRadar

CVE-2026-40355

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
913
of 17,790 indexed, latest versions
Container images
969
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 913 of 17,790 indexed charts deploy, on 969 images.

Affected packageAffected versionsFixed inImages
krb5deb1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more969
OSV records
DEBIAN-CVE-2026-40355UBUNTU-CVE-2026-40355ECHO-3921-9f59-f2e1
Also known as
USN-8585-1

Charts affected

913 by stars
ChartLatestAffected imagesRadar Score
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

8,874
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

9,183
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
openebs/node-disk-operator:2.1.06afe2123c457
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8

Open the chart page →

10,587
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

9,320
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,235
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,664
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,559
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

2,496
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

4,063
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

14,173
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

7,697
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
hamzaarshad10/querypodpy:1.7154f38e8668e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
murtazashah46/helmfile:latest4d11726cf803
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7

Open the chart page →

2,142

Container images carrying it

969 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
somnathmore/custom-nginx:v2bdfc06cad4ec
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
krb5@1.21.3-5
1.21.3-5+deb13u1
1
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.26.3092384dba45d
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
stashapp/stash-box:latesta534c8afdf39
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
structurizr/onpremises:2025.11.094b5ffb5119c8
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
substratusai/verba:v0.4.0-baseURL261695be635eb
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
supabase/realtime:v2.102.3aa1c92c0cf32
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
supabase/realtime:v2.33.8d207e6e23ad3
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
supabase/studio:20241021-9f9b08326d8070c55e9
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
sysnet4admin/colosseum-agg:logbc25b152d88e
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
sysnet4admin/colosseum-cms:loge74b43c7f492
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
teknas09/bird-pod:latest12a1fa85c4aa
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
tensorflow/serving:latest8a208c232297
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
theradius/loggia:0.463ba348546ec
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
thesisrobot/bitcoind:v23.016b368e4d52c
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
krb5@1.21.3-5
1.21.3-5+deb13u1
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
krb5@1.21.3-5
1.21.3-5+deb13u1
1
thingsboard/tb-postgres:latest2d17e4e36edc
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
thmmniii/fbs-core:v1.27.15438517d9fc2
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
thongngo3301/stakefish:latesta341af5976e3
krb5@1.20.1-2
1.20.1-2+deb12u5
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
krb5@1.19.2-2ubuntu0.5
1.19.2-2ubuntu0.8
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
krb5@1.21.3-5
1.21.3-5+deb13u1
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
krb5@1.21.3-5
1.21.3-5+deb13u1
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
krb5@1.21.3-5
1.21.3-5+deb13u1
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
trinodb/trino:405ee80ab5eeab2
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
trueosiris/vrising:latest9356f98ad561
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.