StackRadar

CVE-2026-40355

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
913
of 17,790 indexed, latest versions
Container images
969
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 913 of 17,790 indexed charts deploy, on 969 images.

Affected packageAffected versionsFixed inImages
krb5deb1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more969
OSV records
DEBIAN-CVE-2026-40355UBUNTU-CVE-2026-40355ECHO-3921-9f59-f2e1
Also known as
USN-8585-1

Charts affected

913 by stars
ChartLatestAffected imagesRadar Score
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

8,874
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

9,183
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
openebs/node-disk-operator:2.1.06afe2123c457
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8

Open the chart page →

10,587
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

9,320
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,235
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,664
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,559
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

2,496
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

4,063
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

14,173
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

7,697
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
hamzaarshad10/querypodpy:1.7154f38e8668e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
murtazashah46/helmfile:latest4d11726cf803
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7

Open the chart page →

2,142

Container images carrying it

969 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
twentycrm/twenty-postgres-spilo:latest2f78405a78be
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
typesense/typesense:0.25.1035ccfbc3fd8
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.8
1
typesense/typesense:30.191604dc128e2
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
typesense/typesense:28.0.rc35dea1b62b7b6e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
valkey/valkey:8.0.1c5d4f082b76d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
vaultwarden/server:1.35.443498a94b22f
krb5@1.21.3-5
1.21.3-5+deb13u1
1
vaultwarden/server:1.34.384fd8a47f58d
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
vaultwarden/server:1.35.79a8eec71f4a5
krb5@1.21.3-5
1.21.3-5+deb13u1
1
vcnngr/telegram-login:latest1a849a997b6d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
vcnngr/telegram-rebot:latest30f1f05e57a6
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
vlebediantsev/notes-admin-front:latest007c6670ff48
krb5@1.20.1-2
1.20.1-2+deb12u5
1
vlebediantsev/notes-project-front:latest945675fd2636
krb5@1.20.1-2
1.20.1-2+deb12u5
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
krb5@1.20.1-2
1.20.1-2+deb12u5
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
wateim/lighthouse-launch:latest2520149ee574
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
wger/server:2.6997ead43aabd
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
wistefan/mvf:lateste0887302b2d8
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
wolveix/satisfactory-server:v1.9.1199be1064b18
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
xeladock/mysql_dns:latest4baf531453f1
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
xeladock/nginx2:latestc259a67b1dff
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
xeotek/kadeck:6.3.439a3b37a17c5
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
ghcr.io/aklivity/zilla:2.4.289c4a2e74863
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
krb5@1.21.3-5
1.21.3-5+deb13u1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.