CVE-2026-40355

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 47th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 914; of 17,787 indexed, latest versions
Container images: 970; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 914 of 17,787 indexed charts deploy, on 970 images.

Affected package	Affected versions	Fixed in	Images
krb5deb	1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more	1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more	970

OSV records: DEBIAN-CVE-2026-40355 UBUNTU-CVE-2026-40355 ECHO-3921-9f59-f2e1
Also known as: USN-8585-1

Charts affected

914 by stars

Chart

Latest

Affected images

Radar Score

welcome-elos-webappwelcome-elos-webapp

2.0.0

1 of 1 See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
pococze/python-hello-elos :2.0.0	7a1aab425e51	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5

Open the chart page →

2,538

giteawenerme

12.7.0

2 of 4 See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	krb5@1.20.1-2+deb12u3	1.20.1-2+deb12u5
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	krb5@1.20.1-2+deb12u3	1.20.1-2+deb12u5

Open the chart page →

8,842

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5

Open the chart page →

8,824

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.8
openebs/node-disk-operator :2.1.0	6afe2123c457	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.8

Open the chart page →

10,568

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8

Open the chart page →

9,296

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7

Open the chart page →

2,229

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	krb5@1.20.1-2+deb12u4	1.20.1-2+deb12u5

Open the chart page →

7,643

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5

Open the chart page →

5,548

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	krb5@1.20.1-2+deb12u4	1.20.1-2+deb12u5

Open the chart page →

2,383

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7

Open the chart page →

4,032

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8

Open the chart page →

14,172

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5

Open the chart page →

7,685

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
hamzaarshad10/querypodpy :1.7	154f38e8668e	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
murtazashah46/helmfile :latest	4d11726cf803	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	krb5@1.20.1-6ubuntu2	1.20.1-6ubuntu2.7

Open the chart page →

2,136

Container images carrying it

970 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jenkins/jenkins :2.541.3-jdk21	c4098086090c	krb5@1.21.3-5	1.21.3-5+deb13u1	2
kurento/kurento-media-server :latest	03c0d34d0828	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
library/cassandra :4.1.3	7cbcec0086ac	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8	2
library/elasticsearch :8.19.12	89729a95066a	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	2
library/influxdb :2.7	b8d940ca9376	krb5@1.20.1-2+deb12u4	1.20.1-2+deb12u5	2
library/mariadb :10.8.3	0abf60f81588	krb5@1.19.2-2	1.19.2-2ubuntu0.8	2
library/mariadb :10.10	334b315c10e5	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	2
library/mariadb :11.3.2	e101f9db3191	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8	2
library/mongo :8.0.20	098862b1339f	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	2
library/nginx :latest	6e23479198b9	krb5@1.21.3-5	1.21.3-5+deb13u1	2
library/nginx :1.27.0	98f8ec75657d	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
library/nginx :1.29.4	9dd288848f44	krb5@1.21.3-5	1.21.3-5+deb13u1	2
library/phpmyadmin :5.2.1	6e75aa8f767c	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
library/postgres :16.1	09f23e02d766	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
library/postgres :18.1	1090bc3a8ccf	krb5@1.21.3-5	1.21.3-5+deb13u1	2
library/postgres :16.2	4aea012537ed	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
library/postgres :18.0	6f3e42ad37de	krb5@1.21.3-5	1.21.3-5+deb13u1	2
library/postgres :16.4	e62fbf9d3e2b	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
library/python :3.7	eedf63967cdb	krb5@1.20.1-2	1.20.1-2+deb12u5	2
library/rabbitmq :3.12.1-management	f020c06da226	krb5@1.19.2-2ubuntu0.2	1.19.2-2ubuntu0.8	2
library/redis :7.2.3	a7cee7c8178f	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	krb5@1.21.3-5	1.21.3-5+deb13u1	2
locustio/locust :2.32.2	a0d4b88e42c1	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	krb5@1.20.1-2+deb12u4	1.20.1-2+deb12u5	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
obolnetwork/charon :v1.10.0	278c7e2897b6	krb5@1.21.3-5	1.21.3-5+deb13u1	2
opea/embedding-tei :1.0	5c9639de61c1	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opea/reranking-tei :1.0	e48613afb191	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opea/retriever-redis :1.0	eb746b263705	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5	2
opendatacube/ows :latest	668cbb41473c	krb5@1.20.1-6ubuntu2.2	1.20.1-6ubuntu2.7	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.8	2
openebs/node-disk-operator :2.1.0	6afe2123c457	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.8	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	krb5@1.19.2-2	1.19.2-2ubuntu0.8	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
quickwit/quickwit :v0.8.2	363ff56ce456	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5	2
rajnandan1/kener :3.2.19	30407afca731	krb5@1.20.1-2+deb12u3	1.20.1-2+deb12u5	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.8	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8	2
sigp/lighthouse :v8.1.3	44aa773dcf27	krb5@1.19.2-2ubuntu0.7	1.19.2-2ubuntu0.8	2