StackRadar

CVE-2026-40355

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
914
of 17,787 indexed, latest versions
Container images
970
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 914 of 17,787 indexed charts deploy, on 970 images.

Affected packageAffected versionsFixed inImages
krb5deb1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more970
OSV records
DEBIAN-CVE-2026-40355UBUNTU-CVE-2026-40355ECHO-3921-9f59-f2e1
Also known as
USN-8585-1

Charts affected

914 by stars
ChartLatestAffected imagesRadar Score
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

2,538
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

8,842
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

8,824
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
openebs/node-disk-operator:2.1.06afe2123c457
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,229
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

2,383
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

14,172
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

7,685
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
hamzaarshad10/querypodpy:1.7154f38e8668e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
murtazashah46/helmfile:latest4d11726cf803
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-40355.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7

Open the chart page →

2,136

Container images carrying it

970 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
krb5@1.19.2-2
1.19.2-2ubuntu0.8
2
technitium/dns-server:15.4.0df7d90ef0f7b
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
2
uffizzi/controller:latest0344805f267b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
2
vdiogov/glpi-conteiner:latest6945f84f0058
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
krb5@1.19.2-2
1.19.2-2ubuntu0.8
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
krb5@1.19.2-2
1.19.2-2ubuntu0.8
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
krb5@1.19.2-2
1.19.2-2ubuntu0.8
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.7
2
1dev/server:11.9.0cd5b12fe5471
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.7
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
krb5@1.21.3-5
1.21.3-5+deb13u1
1
aboogie/login_test_backend:new9c41a4483ac8
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.7
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
aibrix/metadata-service:v0.7.063fb81a64377
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
airbyte/pod-sweeper:1.5.198d2c39d512e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
akaunting/akaunting:3.0.1552811b36ec3a
krb5@1.20.1-2
1.20.1-2+deb12u5
1
akeyless/base:latest759e4289fae8
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
aktosecurity/data-ingestion-service213aded7adc5
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
krb5@1.22.1-2ubuntu4
1.22.1-2ubuntu4.1
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
krb5@1.22.1-2ubuntu4
1.22.1-2ubuntu4.1
1
alazidis/stornx:1.1.1602d4f7f090c
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
allegroai/clearml:2.0.0-613713ae38f7daf
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
krb5@1.20.1-6ubuntu2.1
1.20.1-6ubuntu2.7
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.8
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
krb5@1.20.1-2
1.20.1-2+deb12u5
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
krb5@1.21.3-5
1.21.3-5+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
apache/activemq-artemis:2.44.00305c26f19ed
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
apache/activemq-artemis:2.37.0bae523439ee3
krb5@1.20.1-6ubuntu2.1
1.20.1-6ubuntu2.7
1
apache/airflow:2.8.4-python3.964e58748b6b9
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.