StackRadar

CVE-2026-40393

Critical

Advisory

Published 12 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
151
of 17,781 indexed, latest versions
Container images
142
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 142 images.

Affected packageAffected versionsFixed inImages
mesadeb10.1.3-0ubuntu0.6, 17.2.4-0ubuntu1~16.04.4, 17.2.8-0ubuntu0~16.04.1, 18.0.5-0ubuntu0~16.04.1+25 more22.3.6-1+deb12u2, 23.2.1-1ubuntu3.1~22.04.4, 25.0.7-2+deb13u1, 25.2.8-0ubuntu0.24.04.2+1 more142
OSV records
DEBIAN-CVE-2026-40393UBUNTU-CVE-2026-40393
Also known as
USN-8427-1

Charts affected

151 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40393.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4

Open the chart page →

14,100

Container images carrying it

142 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
mesa@23.2.1-1ubuntu3.1~22.04.3
23.2.1-1ubuntu3.1~22.04.4
1
jaedb/iris:latest048cfbf58d57
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
josh5/unmanic:0.2.64d49c4816260
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4
1
kinseii/wazuh-agent:4.14.17160eb143728
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
langgenius/dify-api:0.6.11fca918260dd6
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
mesa@25.0.7-0ubuntu0.24.04.2
25.2.8-0ubuntu0.24.04.2
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
linuxserver/jellyfin:10.7.72427dde159a2
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
mesa@22.2.5-0ubuntu0.1~22.04.3
23.2.1-1ubuntu3.1~22.04.4
1
louislam/uptime-kuma:2.5.33e24e96c89ef
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
louislam/uptime-kuma:2.0.24c364ef96aad
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
louislam/uptime-kuma:2.4.091e963bfda56
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
mbround18/valheim:3.1.070bd4da591cd
mesa@23.2.1-1ubuntu3.1~22.04.3
23.2.1-1ubuntu3.1~22.04.4
1
merlos/zookeeper:3.9.3a38fc7e09ed7
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
mlikiowa/napcat-docker:latest1336a777f9a4
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
mesa@18.2.8-0ubuntu0~18.04.2
no fix listed
1
opea/chatqna:1.038c51b791efa
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/codegen:1.058f91683892d
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/codetrans:1.0e2436483b73d
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/docsum:1.03eaa91849512
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/guardrails-tgi:1.0262c6048aab8
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/guardrails-tgi:latestf68bec6a1271
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/speecht5:1.0249afad3d268
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opea/web-retriever-chroma:1.0fe08165d7770
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
openkm/openkm-ce:6.3.113bc465a7461b
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
mesa@10.1.3-0ubuntu0.6
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4
1
penpotapp/exporter:2.2.15c835ffd87ab
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4
1
phan2410/dummy-service:0.0.89c6ed6de26ca
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
photoprism/photoprism:220629-jammy2954334adbda
mesa@22.0.1-1ubuntu2.1
23.2.1-1ubuntu3.1~22.04.4
1
photoprism/photoprism:251130db16ee6b1ba3
mesa@25.2.3-1ubuntu1
25.2.8-0ubuntu0.25.10.2
1
photoprism/photoprism:240711-cefc6fd632ca74
mesa@24.0.5-1ubuntu1
25.2.8-0ubuntu0.24.04.2
1
project2team4/react:latest3ff031a08887
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
mesa@23.2.1-1ubuntu3.1~22.04.3
23.2.1-1ubuntu3.1~22.04.4
1
scrapinghub/splash:3.4.1a5f89bc84606
mesa@19.0.8-0ubuntu0~18.04.3
no fix listed
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.