StackRadar

CVE-2026-40393

Critical

Advisory

Published 12 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
151
of 17,781 indexed, latest versions
Container images
142
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 142 images.

Affected packageAffected versionsFixed inImages
mesadeb10.1.3-0ubuntu0.6, 17.2.4-0ubuntu1~16.04.4, 17.2.8-0ubuntu0~16.04.1, 18.0.5-0ubuntu0~16.04.1+25 more22.3.6-1+deb12u2, 23.2.1-1ubuntu3.1~22.04.4, 25.0.7-2+deb13u1, 25.2.8-0ubuntu0.24.04.2+1 more142
OSV records
DEBIAN-CVE-2026-40393UBUNTU-CVE-2026-40393
Also known as
USN-8427-1

Charts affected

151 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40393.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4

Open the chart page →

14,100

Container images carrying it

142 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
stashapp/stash:latest24dbd7607174
mesa@20.2.6-0ubuntu0.20.04.1
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
mesa@17.2.8-0ubuntu0~16.04.1
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
mesa@17.2.4-0ubuntu1~16.04.4
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
mesa@25.0.7-2
25.0.7-2+deb13u1
1
trueosiris/vrising:latest9356f98ad561
mesa@23.2.1-1ubuntu3.1~22.04.3
23.2.1-1ubuntu3.1~22.04.4
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
mesa@23.2.1-1ubuntu3.1~22.04.2
23.2.1-1ubuntu3.1~22.04.4
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
mesa@25.2.8-0ubuntu0.24.04.1
25.2.8-0ubuntu0.24.04.2
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
mesa@22.0.5-0ubuntu0.1
23.2.1-1ubuntu3.1~22.04.4
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
mesa@25.0.7-2
25.0.7-2+deb13u1
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
mesa@23.0.4-0ubuntu1~22.04.1
23.2.1-1ubuntu3.1~22.04.4
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
mesa@25.2.8-0ubuntu0.24.04.1
25.2.8-0ubuntu0.24.04.2
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
mesa@25.0.7-2
25.0.7-2+deb13u1
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
mesa@25.0.7-2
25.0.7-2+deb13u1
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
mesa@24.0.9-0ubuntu0.3
25.2.8-0ubuntu0.24.04.2
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
mesa@24.0.9-0ubuntu0.3
25.2.8-0ubuntu0.24.04.2
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
mesa@21.2.6-0ubuntu0.1~20.04.1
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
mesa@21.2.6-0ubuntu0.1~20.04.1
no fix listed
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
mesa@20.2.6-0ubuntu0.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mesa@20.0.8-0ubuntu1~18.04.1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
mesa@25.0.7-2
25.0.7-2+deb13u1
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
mesa@24.2.8-1ubuntu1~24.04.1
25.2.8-0ubuntu0.24.04.2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
mesa@21.2.6-0ubuntu0.1~20.04.2
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
mesa@25.2.8-0ubuntu0.24.04.1
25.2.8-0ubuntu0.24.04.2
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
mesa@22.3.6-1+deb12u1
22.3.6-1+deb12u2
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
mesa@18.0.5-0ubuntu0~16.04.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.