CVE-2026-40393

Critical

Advisory

Published 12 Apr 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 151; of 17,781 indexed, latest versions
Container images: 142; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 142 images.

Affected package	Affected versions	Fixed in	Images
mesadeb	10.1.3-0ubuntu0.6, 17.2.4-0ubuntu1~16.04.4, 17.2.8-0ubuntu0~16.04.1, 18.0.5-0ubuntu0~16.04.1+25 more	22.3.6-1+deb12u2, 23.2.1-1ubuntu3.1~22.04.4, 25.0.7-2+deb13u1, 25.2.8-0ubuntu0.24.04.2+1 more	142

OSV records: DEBIAN-CVE-2026-40393 UBUNTU-CVE-2026-40393
Also known as: USN-8427-1

Charts affected

151 by stars

Chart

Latest

Affected images

Radar Score

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40393.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	mesa@23.2.1-1ubuntu3.1~22.04.2	23.2.1-1ubuntu3.1~22.04.4

Open the chart page →

14,100

Container images carrying it

142 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	5
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	mesa@17.2.8-0ubuntu0~16.04.1	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	mesa@18.0.5-0ubuntu0~16.04.1	no fix listed	4
opea/llm-tgi :1.0	0c25aab3f106	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	4
ciscolabs/rtsp-client :latest	a7b60ec88285	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	3
ciscolabs/rtsp-server :latest	b59fc10bb821	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	mesa@18.0.5-0ubuntu0~16.04.1	no fix listed	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	3
kurento/kurento-media-server :latest	03c0d34d0828	mesa@25.0.7-0ubuntu0.24.04.2	25.2.8-0ubuntu0.24.04.2	2
louislam/uptime-kuma :2.5.4	917318f9d7be	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
opea/embedding-tei :1.0	5c9639de61c1	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
opea/reranking-tei :1.0	e48613afb191	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
opea/retriever-redis :1.0	eb746b263705	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	mesa@24.2.8-1ubuntu1~24.04.1	25.2.8-0ubuntu0.24.04.2	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	mesa@21.0.3-0ubuntu0.3~20.04.1	no fix listed	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	mesa@21.0.3-0ubuntu0.3~20.04.1	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	2
5200710/hadoop :3.2.3-java8	092d3088a5fb	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	mesa@20.2.6-0ubuntu0.20.04.1	no fix listed	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	mesa@23.2.1-1ubuntu3.1~22.04.3	23.2.1-1ubuntu3.1~22.04.4	1
anguda/ant-media :2.5	c435285fc241	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
apachepulsar/pulsar :2.9.0	d056c89b7131	mesa@21.0.3-0ubuntu0.3~20.04.3	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	mesa@21.0.3-0ubuntu0.3~20.04.5	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	mesa@21.3.6~kisak1~f	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	mesa@21.0.3-0ubuntu0.3~20.04.1	no fix listed	1
castopod/castopod :1.12.10	1fd37280cbb2	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	1
castopod/castopod :1.15.5	4e4f0440520f	mesa@25.0.7-2	25.0.7-2+deb13u1	1
cheyang/distributed-tf :1.6.0	46cc34755493	mesa@17.2.8-0ubuntu0~16.04.1	no fix listed	1
chocobozzz/peertube :v8.1.5	052712130691	mesa@25.0.7-2	25.0.7-2+deb13u1	1
countly/countly-server :25.05.4	e3c238248f99	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	mesa@25.0.7-2	25.0.7-2+deb13u1	1
deconzcommunity/deconz :2.29.2	062de2362641	mesa@22.3.6-1+deb12u1	22.3.6-1+deb12u2	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	mesa@20.0.8-0ubuntu1~18.04.1	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	mesa@20.0.8-0ubuntu1~18.04.1	no fix listed	1
escaping/core-keeper-dedicated :latest	87fa79255962	mesa@25.0.7-2	25.0.7-2+deb13u1	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
gotenberg/gotenberg :8.30	206a6c708fc6	mesa@25.0.7-2	25.0.7-2+deb13u1	1
gotenberg/gotenberg :8.34	67097317623a	mesa@25.0.7-2	25.0.7-2+deb13u1	1
haveagitgat/tdarr :2.00.18	1256348872ce	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	mesa@20.3.1~kisak1~f	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	mesa@17.2.8-0ubuntu0~16.04.1	no fix listed	1
instill/artifact-backend :b28766a	c4a393e601ed	mesa@25.0.7-2	25.0.7-2+deb13u1	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	mesa@21.2.6-0ubuntu0.1~20.04.2	no fix listed	1