StackRadar

CVE-2026-40553

High

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
gawkdeb1:5.2.1-2, 1:5.2.1-2+b1no fix listed17
OSV records
DEBIAN-CVE-2026-40553

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,159
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
gawk@1:5.2.1-2
no fix listed

Open the chart page →

17,404
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.15.5c449b93629a5
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

11,869
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
gawk@1:5.2.1-2
no fix listed

Open the chart page →

38,107
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,028
arlas-aiasarlas-stackVerified publisher28.8.03 of 22See more

arlas-aias arlas-stack 28.8.0

3 of the 22 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
gawk@1:5.2.1-2+b1
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
gawk@1:5.2.1-2+b1
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

40,238
arlas-servicesarlas-stackVerified publisher28.8.03 of 3See more

arlas-services arlas-stack 28.8.0

3 of the 3 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
gawk@1:5.2.1-2+b1
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
gawk@1:5.2.1-2+b1
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

1,534
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,159
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

2,271
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
gawk@1:5.2.1-2
no fix listed

Open the chart page →

9,077
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,099
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
gawk@1:5.2.1-2
no fix listed

Open the chart page →

33,242
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
gawk@1:5.2.1-2
no fix listed

Open the chart page →

33,242
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,028
fluent-bitot-container-kit0.0.31 of 2See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

883
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

1,569
rotational-apirotationalVerified publisher1.3.11 of 1See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
rotationalio/rotational-api:1.3.0f1a2d05d8fff
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

1,567
vanityrotationalVerified publisher1.2.21 of 1See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
rotationalio/vanity:1.2.0d77350f69b45
gawk@1:5.2.1-2+b1
no fix listed

Open the chart page →

1,204
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-40553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
gawk@1:5.2.1-2
no fix listed

Open the chart page →

30,219

Container images carrying it

17 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gisaia/arlas-permissions-server:28.0.0e612fc722e02
gawk@1:5.2.1-2+b1
no fix listed
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
gawk@1:5.2.1-2+b1
no fix listed
2
gisaia/arlas-server:28.0.04e693e7b6f37
gawk@1:5.2.1-2+b1
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
gawk@1:5.2.1-2
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
gawk@1:5.2.1-2
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
gawk@1:5.2.1-2
no fix listed
2
baserow/baserow:1.30.1df0c42eb67e8
gawk@1:5.2.1-2
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
gawk@1:5.2.1-2
no fix listed
1
louislam/uptime-kuma:2.5.33e24e96c89ef
gawk@1:5.2.1-2
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
gawk@1:5.2.1-2
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
gawk@1:5.2.1-2
no fix listed
1
reportportal/service-auto-analyzer:5.15.5c449b93629a5
gawk@1:5.2.1-2+b1
no fix listed
1
rotationalio/geoping:1.3.034bcb6fc3cb7
gawk@1:5.2.1-2+b1
no fix listed
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
gawk@1:5.2.1-2+b1
no fix listed
1
rotationalio/vanity:1.2.0d77350f69b45
gawk@1:5.2.1-2+b1
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
gawk@1:5.2.1-2+b1
no fix listed
1
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
gawk@1:5.2.1-2+b1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.