StackRadar

CVE-2026-56740

High

Advisory

Published 18 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
78
deployed by those charts
Fix available
1 of 1
affected package

JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 78 images.

Affected packageAffected versionsFixed inImages
jline-remote-telnetmaven3.8.2, 3.9.0, 3.12.1, 3.13.1+13 more3.30.1478
OSV records
GHSA-47qp-hqvx-6r3f

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

16,975
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
jline-remote-telnet@3.22.0
3.30.14
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

14,728
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
jline-remote-telnet@3.19.0
3.30.14

Open the chart page →

7,936
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

2,398
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

5,958
cp-helm-chartscp-helm-charts0.6.11 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

1 of the 8 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jline-remote-telnet@3.13.1
3.30.14

Open the chart page →

58,857
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

5,398
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
jline-remote-telnet@3.26.3
3.30.14

Open the chart page →

12,454
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

3,463
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

16,892
openhabgeek-cookbookVerified publisher1.5.21 of 1See more

openhab geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
openhab/openhab:3.2.0d0aa4af452c1
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

2,887
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

4,547
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

49,025
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

4,556
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jline-remote-telnet@3.29.0
3.30.14

Open the chart page →

3,199
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

10,540
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

4,547
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

9,920
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jline-remote-telnet@3.9.0
3.30.14
library/zookeeper:3.9.5f258365d4882
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

8,541
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

3,103
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

37,671
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

5,320
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

2,653
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jline-remote-telnet@3.14.1
3.30.14

Open the chart page →

12,856
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

12,108
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

19,226
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

4,547
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

9,005
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jline-remote-telnet@3.13.2
3.30.14

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
jline-remote-telnet@3.19.0
3.30.14

Open the chart page →

41,044
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
jline-remote-telnet@3.30.6
3.30.14

Open the chart page →

2,024
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

1,995
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jline-remote-telnet@3.13.1
3.30.14

Open the chart page →

5,269
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

4,946
stewardsoftwaremillVerified publisher0.1.121 of 1See more

steward softwaremill 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
fthomas/scala-steward:latest367afe974b7a
jline-remote-telnet@3.29.0
3.30.14

Open the chart page →

589
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

4,240
kafkatwomartensVerified publisher0.2.11 of 2See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:latest0ad069035863
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

1,551
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

1,733

Container images carrying it

78 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-remote-telnet@3.21.0
3.30.14
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jline-remote-telnet@3.25.1
3.30.14
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jline-remote-telnet@3.22.0
3.30.14
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jline-remote-telnet@3.22.0
3.30.14
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jline-remote-telnet@3.22.0
3.30.14
1
library/zookeeper:3.9.5cab8944a33a1
jline-remote-telnet@3.25.1
3.30.14
1
onosproject/onos:2.2.144914a8d4b3f
jline-remote-telnet@3.13.2
3.30.14
1
openhab/openhab:5.2.1bfd4a60e90da
jline-remote-telnet@3.30.9
3.30.14
1
openhab/openhab:3.2.0d0aa4af452c1
jline-remote-telnet@3.21.0
3.30.14
1
opennms/sentinel:36.0.288869082a14f
jline-remote-telnet@3.30.6
3.30.14
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
jline-remote-telnet@3.25.0
3.30.14
1
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jline-remote-telnet@3.30.6
3.30.14
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jline-remote-telnet@3.30.6
3.30.14
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jline-remote-telnet@3.25.1
3.30.14
1
sonatype/nexus3:3.58.1586060431b64
jline-remote-telnet@3.21.0
3.30.14
1
strangebee/thehive:5.7.6-1e77b713124dd
jline-remote-telnet@3.29.0
3.30.14
1
voltha/voltha-onos:5.1.8e038acb950d3
jline-remote-telnet@3.19.0
3.30.14
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
jline-remote-telnet@3.22.0
3.30.14
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jline-remote-telnet@3.14.1
3.30.14
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
jline-remote-telnet@3.25.1
3.30.14
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
jline-remote-telnet@3.30.4
3.30.14
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
jline-remote-telnet@3.22.0
3.30.14
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jline-remote-telnet@3.9.0
3.30.14
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jline-remote-telnet@3.30.4
3.30.14
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jline-remote-telnet@3.9.0
3.30.14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.