From c420de0dc590d5d32163b53ccfe59c7907214f62 Mon Sep 17 00:00:00 2001
From: Wang Qi <wangq8@outlook.com>
Date: Fri, 17 Jul 2026 19:35:20 +0800
Subject: [PATCH] Security fix: CVE-2025-21521 (#17046)

---
 docker/docker-compose-base.yml | 2 +-
 helm/values.yaml               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker/docker-compose-base.yml b/docker/docker-compose-base.yml
index 97de830cce..1dd193fffc 100644
--- a/docker/docker-compose-base.yml
+++ b/docker/docker-compose-base.yml
@@ -185,7 +185,7 @@ services:
 
   mysql:
     # mysql:5.7 linux/arm64 image is unavailable.
-    image: mysql:8.0.39
+    image: mysql:8.0.40
     env_file: .env
     environment:
       - MYSQL_ROOT_PASSWORD=${MYSQL_PASSWORD}
diff --git a/helm/values.yaml b/helm/values.yaml
index fa606bdb24..ee68a9b5f2 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -210,7 +210,7 @@ mysql:
   enabled: true
   image:
     repository: mysql
-    tag: 8.0.39
+    tag: 8.0.40
     pullPolicy: IfNotPresent
     pullSecrets: []
   storage: