StackRadar

CVE-2018-20843

High

Advisory

Published 24 Jun 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.071
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 17,781 indexed, latest versions
Container images
177
deployed by those charts
Fix available
2 of 2
affected packages

expat - security update

Carried by container images the latest versions of 215 of 17,781 indexed charts deploy, on 177 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-6+deb8u3, 2.1.0-6+deb8u4+4 more2.1.0-4ubuntu1.4+esm1, 2.1.0-6+deb8u5, 2.1.0-7ubuntu0.16.04.4, 2.2.0-2+deb9u2+1 more147
expatapk2.2.5-r0, 2.2.6-r02.2.7-r030
OSV records
ALPINE-CVE-2018-20843UBUNTU-CVE-2018-20843DLA-1839-1DSA-4472-1
Also known as
USN-4040-1, USN-4040-2

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.32 of 2See more

sonarqube stakater 0.10.3

2 of the 2 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
expat@2.1.0-6+deb8u3
2.1.0-6+deb8u5
library/sonarqube:6.7.6-community0ae5169e3d0f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
pachyderm/dash:1.9.094e9a281e5a4
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

4,967
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

3,632
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

21,005
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4

Open the chart page →

15,330
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

3,329
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5

Open the chart page →

1,339
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2018-20843.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
expat@2.2.5-r0
2.2.7-r0

Open the chart page →

1,572

Container images carrying it

177 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
camptocamp/pghoard:10bff736b15623
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
camptocamp/r10k-dashboard:0.2.6073be594d145
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm1
1
cheyang/distributed-tf:1.6.046cc34755493
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
citizenstig/httpbin:latestb81c818ccb86
expat@2.1.0-7ubuntu0.16.04.2
2.1.0-7ubuntu0.16.04.4
1
conduction/agendaservice-nginx:lateste1c176458aaf
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/balance-registration-nginx:dev9e24264ea8f3
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/betaalservice-nginx:latestd3577ddd5c67
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/cgrc-nginx:devd8e23f10e882
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/checkin-component-nginx:dev583d2cd8476c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/conduction-ui-nginx:devd9b38e234de9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/contactmoment-component-nginx:dev353dc46303ac
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/docparser-nginx:dev08524d8327b8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/kvk-nginx:devcf163d2b95b5
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
conduction/pan-nginx:devaf3e9f551ad1
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5
1
daskdev/dask:1.1.04ecd7bc35500
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
daskdev/dask-notebook:1.1.0052630f5ca04
expat@2.2.5-3
2.2.5-3ubuntu0.1
1
dpage/pgadmin4:4.5a5a656e1d5fd
expat@2.2.6-r0
2.2.7-r0
1
drgrove/mtls-server:v0.14.2361721759a2b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
expat@2.2.5-r0
2.2.7-r0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5
1
fourcube/openiban:1.0.15091df635f7e
expat@2.2.5-r0
2.2.7-r0
1
galaxy/galaxy-init:v18.010267bad550e6
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm1
1
galaxy/galaxy-stable:v18.018e577a626dfd
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm1
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
expat@2.2.6-r0
2.2.7-r0
1
gocd/gocd-server:v19.3.02da45cb09d57
expat@2.2.6-r0
2.2.7-r0
1
google/cadvisor:latest815386ebbe9a
expat@2.2.5-r0
2.2.7-r0
1
grafana/grafana:5.2.1104f434d47c8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
grafana/grafana:6.2.09e7fe9c7903a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
grafana/grafana:5.2.2b5591419cfa3
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
graylog2/server:2.4.3-38ff28c66e6c1
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5
1
greenbirdit/locust:0.9.0e99d53bdc944
expat@2.2.5-r0
2.2.7-r0
1
guacamole/guacamole:1.1.0333a7f40c145
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
hickey/puppet_forge:1.10.0c1148a09ef20
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u5
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
expat@2.2.6-r0
2.2.7-r0
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
ibmcom/ibm-storage-enabler-for-containers-db:2.1.09a766604a73b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u2
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
expat@2.2.6-r0
2.2.7-r0
1
ibmcom/icp-storage-util:3.2.0c44e1ef21075
expat@2.2.6-r0
2.2.7-r0
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
2.2.5-3ubuntu0.1
1
istio/node-agent-k8s:1.2.9268ab879ea51
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1
istio/pilot:1.2.9c09319753454
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.