StackRadar

CVE-2019-15903

High

Advisory

Published 4 Sept 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.066
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
328
of 17,781 indexed, latest versions
Container images
200
deployed by those charts
Fix available
5 of 5
affected packages

expat - security update

Carried by container images the latest versions of 328 of 17,781 indexed charts deploy, on 200 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-6+deb8u3, 2.1.0-6+deb8u4+7 more2.1.0-4ubuntu1.4+esm2, 2.1.0-6+deb8u6, 2.1.0-7ubuntu0.16.04.5, 2.2.0-2+deb9u3+2 more161
expatapk2.2.5-r0, 2.2.6-r0, 2.2.7-r02.2.7-r132
python2apk2.7.15-r3, 2.7.16-r1, 2.7.16-r2, 2.7.16-r32.7.17-r012
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.178.0.3904.70-0ubuntu0.16.04.21
firefoxdeb57.0.4+build1-0ubuntu0.16.04.170.0+build2-0ubuntu0.16.04.11
OSV records
ALPINE-CVE-2019-15903UBUNTU-CVE-2019-15903DLA-1912-1DSA-4530-1
Also known as
USN-4132-1, USN-4132-2, USN-4165-1

Charts affected

328 by stars
ChartLatestAffected imagesRadar Score
tama-charttama-chart0.1.11 of 1See more

tama-chart tama-chart 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,632
giropops-senhas-devtechpreta0.1.01 of 1See more

giropops-senhas-dev techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
giropops-senhas-stgtechpreta0.1.01 of 1See more

giropops-senhas-stg techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

21,005
nginxtest-nginx0.1.01 of 1See more

nginx test-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
nginx-chartstest-nginx-charts0.1.01 of 1See more

nginx-charts test-nginx-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
myapptestrepo0.1.01 of 1See more

myapp testrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
hello-worldthuvu33330.1.01 of 1See more

hello-world thuvu3333 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
deis-workflowtohlejezkouska0.1.01 of 1See more

deis-workflow tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mojeaplikacetohlejezkouska0.1.01 of 1See more

mojeaplikace tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5

Open the chart page →

15,330
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u1

Open the chart page →

5,514
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
expat@2.2.5-r0
2.2.7-r1

Open the chart page →

1,572
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702

Container images carrying it

200 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
blacktop/httpie:latestfc5e68e2f5ab
expat@2.2.6-r0
2.2.7-r1
1
bpineau/katafygio:v0.7.176edd9d121b8
expat@2.2.5-r0
2.2.7-r1
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
bryanalves/smart_exporter:0.2af47dfbb9413
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
buoyantio/linkerd:1.1.2f4048edaca6f
expat@2.1.0-6+deb8u3
2.1.0-6+deb8u6
1
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
camptocamp/ldap-search-exporter:latest5e55370dd292
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
camptocamp/pghoard:10bff736b15623
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
camptocamp/r10k-dashboard:0.2.6073be594d145
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
cdignam/kodiak:v0.54.05a6a55b39cee
expat@2.2.6-2
2.2.6-2+deb10u1
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
expat@2.2.6-2
2.2.6-2+deb10u1
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm2
1
cheyang/distributed-tf:1.6.046cc34755493
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
chorss/docker-pgadmin4:4.115c549cacb8ab
expat@2.2.7-r0
2.2.7-r1
1
citizenstig/httpbin:latestb81c818ccb86
expat@2.1.0-7ubuntu0.16.04.2
2.1.0-7ubuntu0.16.04.5
1
conduction/agendaservice-nginx:lateste1c176458aaf
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/balance-registration-nginx:dev9e24264ea8f3
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/betaalservice-nginx:latestd3577ddd5c67
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/cgrc-nginx:devd8e23f10e882
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/checkin-component-nginx:dev583d2cd8476c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/conduction-ui-nginx:devd9b38e234de9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/contactmoment-component-nginx:dev353dc46303ac
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/docparser-nginx:dev08524d8327b8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/kvk-nginx:devcf163d2b95b5
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
conduction/pan-nginx:devaf3e9f551ad1
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
daskdev/dask:1.1.04ecd7bc35500
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
daskdev/dask-notebook:1.1.0052630f5ca04
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
douz/helpdesk-frontend:latestfa6a57de2b72
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3
1
dpage/pgadmin4:4.5a5a656e1d5fd
expat@2.2.6-r0
2.2.7-r1
1
drgrove/mtls-server:v0.14.2361721759a2b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
eaudeweb/mailtrap:2.3b8ad9b7e19bb
expat@2.2.6-2
2.2.6-2+deb10u1
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
expat@2.2.5-r0
2.2.7-r1
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
fourcube/openiban:1.0.15091df635f7e
expat@2.2.5-r0
2.2.7-r1
1
galaxy/galaxy-init:v18.010267bad550e6
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm2
1
galaxy/galaxy-stable:v18.018e577a626dfd
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm2
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
expat@2.2.6-r0
python2@2.7.15-r3
2.2.7-r1
2.7.17-r0
1
gocd/gocd-server:v19.3.02da45cb09d57
expat@2.2.6-r0
python2@2.7.15-r3
2.2.7-r1
2.7.17-r0
1
gomods/athens:v0.8.1d714c7ff0231
python2@2.7.16-r3
2.7.17-r0
1
google/cadvisor:latest815386ebbe9a
expat@2.2.5-r0
2.2.7-r1
1
grafana/grafana:5.2.1104f434d47c8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
grafana/grafana:6.2.09e7fe9c7903a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
grafana/grafana:5.2.2b5591419cfa3
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
graylog2/server:2.4.3-38ff28c66e6c1
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
greenbirdit/locust:0.9.0e99d53bdc944
expat@2.2.5-r0
2.2.7-r1
1
guacamole/guacamole:1.1.0333a7f40c145
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.