StackRadar

CVE-2019-15903

High

Advisory

Published 4 Sept 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.066
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
328
of 17,781 indexed, latest versions
Container images
200
deployed by those charts
Fix available
5 of 5
affected packages

expat - security update

Carried by container images the latest versions of 328 of 17,781 indexed charts deploy, on 200 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-6+deb8u3, 2.1.0-6+deb8u4+7 more2.1.0-4ubuntu1.4+esm2, 2.1.0-6+deb8u6, 2.1.0-7ubuntu0.16.04.5, 2.2.0-2+deb9u3+2 more161
expatapk2.2.5-r0, 2.2.6-r0, 2.2.7-r02.2.7-r132
python2apk2.7.15-r3, 2.7.16-r1, 2.7.16-r2, 2.7.16-r32.7.17-r012
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.178.0.3904.70-0ubuntu0.16.04.21
firefoxdeb57.0.4+build1-0ubuntu0.16.04.170.0+build2-0ubuntu0.16.04.11
OSV records
ALPINE-CVE-2019-15903UBUNTU-CVE-2019-15903DLA-1912-1DSA-4530-1
Also known as
USN-4132-1, USN-4132-2, USN-4165-1

Charts affected

328 by stars
ChartLatestAffected imagesRadar Score
tama-charttama-chart0.1.11 of 1See more

tama-chart tama-chart 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,632
giropops-senhas-devtechpreta0.1.01 of 1See more

giropops-senhas-dev techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
giropops-senhas-stgtechpreta0.1.01 of 1See more

giropops-senhas-stg techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

21,005
nginxtest-nginx0.1.01 of 1See more

nginx test-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
nginx-chartstest-nginx-charts0.1.01 of 1See more

nginx-charts test-nginx-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
myapptestrepo0.1.01 of 1See more

myapp testrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
hello-worldthuvu33330.1.01 of 1See more

hello-world thuvu3333 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
deis-workflowtohlejezkouska0.1.01 of 1See more

deis-workflow tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mojeaplikacetohlejezkouska0.1.01 of 1See more

mojeaplikace tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5

Open the chart page →

15,330
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u1

Open the chart page →

5,514
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
expat@2.2.5-r0
2.2.7-r1

Open the chart page →

1,572
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702

Container images carrying it

200 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
halkeye/slack-resurrect:v0.1.477b05e95fdb5
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
hickey/puppet_forge:1.10.0c1148a09ef20
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
expat@2.2.6-r0
2.2.7-r1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
ibmcom/ibm-storage-enabler-for-containers-db:2.1.09a766604a73b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
expat@2.2.6-r0
python2@2.7.16-r1
2.2.7-r1
2.7.17-r0
1
ibmcom/icp-storage-util:3.2.0c44e1ef21075
expat@2.2.6-r0
python2@2.7.15-r3
2.2.7-r1
2.7.17-r0
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
istio/node-agent-k8s:1.2.9268ab879ea51
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
istio/pilot:1.2.9c09319753454
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
istio/proxyv2:1.2.90c78be035e98
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
jacobalberty/unifi:5.10.19c409924e2463
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
jenkinsci/jenkins:2.67a1f33f004659
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
kennethreitz/httpbin:latest599fe5e50731
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
kiwigrid/k8s-sidecar:0.1.20af151f677a63
expat@2.2.6-2
2.2.6-2+deb10u1
1
kodekloud/webapp-color:latest99c3821ea49b
expat@2.2.5-r0
2.2.7-r1
1
konradkleine/docker-registry-frontend:v2181aad54ee64
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
expat@2.2.6-r0
2.2.7-r1
1
kunchalavikram/connectedcity:v14a559a47579e
expat@2.2.5-r0
2.2.7-r1
1
kunchalavikram/connectedfactory:v152c13fb9b1d9
expat@2.2.5-r0
2.2.7-r1
1
library/cassandra:2.1.20cb079c0d7a57
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
library/elasticsearch:2.4.641ed3a1a16b6
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
library/nginx:1.14.2f7988fb6c02e
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
library/postgres:9.6.52f2b1f4d9d83
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
library/postgres:10.49625c2fb3498
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
library/rabbitmq:3.6-management05bd722c6b0c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
library/registry:2.7.01cd9409a3113
expat@2.2.5-r0
2.2.7-r1
1
library/sonarqube:6.7.6-community0ae5169e3d0f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
expat@2.2.5-r0
2.2.7-r1
1
lmenezes/cerebro:0.8.36684131caf5f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
logiqai/toolbox:2.0.155a574ec5b64
python2@2.7.16-r3
2.7.17-r0
1
markbnj/unbound-docker:0.1.03f0933685982
expat@2.2.5-r0
2.2.7-r1
1
metabase/metabase:v0.31.2ffb2dccacefc
expat@2.2.5-r0
2.2.7-r1
1
muluder/prograncontrollermcord:0.1.843b597a93da7
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
expat@2.1.0-6+deb8u3
2.1.0-6+deb8u6
1
neilpeterson/aks-helloworld:v1fb47732ef36b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
neilpeterson/burst-scheduler:v1.23a8877032972
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
neilpeterson/chart-tweet:latest64fd8dab075f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
neilpeterson/get-tweet:v28b645ac1a23e
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
neilpeterson/osba-storage-demo:latest29d229ab446e
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.