StackRadar

CVE-2019-15903

High

Advisory

Published 4 Sept 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.066
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
328
of 17,781 indexed, latest versions
Container images
200
deployed by those charts
Fix available
5 of 5
affected packages

expat - security update

Carried by container images the latest versions of 328 of 17,781 indexed charts deploy, on 200 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-6+deb8u3, 2.1.0-6+deb8u4+7 more2.1.0-4ubuntu1.4+esm2, 2.1.0-6+deb8u6, 2.1.0-7ubuntu0.16.04.5, 2.2.0-2+deb9u3+2 more161
expatapk2.2.5-r0, 2.2.6-r0, 2.2.7-r02.2.7-r132
python2apk2.7.15-r3, 2.7.16-r1, 2.7.16-r2, 2.7.16-r32.7.17-r012
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.178.0.3904.70-0ubuntu0.16.04.21
firefoxdeb57.0.4+build1-0ubuntu0.16.04.170.0+build2-0ubuntu0.16.04.11
OSV records
ALPINE-CVE-2019-15903UBUNTU-CVE-2019-15903DLA-1912-1DSA-4530-1
Also known as
USN-4132-1, USN-4132-2, USN-4165-1

Charts affected

328 by stars
ChartLatestAffected imagesRadar Score
tama-charttama-chart0.1.11 of 1See more

tama-chart tama-chart 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,632
giropops-senhas-devtechpreta0.1.01 of 1See more

giropops-senhas-dev techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
giropops-senhas-stgtechpreta0.1.01 of 1See more

giropops-senhas-stg techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

21,005
nginxtest-nginx0.1.01 of 1See more

nginx test-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
nginx-chartstest-nginx-charts0.1.01 of 1See more

nginx-charts test-nginx-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
myapptestrepo0.1.01 of 1See more

myapp testrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
hello-worldthuvu33330.1.01 of 1See more

hello-world thuvu3333 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
deis-workflowtohlejezkouska0.1.01 of 1See more

deis-workflow tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mojeaplikacetohlejezkouska0.1.01 of 1See more

mojeaplikace tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5

Open the chart page →

15,330
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u1

Open the chart page →

5,514
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

3,329
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6

Open the chart page →

1,339
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
expat@2.2.5-r0
2.2.7-r1

Open the chart page →

1,572
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15903.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3

Open the chart page →

702

Container images carrying it

200 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
neilpeterson/process-tweet:latest39ce9f92e899
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
nodered/node-red-docker:0.19.6-v8070643219ea2
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
omecproject/onos-progran:1.0.05715e5648aa0
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
openwhisk/apigateway:1.0.0df52384d7f92
python2@2.7.16-r2
2.7.17-r0
1
opsmx11/issuegen:v2.1.05c50ca123d88
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm2
1
osixia/phpldapadmin:0.7.058cce1b08592
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
osrm/osrm-backend:v5.22.0c5c86a5b15ce
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
pachyderm/dash:1.9.094e9a281e5a4
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3
1
paulczar/spring-helloworld:latestc7140cecd5f7
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3
1
pcm32/galaxy-postgres:9.6.5_for_18.01301fb89914ef
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
python2@2.7.16-r2
2.7.17-r0
1
pedrocesarti/jmeter-docker:3.314851f144f57
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
expat@2.1.0-6+deb8u3
2.1.0-6+deb8u6
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
raykrueger/riemann:0.2.14c8baf3de57bb
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
resouer/redis-slave:v2e2f198b49ba7
expat@2.1.0-4ubuntu1
2.1.0-4ubuntu1.4+esm2
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u3
1
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
expat@2.2.5-r0
2.2.7-r1
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u3
1
runatlantis/atlantis:v0.7.168fa470d1416
expat@2.2.6-r0
2.2.7-r1
1
rundeck/rundeck:3.0.16b13e8059ad72
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
sismics/docs:v1.10f4b0ef019cf1
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
stakater/logrotate:3.13.05c0e01c23993
expat@2.2.5-r0
2.2.7-r1
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
tenstartups/ser2sock:latest379d9338c720
expat@2.2.6-r0
2.2.7-r1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
chromium-browser@63.0.3239.84-0ubuntu0.16.04.1
expat@2.1.0-7ubuntu0.16.04.3
firefox@57.0.4+build1-0ubuntu0.16.04.1
78.0.3904.70-0ubuntu0.16.04.2
2.1.0-7ubuntu0.16.04.5
70.0+build2-0ubuntu0.16.04.1
1
timothyclarke/wptserver:2018-03-0840a80ced8031
expat@2.1.0-6+deb8u4
2.1.0-6+deb8u6
1
tpdock/freeradius:2.2.93da600c95a49
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
voltha/voltha-cli:1.6.0c4e41e92f046
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
voltha/voltha-envoy:1.6.059ab2a00f712
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm2
1
voltha/voltha-netconf:1.6.037f80524c207
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
voltha/voltha-tester:1.7.0655c3048a602
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5
1
voltha/voltha-voltha:1.6.0ff596b62de59
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
wiremind/sshd:latestb3d63ce7d198
expat@2.2.5-r0
2.2.7-r1
1
woojoong/wowza:latestec230db19652
expat@2.2.5-3
2.2.5-3ubuntu0.2
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
expat@2.1.0-6+deb8u3
2.1.0-6+deb8u6
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
python2@2.7.16-r3
2.7.17-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.