StackRadar

CVE-2022-23852

Critical

Advisory

Published 24 Jan 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.046
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
401
of 17,781 indexed, latest versions
Container images
329
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 401 of 17,781 indexed charts deploy, on 329 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+5 more2.1.0-4ubuntu1.4+esm4, 2.1.0-7ubuntu0.16.04.5+esm2, 2.2.5-3ubuntu0.4, 2.2.9-1ubuntu0.2163
expatapk2.2.9-r1, 2.2.10-r0, 2.2.10-r1, 2.2.10-r2+2 more2.2.10-r1, 2.2.10-r3, 2.4.4-r0146
expatrpm2.2.5-4.el80:2.2.5-4.el8_4.320
OSV records
ALPINE-CVE-2022-23852RHSA-2022:4834UBUNTU-CVE-2022-23852
Also known as
USN-5288-1

Charts affected

401 by stars
ChartLatestAffected imagesRadar Score
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-23852.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
expat@2.4.1-r0
2.4.4-r0

Open the chart page →

2,534

Container images carrying it

329 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
expat@2.2.10-r1
2.2.10-r3
1
balihb/block-pvc-scanner:0.2.45b95e1cf1158
expat@2.4.3-r0
2.4.4-r0
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
expat@2.4.3-r0
2.4.4-r0
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
expat@2.2.10-r1
2.2.10-r3
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
expat@2.2.9-r1
2.2.10-r1
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
chaostoolkit/back:latest734f3af86125
expat@2.2.9-r1
2.2.10-r1
1
chaostoolkit/front:latest7f4a7eb9f7df
expat@2.2.9-r1
2.2.10-r1
1
chaostoolkit/middle:latestb95ba4961cfc
expat@2.2.9-r1
2.2.10-r1
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm4
1
chetangautamm/repo:sipp.v3e7f7049e1544
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
cheyang/distributed-tf:1.6.046cc34755493
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
citizenstig/httpbin:latestb81c818ccb86
expat@2.1.0-7ubuntu0.16.04.2
2.1.0-7ubuntu0.16.04.5+esm2
1
cloudve/janis-terminal:latestaf56e77ca587
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
cloudve/ttyd:latestd79c1c5881c0
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
cockroachdb/cockroach-operator:v2.1.0983312754620
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
conduction/agendaservice-php:latest9cfeeb6c7c20
expat@2.2.9-r1
2.2.10-r1
1
conduction/balance-registration-php:devc36094a41369
expat@2.2.9-r1
2.2.10-r1
1
conduction/betaalservice-php:latestece1ab544c57
expat@2.2.9-r1
2.2.10-r1
1
conduction/checkin-component-php:dev3423845692c1
expat@2.2.9-r1
2.2.10-r1
1
conduction/conduction-ui-php:dev2744565516e8
expat@2.2.9-r1
2.2.10-r1
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
expat@2.2.9-r1
2.2.10-r1
1
conduction/docparser-php:devb6f95c8ead7d
expat@2.2.9-r1
2.2.10-r1
1
conduction/kvk-php:dev8f177f9f8a7b
expat@2.2.9-r1
2.2.10-r1
1
conduction/pan-php:dev24f03c57568f
expat@2.2.9-r1
2.2.10-r1
1
craftypath/sops-operator:v0.8.0402a0024c732
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
crazymax/rrdcached:1.7.2-r4042536a06596
expat@2.4.1-r0
2.4.4-r0
1
cribl/cribl:3.0.2762747cb6796
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
daskdev/dask-notebook:1.1.0052630f5ca04
expat@2.2.5-3
2.2.5-3ubuntu0.4
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
expat@2.2.9-r1
2.2.10-r1
1
datawire/aes:1.13.62beb65062c8b
expat@2.2.9-r1
2.2.10-r1
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
expat@2.2.9-r1
2.2.10-r1
1
dchesterton/amcrest2mqtt:1.0.9cc70f2238aa9
expat@2.4.1-r0
2.4.4-r0
1
dellcloud/category:distributed02fc234353a9
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
dellcloud/pages:1.04d2eb25b9225
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
deluan/navidrome:0.43.04e9ae3bff6aa
expat@2.2.10-r1
2.2.10-r3
1
dockerid31415926/pod-pvc-mapping:v0.1.3354309669f16
expat@2.4.1-r0
2.4.4-r0
1
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
expat@2.4.1-r0
2.4.4-r0
1
elastictranscoder/media:627e21dc963ab3858c6b
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
elastictranscoder/media-storage:f6d861a026208b8c2359
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.