CVE-2022-23852

Critical

Advisory

Published 24 Jan 2022In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.046; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 401; of 17,781 indexed, latest versions
Container images: 329; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 401 of 17,781 indexed charts deploy, on 329 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+5 more	2.1.0-4ubuntu1.4+esm4, 2.1.0-7ubuntu0.16.04.5+esm2, 2.2.5-3ubuntu0.4, 2.2.9-1ubuntu0.2	163
expatapk	2.2.9-r1, 2.2.10-r0, 2.2.10-r1, 2.2.10-r2+2 more	2.2.10-r1, 2.2.10-r3, 2.4.4-r0	146
expatrpm	2.2.5-4.el8	0:2.2.5-4.el8_4.3	20

OSV records: ALPINE-CVE-2022-23852 RHSA-2022:4834 UBUNTU-CVE-2022-23852
Also known as: USN-5288-1

Charts affected

401 by stars

Chart

Latest

Affected images

Radar Score

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-23852.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	expat@2.4.1-r0	2.4.4-r0

Open the chart page →

2,534

Container images carrying it

329 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
gabekangas/owncast :0.0.7	97461aedb580	expat@2.2.9-r1	2.2.10-r1	1
galaxy/galaxy-init :v18.01	0267bad550e6	expat@2.1.0-4ubuntu1.4	2.1.0-4ubuntu1.4+esm4	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	expat@2.1.0-4ubuntu1.4	2.1.0-4ubuntu1.4+esm4	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
gethue/hue :4.10.0	5702b2c37ff9	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
gitea/gitea :1.13.0	d5ab14cd29af	expat@2.2.9-r1	2.2.10-r1	1
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	expat@2.2.9-r1	2.2.10-r1	1
gluufederation/opendj :4.3.0_01	1a1128b28b95	expat@2.4.1-r0	2.4.4-r0	1
gotson/komga :0.99.4	9b15ea6bfc30	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	expat@2.2.9-r1	2.2.10-r1	1
haugene/transmission-openvpn :4.0	059216cfae4b	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
hcguersoy/cleanreg :v0.8.0	63b76fdcfbe1	expat@2.4.3-r0	2.4.4-r0	1
hetznercloud/hcloud-csi-driver :1.6.0	1475d525f9a4	expat@2.2.10-r1	2.2.10-r3	1
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	expat@2.2.9-r1	2.2.10-r1	1
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	expat@2.2.9-r1	2.2.10-r1	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
ibmcom/microclimate-theia :latest	e17bdccc5030	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
ibmcom/skydive :0.22.0	395e60cc6e3d	expat@2.2.5-3	2.2.5-3ubuntu0.4	1
iofog/router :2.0.1	7260cf861479	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/install-cni :1.10.3	2232f365aed6	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/node-agent-k8s :1.2.9	268ab879ea51	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
istio/operator :1.10.3	655eefa11c84	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/pilot :1.10.0	294ca55bd1cc	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/pilot :1.2.9	c09319753454	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
istio/pilot :1.10.3	e7e110a421c2	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/proxyv2 :1.2.9	0c78be035e98	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
istio/proxyv2 :1.9.6	87a9db561d2e	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
istio/proxyv2 :1.10.0	88c6c693e67a	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4	1
jacobalberty/unifi :5.10.19	c409924e2463	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm2	1
jakowenko/double-take :1.6.0	b858bac9e32a	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
jfwenisch/alpine-tor :latest	9e6c229f953c	expat@2.2.10-r1	2.2.10-r3	1
jlesage/handbrake :v1.24.2	5fa191e3c7ee	expat@2.2.9-r1	2.2.10-r1	1
jmferrer/azure-devops-agent :latest	030f68ec6998	expat@2.1.0-7ubuntu0.16.04.5	2.1.0-7ubuntu0.16.04.5+esm2	1
julb/alertmanager-gchat-integration :1.0.5	837c4038a0dd	expat@2.2.10-r1	2.2.10-r3	1
julb/http-reqtrace :1.1.0	0806409af397	expat@2.2.9-r1	2.2.10-r1	1
julb/kubernetes-configmap-sync :1.1.0	d7d8836366ad	expat@2.2.9-r1	2.2.10-r1	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	expat@2.2.9-1build1	2.2.9-1ubuntu0.2	1