StackRadar

CVE-2022-23852

Critical

Advisory

Published 24 Jan 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.046
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
401
of 17,781 indexed, latest versions
Container images
329
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 401 of 17,781 indexed charts deploy, on 329 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+5 more2.1.0-4ubuntu1.4+esm4, 2.1.0-7ubuntu0.16.04.5+esm2, 2.2.5-3ubuntu0.4, 2.2.9-1ubuntu0.2163
expatapk2.2.9-r1, 2.2.10-r0, 2.2.10-r1, 2.2.10-r2+2 more2.2.10-r1, 2.2.10-r3, 2.4.4-r0146
expatrpm2.2.5-4.el80:2.2.5-4.el8_4.320
OSV records
ALPINE-CVE-2022-23852RHSA-2022:4834UBUNTU-CVE-2022-23852
Also known as
USN-5288-1

Charts affected

401 by stars
ChartLatestAffected imagesRadar Score
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-23852.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
expat@2.4.1-r0
2.4.4-r0

Open the chart page →

2,534

Container images carrying it

329 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
runatlantis/atlantis:v0.16.145fbaf7e207c
expat@2.2.9-r1
2.2.10-r1
1
rundeck/rundeck:3.2.74d64fe56f767
expat@2.1.0-7ubuntu0.16.04.5
2.1.0-7ubuntu0.16.04.5+esm2
1
rundeck/rundeck:3.0.16b13e8059ad72
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
scrapinghub/splash:3.4.1a5f89bc84606
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
expat@2.2.9-r1
2.2.10-r1
1
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
sentriz/gonic:v0.13.1a74012a6adf3
expat@2.2.10-r1
2.2.10-r3
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
sismics/docs:v1.10f4b0ef019cf1
expat@2.2.5-3
2.2.5-3ubuntu0.4
1
slagattollas/weatherservice-practica:latest68e7f56393fc
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
smailkoz/torrserver:1.0.1117b52d15de8f0
expat@2.4.3-r0
2.4.4-r0
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
expat@2.2.9-r1
2.2.10-r1
1
stashapp/stash:latest24dbd7607174
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
statcan/ckan:2.93921305425b8
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
temporalio/admin-tools:1.15.135034611d981
expat@2.2.10-r1
2.2.10-r3
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
timescale/timescaledb-postgis:latest-pg127758704d4a14
expat@2.2.10-r1
2.2.10-r3
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
tobiasbp/db-backup:0.0.314bee6e33a26
expat@2.2.9-r1
2.2.10-r1
1
tomsquest/docker-radicale:3.1.1.04759cc353a1d
expat@2.4.3-r0
2.4.4-r0
1
tpdock/freeradius:2.2.93da600c95a49
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
trafex/php-nginx:2.4.07282edfca2bf
expat@2.4.3-r0
2.4.4-r0
1
trafex/php-nginx:2.2.0ee0b7c6cce07
expat@2.4.1-r0
2.4.4-r0
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
expat@2.2.10-r1
2.2.10-r3
1
tvanro/prerender-alpine:6.4.06909015f0328
expat@2.4.1-r0
2.4.4-r0
1
tzahi12345/youtubedl-material:4.23720b856bd2f
expat@2.2.9-r1
2.2.10-r1
1
untergeek/curator:5.8.4468123bc0a7b
expat@2.2.10-r1
2.2.10-r3
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
expat@2.2.9-r1
2.2.10-r1
1
vexorian/dizquetv:1.4.37e2b99844a5c
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
expat@2.2.9-r1
2.2.10-r1
1
voltha/voltha-cli:1.6.0c4e41e92f046
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
voltha/voltha-envoy:1.6.059ab2a00f712
expat@2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.4+esm4
1
voltha/voltha-netconf:1.6.037f80524c207
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
voltha/voltha-onos:5.1.8e038acb950d3
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
voltha/voltha-tester:1.7.0655c3048a602
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5+esm2
1
voltha/voltha-voltha:1.6.0ff596b62de59
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
wallabag/wallabag:2.4.25e4c26a7fb4a
expat@2.2.9-r1
2.2.10-r1
1
wavefronthq/proxy:9.2d1064d28f6eb
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
wener/samba:4.13.39a42bae466d4
expat@2.2.10-r1
2.2.10-r3
1
woojoong/wowza:latestec230db19652
expat@2.2.5-3
2.2.5-3ubuntu0.4
1
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
expat@2.4.1-r0
2.4.4-r0
1
yuzutech/kroki-bpmn:0.16.0bd629239a64e
expat@2.4.1-r0
2.4.4-r0
1
yuzutech/kroki-excalidraw:0.16.015c9eef47a62
expat@2.4.1-r0
2.4.4-r0
1
yuzutech/kroki-mermaid:0.16.07acc8fe7caba
expat@2.4.1-r0
2.4.4-r0
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.