StackRadar

CVE-2022-23852

Critical

Advisory

Published 24 Jan 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.046
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
401
of 17,781 indexed, latest versions
Container images
329
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 401 of 17,781 indexed charts deploy, on 329 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+5 more2.1.0-4ubuntu1.4+esm4, 2.1.0-7ubuntu0.16.04.5+esm2, 2.2.5-3ubuntu0.4, 2.2.9-1ubuntu0.2163
expatapk2.2.9-r1, 2.2.10-r0, 2.2.10-r1, 2.2.10-r2+2 more2.2.10-r1, 2.2.10-r3, 2.4.4-r0146
expatrpm2.2.5-4.el80:2.2.5-4.el8_4.320
OSV records
ALPINE-CVE-2022-23852RHSA-2022:4834UBUNTU-CVE-2022-23852
Also known as
USN-5288-1

Charts affected

401 by stars
ChartLatestAffected imagesRadar Score
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-23852.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
expat@2.4.1-r0
2.4.4-r0

Open the chart page →

2,534

Container images carrying it

329 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm2
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
expat@2.4.1-r0
2.4.4-r0
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
expat@2.4.1-r0
2.4.4-r0
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
expat@2.4.1-r0
2.4.4-r0
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
expat@2.2.9-r1
2.2.10-r1
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.3
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
1
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
expat@2.2.10-r1
2.2.10-r3
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
2.2.9-1ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.