StackRadar

CVE-2022-40674

High

Advisory

Published 14 Sept 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.022
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
772
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 772 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+16 more2.1.0-4ubuntu1.4+esm7, 2.1.0-7ubuntu0.16.04.5+esm6, 2.2.5-3ubuntu0.8, 2.2.6-2+deb10u5+3 more548
expatapk2.2.10-r1, 2.2.10-r2, 2.2.10-r6, 2.4.1-r0+5 more2.2.10-r7, 2.4.9-r0128
expatrpm2.1.0-10.el7_3, 2.1.0-11.el7, 2.1.0-12.el7, 2.1.0-14.el7_9+8 more0:2.1.0-15.el7_9, 0:2.2.5-3.el8_1.2, 0:2.2.5-3.el8_2.3, 0:2.2.5-4.el8_4.4+2 more96
OSV records
ALPINE-CVE-2022-40674RHSA-2022:6831RHSA-2022:6832RHSA-2022:6833RHSA-2022:6834RHSA-2022:6878UBUNTU-CVE-2022-40674DLA-3119-1DSA-5236-1SUSE-SU-2022:3597-1
Also known as
USN-5638-1, USN-5638-2, USN-5638-4

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2022-40674.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
expat@2.4.8-r0
2.4.9-r0

Open the chart page →

7,972
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-40674.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5

Open the chart page →

1,138
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-40674.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-40674.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5

Open the chart page →

1,636

Container images carrying it

772 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
expat@2.4.7-r0
2.4.9-r0
1
ghcr.io/crazy-max/samba:4.15.5bed6f4ec2e82
expat@2.4.7-r0
2.4.9-r0
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.4
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.4
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.4
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.4
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
expat@2.2.5-4.el8
0:2.2.5-4.el8_4.4
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
expat@2.4.7-r0
2.4.9-r0
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
expat@2.2.10-2
2.2.10-2+deb11u4
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
expat@2.4.8-r0
2.4.9-r0
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
expat@2.2.10-2+deb11u2
2.2.10-2+deb11u4
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.8
1
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
expat@2.2.10-r1
2.2.10-r7
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
expat@2.4.4-r0
2.4.9-r0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
expat@2.2.5-3.el8
0:2.2.5-3.el8_2.3
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/leaf2mqtt:v0.1fc9f5aca6cf4
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
expat@2.4.7-1
2.4.7-1ubuntu0.1
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
expat@2.4.7-1
2.4.7-1ubuntu0.1
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u4
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.5
1
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
expat@2.4.8-r0
2.4.9-r0
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.5
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u5
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
2.2.9-1ubuntu0.5
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
expat@2.2.10-2
2.2.10-2+deb11u4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.