CVE-2022-40674

High

Advisory

Published 14 Sept 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.022; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 854; of 17,787 indexed, latest versions
Container images: 772; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 772 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+16 more	2.1.0-4ubuntu1.4+esm7, 2.1.0-7ubuntu0.16.04.5+esm6, 2.2.5-3ubuntu0.8, 2.2.6-2+deb10u5+3 more	548
expatapk	2.2.10-r1, 2.2.10-r2, 2.2.10-r6, 2.4.1-r0+5 more	2.2.10-r7, 2.4.9-r0	128
expatrpm	2.1.0-10.el7_3, 2.1.0-11.el7, 2.1.0-12.el7, 2.1.0-14.el7_9+8 more	0:2.1.0-15.el7_9, 0:2.2.5-3.el8_1.2, 0:2.2.5-3.el8_2.3, 0:2.2.5-4.el8_4.4+2 more	96

OSV records: ALPINE-CVE-2022-40674 RHSA-2022:6831 RHSA-2022:6832 RHSA-2022:6833 RHSA-2022:6834 RHSA-2022:6878 UBUNTU-CVE-2022-40674 DLA-3119-1 DSA-5236-1 SUSE-SU-2022:3597-1
Also known as: USN-5638-1, USN-5638-2, USN-5638-4

Charts affected

854 by stars

Chart

Latest

Affected images

Radar Score

rawfile-csiymatrix

0.2.1

1 of 4 See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2022-40674.

Container image	Digest	Package	Fixed in
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	expat@2.4.8-r0	2.4.9-r0

Open the chart page →

7,972

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-40674.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-40674.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-40674.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5

Open the chart page →

1,636

Container images carrying it

772 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
altinity/clickhouse-operator :0.16.1	db7dde971407	expat@2.1.0-12.el7	0:2.1.0-15.el7_9	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	expat@2.1.0-12.el7	0:2.1.0-15.el7_9	1
amagdi888/my-repo :hello-app	d8a10fc8faf6	expat@2.4.8-r0	2.4.9-r0	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
amundsendev/amundsen-metadata :2.5.4	4d98eb21f5f9	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
amundsendev/amundsen-search :2.4.0	99dda9502c3e	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	expat@2.2.5-4.el8	0:2.2.5-4.el8_4.4	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	expat@2.2.5-3.el8	0:2.2.5-3.el8_1.2	1
anonaddy/anonaddy :0.12.3	957a95565166	expat@2.4.8-r0	2.4.9-r0	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	expat@2.2.10-r2	2.2.10-r7	1
apache/drill :1.21.1	1f96558fd292	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
apache/iotdb :0.13.3-node	afa47bf1692a	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.5	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
apachepulsar/pulsar :2.9.0	d056c89b7131	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
apachepulsar/pulsar :2.8.2	d538416d5afe	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	expat@2.4.7-1	2.4.7-1ubuntu0.1	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
apache/skywalking-ui :9.2.0	295f1dc87d98	expat@2.4.7-1	2.4.7-1ubuntu0.1	1
apache/skywalking-ui :8.9.1	80530f0308a5	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	expat@2.2.10-2+deb11u2	2.2.10-2+deb11u4	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	expat@2.2.5-4.el8	0:2.2.5-4.el8_4.4	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	expat@2.2.10-r1	2.2.10-r7	1
aquasec/trivy :0.32.0	973d0df16189	expat@2.4.8-r0	2.4.9-r0	1
archish27/python-fastapi-postgres :latest	6610071a2101	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
aroralalit/student-producer :1.0.0	2a094f597b36	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
arturisimo/server-urjc :v1.0	d8dc4430531e	expat@2.2.6-2+deb10u4	2.2.6-2+deb10u5	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
assistiot/authorization_svr :latest	db9361dad79b	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
assistiot/fl_repository :latest	0fce3ea719a5	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
assistiot/fl_training_collector :latest	792715dd3084	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	expat@2.2.5-8.el8_6.2	0:2.2.5-8.el8_6.3	1
assistiot/location_processing :latest	e9bae124095f	expat@2.4.7-1	2.4.7-1ubuntu0.1	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.5	1
atomix/atomix :3.1.12	7738ff4f5c63	expat@2.2.10-2	2.2.10-2+deb11u4	1
azhar008/flaskapplication :latest	a1e827b0adea	expat@2.2.10-2	2.2.10-2+deb11u4	1
badsmoke/wunderground_exporter :0.0.5	c54c004f24cc	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
balihb/block-pvc-scanner :0.2.4	5b95e1cf1158	expat@2.4.3-r0	2.4.9-r0	1
balihb/pod-pvc-mapping :0.2.4	ee48e79f5d76	expat@2.4.3-r0	2.4.9-r0	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	expat@2.2.9-1ubuntu0.2	2.2.9-1ubuntu0.5	1
bbvalabs/sensitive-data :1.0.1	3ea299ae63c0	expat@2.2.10-r1	2.2.10-r7	1
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	expat@2.2.6-2+deb10u4	2.2.6-2+deb10u5	1
bitnamilegacy/kubectl :1.22.13	d0e426ccff33	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1
blockscout/blockscout :5.1.5	c365a8f2dc12	expat@2.4.8-r0	2.4.9-r0	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	expat@2.2.9-1build1	2.2.9-1ubuntu0.5	1