StackRadar

CVE-2022-43680

High

Advisory

Published 24 Oct 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
868
of 17,781 indexed, latest versions
Container images
774
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 868 of 17,781 indexed charts deploy, on 774 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+18 more2.1.0-4ubuntu1.4+esm7, 2.1.0-7ubuntu0.16.04.5+esm7, 2.2.5-3ubuntu0.8, 2.2.6-2+deb10u6+3 more559
expatapk2.2.10-r1, 2.2.10-r2, 2.2.10-r6, 2.4.1-r0+6 more2.2.10-r8, 2.5.0-r0137
expatrpm2.2.5-3.6.1, 2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8+8 more0:2.2.5-10.el8_7.1, 0:2.4.9-1.el9_1.1, 2.2.5-150000.3.25.178
OSV records
ALPINE-CVE-2022-43680RHSA-2023:0103RHSA-2023:0337UBUNTU-CVE-2022-43680DLA-3165-1DSA-5266-1SUSE-SU-2022:3912-1
Also known as
RHSA-2024:0421, USN-5638-2, USN-5638-3, USN-5638-4

Charts affected

868 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
expat@2.2.5-4.el8_5.3
0:2.2.5-10.el8_7.1

Open the chart page →

7,713
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u6

Open the chart page →

5,919
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
expat@2.4.7-1
2.4.7-1ubuntu0.2

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

32,259
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm7
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm7

Open the chart page →

23,964
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
expat@2.4.7-1
2.4.7-1ubuntu0.2
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
expat@2.4.7-1
2.4.7-1ubuntu0.2

Open the chart page →

33,725
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
expat@2.4.4-r0
2.5.0-r0

Open the chart page →

7,705
openldaphelm-openldapVerified publisher2.0.42 of 3See more

openldap helm-openldap 2.0.4

2 of the 3 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u6

Open the chart page →

6,219
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.8

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.6

Open the chart page →

7,880
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
expat@2.2.5-4.el8
0:2.2.5-10.el8_7.1

Open the chart page →

6,854
docker-mailserverdocker-mailserver0.4.01 of 2See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
mailserver/docker-mailserver:11.0.0e0809756dc96
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5

Open the chart page →

1,382
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.6

Open the chart page →

18,509
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

5,851
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

11,405
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

4,577
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
namshi/smtp:latestaa63b8de68ce
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

30,326
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5

Open the chart page →

6,048
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

11,782
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

30,668
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
expat@2.2.10-2
2.2.10-2+deb11u5

Open the chart page →

3,543
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
expat@2.2.6-2+deb10u4
2.2.6-2+deb10u6

Open the chart page →

4,515
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
nyurik/alpine-python3-requests:lateste0553236e3eb
expat@2.4.1-r0
2.5.0-r0

Open the chart page →

14,238
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
expat@2.4.7-r0
2.5.0-r0

Open the chart page →

5,251
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
ceticasbl/pg-ldap-sync:latest6c0aa7567145
expat@2.2.6-2
2.2.6-2+deb10u6
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.152 of 2See more

backstage deliveryhero 0.1.15

2 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
expat@2.2.10-r1
2.2.10-r8

Open the chart page →

5,946
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
guacamole/guacd:1.1.02288530a4d1c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

4,839
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
expat@2.2.5-10.el8
0:2.2.5-10.el8_7.1

Open the chart page →

4,652
kubeflowkubeflow1.6.26 of 45See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.8
kserve/models-web-app:v0.8.063ea05e73842
expat@2.2.6-2+deb10u4
2.2.6-2+deb10u6
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
expat@2.2.6-2+deb10u5
2.2.6-2+deb10u6
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
expat@2.2.6-2+deb10u5
2.2.6-2+deb10u6
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
expat@2.2.6-2+deb10u5
2.2.6-2+deb10u6
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5

Open the chart page →

96,941
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

1,746
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
expat@2.2.10-2
2.2.10-2+deb11u5

Open the chart page →

1,841
taigarc-helm-charts0.1.02 of 7See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
expat@2.2.10-2
2.2.10-2+deb11u5
taigaio/taiga-protected:6.4.036318831b3e7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

7,255
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
expat@2.4.1-r0
2.5.0-r0
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
expat@2.4.1-r0
2.5.0-r0

Open the chart page →

8,698
k8s-telegram-sendertelegram-senderVerified publisher0.0.11 of 1See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
danuk/telegram-sender:0.0.1026560388070
expat@2.2.10-2+deb11u4
2.2.10-2+deb11u5

Open the chart page →

3,048
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
expat@2.2.10-r2
2.2.10-r8

Open the chart page →

4,019
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
expat@2.2.5-3.el8_2.3
0:2.2.5-10.el8_7.1

Open the chart page →

9,052
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
expat@2.2.10-r1
2.2.10-r8

Open the chart page →

4,605
ecr-proxyevryfs-ossVerified publisher0.2.91 of 1See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
expat@2.4.7-r0
2.5.0-r0

Open the chart page →

1,523
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
expat@2.2.5-8.el8_6.3
0:2.2.5-10.el8_7.1

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
expat@2.2.5-8.el8_6.3
0:2.2.5-10.el8_7.1

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
expat@2.2.5-8.el8_6.3
0:2.2.5-10.el8_7.1

Open the chart page →

13,874
audiobookshelfgeek-cookbookVerified publisher1.2.21 of 1See more

audiobookshelf geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
expat@2.4.7-r0
2.5.0-r0

Open the chart page →

1,959
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.8

Open the chart page →

22,773
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6

Open the chart page →

3,717
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
2.2.9-1ubuntu0.6

Open the chart page →

10,598
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-43680.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5

Open the chart page →

7,579

Container images carrying it

774 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.8
1
alpine/k8s:1.22.600ac10bcb759
expat@2.4.7-r0
2.5.0-r0
1
alpine/k8s:1.18.16a41efe02a041
expat@2.4.1-r0
2.5.0-r0
1
amagdi888/my-repo:hello-appd8a10fc8faf6
expat@2.4.8-r0
2.5.0-r0
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
amundsendev/amundsen-search:2.4.099dda9502c3e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
anchore/anchore-engine:v0.10.0bde9eedf639d
expat@2.2.5-4.el8
0:2.2.5-10.el8_7.1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
expat@2.2.5-3.el8
0:2.2.5-10.el8_7.1
1
anonaddy/anonaddy:0.12.3957a95565166
expat@2.4.8-r0
2.5.0-r0
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
expat@2.2.10-r2
2.2.10-r8
1
apache/camel-k:1.10.43bb13d14f64a
expat@2.2.5-8.el8_6.3
0:2.2.5-10.el8_7.1
1
apache/drill:1.21.11f96558fd292
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.6
1
apachepinot/pinot:latest-jdk110018bb04ced7
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
1
apachepulsar/pulsar:2.6.14db6ff0b4045
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.2
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.2
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.6
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
expat@2.2.10-2+deb11u2
2.2.10-2+deb11u5
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
expat@2.2.5-4.el8
0:2.2.5-10.el8_7.1
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
expat@2.2.10-r1
2.2.10-r8
1
aquasec/trivy:0.32.0973d0df16189
expat@2.4.8-r0
2.5.0-r0
1
archish27/python-fastapi-postgres:latest6610071a2101
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1
aroralalit/student-producer:1.0.02a094f597b36
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1
arturisimo/server-urjc:v1.0d8dc4430531e
expat@2.2.6-2+deb10u4
2.2.6-2+deb10u6
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
assistiot/authorization_svr:latestdb9361dad79b
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1
assistiot/fl_repository:latest0fce3ea719a5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
assistiot/fl_training_collector:latest792715dd3084
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
assistiot/identity-manager_kc:latest0df4b4fa899a
expat@2.2.5-8.el8_6.2
0:2.2.5-10.el8_7.1
1
assistiot/location_processing:lateste9bae124095f
expat@2.4.7-1
2.4.7-1ubuntu0.2
1
assistiot/open_api_kong:1.0.03fe850384689
expat@2.4.9-r0
2.5.0-r0
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.6
1
atomix/atomix:3.1.127738ff4f5c63
expat@2.2.10-2
2.2.10-2+deb11u5
1
azhar008/flaskapplication:latesta1e827b0adea
expat@2.2.10-2
2.2.10-2+deb11u5
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
balihb/block-pvc-scanner:0.2.45b95e1cf1158
expat@2.4.3-r0
2.5.0-r0
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
expat@2.4.3-r0
2.5.0-r0
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.6
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
expat@2.2.10-r1
2.2.10-r8
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u6
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
expat@2.2.6-2+deb10u4
2.2.6-2+deb10u6
1
bitnamilegacy/kubectl:1.22.13d0e426ccff33
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.