StackRadar

CVE-2023-52426

Medium

Advisory

Published 4 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
550
of 17,787 indexed, latest versions
Container images
547
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 550 of 17,787 indexed charts deploy, on 547 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3no fix listed390
expatapk2.4.8-r0, 2.4.9-r0, 2.5.0-r0, 2.5.0-r1+1 more2.6.0-r0157
OSV records
ALPINE-CVE-2023-52426DEBIAN-CVE-2023-52426

Charts affected

550 by stars
ChartLatestAffected imagesRadar Score
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

13,738
podsyncmy0nVerified publisher1.5.41 of 2See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
tdeutsch/podsync:v2.4.2b67186f4c9a5
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

2,059
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,039
opencatalogiopencatalogi1.0.63 of 8See more

opencatalogi opencatalogi 1.0.6

3 of the 8 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
expat@2.5.0-r1
2.6.0-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
no fix listed

Open the chart page →

14,838
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

22,420
traefik-errorspascaliskeVerified publisher4.0.01 of 1See more

traefik-errors pascaliske 4.0.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

1,271
unboundpascaliskeVerified publisher2.0.01 of 1See more

unbound pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

1,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,883
platformplatform0.0.131 of 1See more

platform platform 0.0.13

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
fluidtrendslab/platform:latestbf49de7a4100
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

812
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

31,844
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,158
qrcode-generatorqrcode-generatorVerified publisher0.1.01 of 1See more

qrcode-generator qrcode-generator 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
felipecs8/qrcode-generator:v1d5f4f17cb066
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

1,883
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,482
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,740
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

38,107
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

4,052
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

16,449
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
expat@2.5.0-1+deb12u1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

11,532
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
expat@2.5.0-r2
2.6.0-r0

Open the chart page →

7,685
smarter-demosmarterOfficialVerified publisher0.1.51 of 7See more

smarter-demo smarter 0.1.5

1 of the 7 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/pulseaudio:v0.0.4becfd364355b
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

45,832
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
expat@2.5.0-r1
2.6.0-r0

Open the chart page →

14,491
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
expat@2.5.0-1
no fix listed

Open the chart page →

5,676
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,380
hlf-k8ssubstraVerified publisher10.2.41 of 7See more

hlf-k8s substra 10.2.4

1 of the 7 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

12,006
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
expat@2.5.0-1+deb12u2
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

18,075
jenkinstestchart0.1.92 of 2See more

jenkins testchart 0.1.9

2 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed
kiwigrid/k8s-sidecar:1.24.44138bea678f0
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

9,102
jenkinstest-jenkins9.1.02 of 2See more

jenkins test-jenkins 9.1.0

2 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed
kiwigrid/k8s-sidecar:1.24.44138bea678f0
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

9,102
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

12,581
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
library/rabbitmq:3.8-management-alpinec3e526769bfd
expat@2.4.8-r0
2.6.0-r0
taigaio/taiga-front:latest570c8792ce80
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

9,148
phonebook-chartusuladamsVerified publisher0.1.52 of 3See more

phonebook-chart usuladams 0.1.5

2 of the 3 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
expat@2.5.0-r0
2.6.0-r0
paulkellerman/webserver-app:latest5a37b74f61b9
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

3,176
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,249
sysbindingswallarmOfficialVerified publisher0.9.91 of 1See more

sysbindings wallarm 0.9.9

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
wallarm/sysbindings:v0.9.9c527865df85d
expat@2.4.8-r0
2.6.0-r0

Open the chart page →

657
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,595
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,028
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,922
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

12,473
airports-frontendairports-frontend0.1.01 of 1See more

airports-frontend airports-frontend 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
daniacobext/airports-frontend:latest9eae4d39fc33
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

1,271
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,324
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

27,274
anchore-admission-controlleranchore-charts0.8.51See more

anchore-admission-controller anchore-charts 0.8.5

1 container image this version deploys carries CVE-2023-52426.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
expat@2.5.0-1
no fix listed

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,239
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

3,991
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
expat@2.5.0-1
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
expat@2.5.0-1
no fix listed

Open the chart page →

25,669
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-rabbitmq:1.0.0e9ce2608f799
expat@2.4.8-r0
2.6.0-r0

Open the chart page →

19,745
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

40,238

Container images carrying it

547 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2023-52426.

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.