StackRadar

CVE-2023-52426

Medium

Advisory

Published 4 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
553
of 17,787 indexed, latest versions
Container images
554
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 553 of 17,787 indexed charts deploy, on 554 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3no fix listed397
expatapk2.4.8-r0, 2.4.9-r0, 2.5.0-r0, 2.5.0-r1+1 more2.6.0-r0157
OSV records
ALPINE-CVE-2023-52426DEBIAN-CVE-2023-52426

Charts affected

553 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
expat@2.4.8-r0
2.6.0-r0

Open the chart page →

7,972
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
expat@2.5.0-r1
2.6.0-r0

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
expat@2.5.0-r0
2.6.0-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

5,847

Container images carrying it

554 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
supabase/realtime:v2.102.3aa1c92c0cf32
expat@2.5.0-1+deb12u2
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
expat@2.5.0-1+deb12u1
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
expat@2.5.0-1+deb12u2
no fix listed
1
supabase/studio:latest94a2a9d2906e
expat@2.5.0-1+deb12u3
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
expat@2.5.0-1
no fix listed
1
swaggerapi/swagger-ui:v5.6.2342808e22de4
expat@2.5.0-r1
2.6.0-r0
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
expat@2.5.0-1+deb12u3
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
expat@2.5.0-1+deb12u1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
expat@2.5.0-1+deb12u1
no fix listed
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
expat@2.5.0-r0
2.6.0-r0
1
teknas09/bird-pod:latest12a1fa85c4aa
expat@2.5.0-1
no fix listed
1
temporalio/admin-tools:1.22.4258958fe2ff2
expat@2.5.0-r1
2.6.0-r0
1
temporalio/admin-tools:1.22.0836af062af30
expat@2.5.0-r1
2.6.0-r0
1
theradius/loggia:0.463ba348546ec
expat@2.5.0-1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
expat@2.5.0-1+deb12u2
no fix listed
1
thirtythreeforty/neolink:latestf564c4f538de
expat@2.5.0-r1
2.6.0-r0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
expat@2.5.0-r1
2.6.0-r0
1
thongngo3301/stakefish:latesta341af5976e3
expat@2.5.0-1
no fix listed
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
expat@2.5.0-r0
2.6.0-r0
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
expat@2.5.0-1+deb12u1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
expat@2.5.0-1+deb12u1
no fix listed
1
untergeek/curator:8.0.4de5197f06c3c
expat@2.5.0-r0
2.6.0-r0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
expat@2.5.0-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
expat@2.5.0-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
expat@2.5.0-1
no fix listed
1
wallarm/sysbindings:v0.9.9c527865df85d
expat@2.4.8-r0
2.6.0-r0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
expat@2.5.0-1+deb12u2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
expat@2.5.0-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
expat@2.5.0-1
no fix listed
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
expat@2.5.0-r1
2.6.0-r0
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
expat@2.5.0-r0
2.6.0-r0
1
zurdi15/romm:2.3.12db88fe44c89
expat@2.5.0-r0
2.6.0-r0
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
expat@2.5.0-r1
2.6.0-r0
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
expat@2.5.0-1
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
expat@2.5.0-1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
expat@2.5.0-r1
2.6.0-r0
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
expat@2.5.0-1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
expat@2.5.0-1+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.