StackRadar

CVE-2023-52426

Medium

Advisory

Published 4 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
553
of 17,781 indexed, latest versions
Container images
553
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 553 of 17,781 indexed charts deploy, on 553 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3no fix listed396
expatapk2.4.8-r0, 2.4.9-r0, 2.5.0-r0, 2.5.0-r1+1 more2.6.0-r0157
OSV records
ALPINE-CVE-2023-52426DEBIAN-CVE-2023-52426

Charts affected

553 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
expat@2.4.8-r0
2.6.0-r0

Open the chart page →

7,972
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
expat@2.5.0-r1
2.6.0-r0

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-52426.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
expat@2.5.0-r0
2.6.0-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
expat@2.5.0-r0
2.6.0-r0

Open the chart page →

5,846

Container images carrying it

553 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed
5
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed
5
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
expat@2.5.0-r1
2.6.0-r0
5
hyperledger/fabric-tools:2.4b1194f509085
expat@2.5.0-r0
2.6.0-r0
4
library/nginx:1.27.1287ff321f9e3
expat@2.5.0-1+deb12u1
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
expat@2.5.0-1
no fix listed
4
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
expat@2.5.0-1
no fix listed
3
library/node:ltsbe23f54a88d3
expat@2.5.0-1+deb12u2
no fix listed
3
paulkellerman/resultserver-app:1.0381eeccb0618
expat@2.5.0-r0
2.6.0-r0
3
paulkellerman/webserver-app:latest5a37b74f61b9
expat@2.5.0-r0
2.6.0-r0
3
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
expat@2.5.0-r0
2.6.0-r0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
expat@2.5.0-r1
2.6.0-r0
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed
3
quay.io/devtron/svn-git-sync:v78e54bc2d261f
expat@2.4.8-r0
2.6.0-r0
3
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
expat@2.5.0-r0
2.6.0-r0
2
apache/druid:37.0.00116fb802786
expat@2.5.0-1+deb12u2
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
expat@2.5.0-1
no fix listed
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
expat@2.5.0-r1
2.6.0-r0
2
cs3org/wopiserver:v9.4.202a9e78757b4
expat@2.5.0-r0
2.6.0-r0
2
daniacobext/airports-frontend:latest9eae4d39fc33
expat@2.5.0-r0
2.6.0-r0
2
devopsjourney1/mywebapp:latestbd1ec6838570
expat@2.4.8-r0
2.6.0-r0
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
no fix listed
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
expat@2.5.0-1
no fix listed
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
expat@2.5.0-r0
2.6.0-r0
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
expat@2.5.0-r0
2.6.0-r0
2
krtk6160/galoy-nostrcc82a694f818
expat@2.5.0-r0
2.6.0-r0
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
expat@2.5.0-r0
2.6.0-r0
2
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed
2
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
no fix listed
2
library/python:3.7eedf63967cdb
expat@2.5.0-1
no fix listed
2
library/python:3.7-alpinef3d31c8677d0
expat@2.5.0-r1
2.6.0-r0
2
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
expat@2.5.0-1+deb12u2
no fix listed
2
metabase/metabase:v0.45.21fb334ce4820
expat@2.5.0-r0
2.6.0-r0
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
no fix listed
2
opea/embedding-tei:1.05c9639de61c1
expat@2.5.0-1
no fix listed
2
opea/reranking-tei:1.0e48613afb191
expat@2.5.0-1
no fix listed
2
opea/retriever-redis:1.0eb746b263705
expat@2.5.0-1
no fix listed
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.