StackRadar

CVE-2024-28757

High

Advisory

Published 10 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
993
of 17,781 indexed, latest versions
Container images
932
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Bug Fix Advisory: expat bug fix and enhancement update

Carried by container images the latest versions of 993 of 17,781 indexed charts deploy, on 932 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+19 more2.4.7-1ubuntu0.3757
expatapk2.4.8-r0, 2.4.9-r0, 2.5.0-r0, 2.5.0-r1+3 more2.6.2-r0169
expatrpm2.4.9-1.el9_1, 2.5.0-1.el90:2.5.0-2.el9_46
OSV records
ALPINE-CVE-2024-28757CGA-qq99-7c35-c8prDEBIAN-CVE-2024-28757RHBA-2024:2518UBUNTU-CVE-2024-28757
Also known as
CGA-vwc4-9f37-2f99, USN-6694-1

Charts affected

993 by stars
ChartLatestAffected imagesRadar Score
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
expat@2.4.8-r0
2.6.2-r0

Open the chart page →

8,608
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
expat@2.2.5-3ubuntu0.2
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
expat@2.2.9-1ubuntu0.6
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

22,568
assemblylineassemblylineVerified publisher7.4.174 of 12See more

assemblyline assemblyline 7.4.17

4 of the 12 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
expat@2.5.0-1+deb12u3
no fix listed
cccs/assemblyline-rust:4.7.4.stable17468326853ec5
expat@2.5.0-1+deb12u3
no fix listed
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
expat@2.5.0-1+deb12u3
no fix listed
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

12,898
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
expat@2.5.0-r0
2.6.2-r0

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
expat@2.5.0-r0
2.6.2-r0

Open the chart page →

77,706
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
expat@2.4.7-1
2.4.7-1ubuntu0.3

Open the chart page →

10,061
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
assistiot/open_api_kong:1.0.03fe850384689
expat@2.4.9-r0
2.6.2-r0

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
expat@2.5.0-r1
2.6.2-r0
assistiot/resource-provisioning_im:1.0.0a942dc14030a
expat@2.5.0-r2
2.6.2-r0

Open the chart page →

8,032
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,936
semantic-translationassist-iot-semantic-translation1.0.11 of 1See more

semantic-translation assist-iot-semantic-translation 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/semantic_translation:latest2a2587804717
expat@2.5.0-r1
2.6.2-r0

Open the chart page →

505
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
expat@2.5.0-1
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
expat@2.5.0-1
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
expat@2.5.0-1
no fix listed

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
expat@2.5.0-1
no fix listed

Open the chart page →

32,501
phonebook-chartasumankamberoglu0.1.52 of 3See more

phonebook-chart asumankamberoglu 0.1.5

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
expat@2.5.0-r0
2.6.2-r0
paulkellerman/webserver-app:latest5a37b74f61b9
expat@2.5.0-r0
2.6.2-r0

Open the chart page →

3,176
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
expat@2.5.0-1
no fix listed

Open the chart page →

9,412
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
expat@2.4.8-r0
2.6.2-r0

Open the chart page →

5,074
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
expat@2.5.0-1
no fix listed

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

18,344
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
expat@2.5.0-r1
2.6.2-r0

Open the chart page →

956
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
expat@2.5.0-r1
2.6.2-r0

Open the chart page →

1,516
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
expat@2.4.8-r0
2.6.2-r0

Open the chart page →

4,568
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
expat@2.5.0-1
no fix listed

Open the chart page →

6,297
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
expat@2.2.9-1ubuntu0.4
no fix listed
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
expat@2.2.9-1ubuntu0.4
no fix listed
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

20,671
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,956
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,145
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

13,459
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
expat@2.5.0-1+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

26,996
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,220
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
library/cassandra:3.11.65aa8400b4b3b
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

19,229
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
expat@2.5.0-1
no fix listed

Open the chart page →

8,323
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

27,274
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
pagesbrixton-pages1.0.02 of 3See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

14,352
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,869
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
expat@2.6.0-r0
2.6.2-r0

Open the chart page →

1,497
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,629
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,001
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
expat@2.2.9-1build1
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
expat@2.2.9-1build1
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
expat@2.2.9-1build1
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
expat@2.2.9-1build1
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
expat@2.2.9-1build1
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
expat@2.2.9-1build1
no fix listed

Open the chart page →

88,335
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,311
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,039
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
expat@2.2.5-3ubuntu0.7
no fix listed

Open the chart page →

6,143
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

14,130
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28757.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190

Container images carrying it

932 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
expat@2.2.9-1build1
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
expat@2.2.9-1build1
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
expat@2.2.9-1build1
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
expat@2.2.9-1build1
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
expat@2.2.9-1build1
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
expat@2.2.9-1build1
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
no fix listed
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
expat@2.5.0-1
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
expat@2.2.9-1build1
no fix listed
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
expat@2.2.9-1ubuntu0.4
no fix listed
2
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
expat@2.5.0-r0
2.6.2-r0
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
expat@2.5.0-r0
2.6.2-r0
2
krtk6160/galoy-nostrcc82a694f818
expat@2.5.0-r0
2.6.2-r0
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
expat@2.5.0-r0
2.6.2-r0
2
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed
2
library/cassandra:3.11.65aa8400b4b3b
expat@2.2.5-3ubuntu0.2
no fix listed
2
library/cassandra:4.1.37cbcec0086ac
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
2
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
no fix listed
2
library/python:3.7eedf63967cdb
expat@2.5.0-1
no fix listed
2
library/python:3.7-alpinef3d31c8677d0
expat@2.5.0-r1
2.6.2-r0
2
library/rabbitmq:3.12.1-managementf020c06da226
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
expat@2.5.0-1+deb12u2
no fix listed
2
mbentley/omada-controller:4.3f4e682274bed
expat@2.2.5-3ubuntu0.9
no fix listed
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
expat@2.2.9-1build1
no fix listed
2
metabase/metabase:v0.45.21fb334ce4820
expat@2.5.0-r0
2.6.2-r0
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
no fix listed
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
expat@2.2.9-1ubuntu0.4
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
2
opea/embedding-tei:1.05c9639de61c1
expat@2.5.0-1
no fix listed
2
opea/reranking-tei:1.0e48613afb191
expat@2.5.0-1
no fix listed
2
opea/retriever-redis:1.0eb746b263705
expat@2.5.0-1
no fix listed
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
no fix listed
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
no fix listed
2
organizr/organizr:latest1ce319d73cdf
expat@2.5.0-r1
2.6.2-r0
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
2.4.7-1ubuntu0.3
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
no fix listed
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.3
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.