StackRadar

CVE-2024-50602

Medium

Advisory

Published 27 Oct 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,286
of 17,787 indexed, latest versions
Container images
1,293
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,286 of 17,787 indexed charts deploy, on 1,293 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.1.0-4ubuntu1.4+esm10, 2.1.0-7ubuntu0.16.04.5+esm10, 2.2.5-3ubuntu0.9+esm2, 2.2.9-1ubuntu0.8+4 more938
expatapk2.5.0-r0, 2.5.0-r1, 2.5.0-r2, 2.5.0-r4+3 more2.6.4-r0220
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+14 more0:2.2.5-16.el8_10, 0:2.5.0-2.el9_4.2, 0:2.5.0-3.el9_5.1134
pythonbitnami3.11.11-0, 3.12.8-03.9.212
python-3.12apk3.12.0-r13.12.8-r01
OSV records
ALPINE-CVE-2024-50602BIT-python-2024-50602CGA-8hv9-chc6-m8mcCGA-h7g8-992h-qr83DEBIAN-CVE-2024-50602RHSA-2024:11200RHSA-2024:9502RHSA-2024:9541UBUNTU-CVE-2024-50602DLA-4145-1RLSA-2024:9502
Also known as
BIT-libpython-2024-50602, BIT-python-min-2024-50602, CGA-rf44-r3rp-vh3g, CGA-rmvw-44qh-5jcf, RHSA-2025:3350, USN-7145-1

Charts affected

1,286 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

6,597
airflowairflow-helmVerified publisher8.9.02 of 4See more

airflow airflow-helm 8.9.0

2 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
2.5.0-1+deb12u2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

11,372
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
expat@2.2.5-4.el8_5.3
0:2.2.5-16.el8_10

Open the chart page →

7,713
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
expat@2.4.7-1
2.4.7-1ubuntu0.5

Open the chart page →

9,194
milvusmilvus4.0.312 of 5See more

milvus milvus 4.0.31

2 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
expat@2.2.5-10.el8_7.1
0:2.2.5-16.el8_10

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

10,648
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

6,949
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm10
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm10

Open the chart page →

23,992
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

19,998
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
expat@2.4.7-1
2.4.7-1ubuntu0.5
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
expat@2.4.7-1
2.4.7-1ubuntu0.5

Open the chart page →

33,907
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

3,700
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

6,550
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

6,012
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

12,830
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
expat@2.6.1-2build1
2.6.1-2ubuntu0.2

Open the chart page →

3,422
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

15,607
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8

Open the chart page →

7,917
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

6,040
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
expat@2.2.5-4.el8
0:2.2.5-16.el8_10

Open the chart page →

6,853
docker-mailserverdocker-mailserver0.4.01 of 2See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
mailserver/docker-mailserver:11.0.0e0809756dc96
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

1,382
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
expat@2.2.5-11.el8
0:2.2.5-16.el8_10
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

11,971
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

4,854
milvusmilvus-helm5.0.281 of 4See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.5

Open the chart page →

10,764
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8

Open the chart page →

18,570
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

6,675
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

14,615
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

3,004
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2api:3.86f56d239d280
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2auth:3.833ecfda16608
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2notifier:3.8f190a6212195
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2rulesengine:3.8259503496ff9
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2scheduler:3.8b1de2055c362
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2sensorcontainer:3.8b1a338f64773
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2stream:3.81c8904a3bf67
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2timersengine:3.81bf35bfaf00c
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
stackstorm/st2workflowengine:3.819fdfffdbba8
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8

Open the chart page →

96,984
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
supabase/storage-api:v1.12.0f983fb50bd95
expat@2.6.3-r0
2.6.4-r0
supabase/studio:20241021-9f9b08326d8070c55e9
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

23,263
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

8,530
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

3,004
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

4,167
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

7,896
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
expat@2.2.10-2+deb11u6
2.2.10-2+deb11u7

Open the chart page →

2,667
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

4,285
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
expat@2.2.9-1build1
2.2.9-1ubuntu0.8

Open the chart page →

11,453
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

4,281
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

2,572
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

31,447
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
expat@2.6.3-r0
2.6.4-r0

Open the chart page →

23,289
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.2

Open the chart page →

3,434
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

17,306
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

6,047
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5

Open the chart page →

14,276
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
2.2.9-1ubuntu0.8

Open the chart page →

11,831
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
expat@2.2.9-1build1
2.2.9-1ubuntu0.8

Open the chart page →

30,811
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

6,484
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

9,868
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8

Open the chart page →

12,163

Container images carrying it

1,293 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
expat@2.6.0-r0
2.6.4-r0
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
expat@2.6.0-r0
2.6.4-r0
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
expat@2.2.10-2
2.2.10-2+deb11u7
1
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
expat@2.6.3-r0
2.6.4-r0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
expat@2.5.0-r2
2.6.4-r0
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
expat@2.5.0-r2
2.6.4-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-frauddetectionservice77cefdab4d5c
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm2
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
expat@2.6.3-r0
2.6.4-r0
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
expat@2.5.0-2.el9_4
0:2.5.0-2.el9_4.2
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
expat@2.2.10-2
2.2.10-2+deb11u7
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.