StackRadar

CVE-2024-50602

Medium

Advisory

Published 27 Oct 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,287
of 17,790 indexed, latest versions
Container images
1,293
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,287 of 17,790 indexed charts deploy, on 1,293 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.1.0-4ubuntu1.4+esm10, 2.1.0-7ubuntu0.16.04.5+esm10, 2.2.5-3ubuntu0.9+esm2, 2.2.9-1ubuntu0.8+4 more938
expatapk2.5.0-r0, 2.5.0-r1, 2.5.0-r2, 2.5.0-r4+3 more2.6.4-r0220
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+14 more0:2.2.5-16.el8_10, 0:2.5.0-2.el9_4.2, 0:2.5.0-3.el9_5.1134
pythonbitnami3.11.11-0, 3.12.8-03.9.212
python-3.12apk3.12.0-r13.12.8-r01
OSV records
ALPINE-CVE-2024-50602BIT-python-2024-50602CGA-8hv9-chc6-m8mcCGA-h7g8-992h-qr83DEBIAN-CVE-2024-50602RHSA-2024:11200RHSA-2024:9502RHSA-2024:9541UBUNTU-CVE-2024-50602DLA-4145-1RLSA-2024:9502
Also known as
BIT-libpython-2024-50602, BIT-python-min-2024-50602, CGA-rf44-r3rp-vh3g, CGA-rmvw-44qh-5jcf, RHSA-2025:3350, USN-7145-1

Charts affected

1,287 by stars
ChartLatestAffected imagesRadar Score
metallbkubeblocksVerified publisher0.14.41 of 3See more

metallb kubeblocks 0.14.4

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:9.0.2086acb1278fe
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

2,600
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

9,256
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

4,838
gptchat-api-feishubotkubegemsapp0.1.11 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

8,487
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
expat@2.6.3-r0
2.6.4-r0

Open the chart page →

518
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

4,310
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

4,463
whatsappkubernetes-whatsappVerified publisher0.1.81 of 4See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/python:3.8-alpine3d93b1f77efc
expat@2.6.3-r0
2.6.4-r0

Open the chart page →

1,574
testkube-dashboardkubeshop1.16.71 of 1See more

testkube-dashboard kubeshop 1.16.7

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kubeshop/testkube-dashboard:1.16.748958b4126a4
expat@2.6.0-r0
2.6.4-r0

Open the chart page →

672
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5

Open the chart page →

48,954
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5

Open the chart page →

46,639
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
expat@2.2.9-1build1
2.2.9-1ubuntu0.8

Open the chart page →

14,401
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

1,427
kube-workload-restarterkube-workload-restarterVerified publisher0.0.41 of 1See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
andreacioni/kube-workload-restarter:0.0.242938b310090a
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

1,815
penpotkubitodevVerified publisher1.2.13 of 5See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.5
penpotapp/exporter:2.2.15c835ffd87ab
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.5
penpotapp/frontend:2.2.18974882a0542
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

16,976
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

20,386
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
expat@2.6.1-2build1
2.6.1-2ubuntu0.2

Open the chart page →

3,379
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

16,539
stakitkvalitetsitVerified publisher0.3.113 of 3See more

stakit kvalitetsit 0.3.11

3 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
expat@2.5.0-r0
2.6.4-r0
nginxinc/nginx-unprivilegeddigest-pinned8f14986c54fa
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

7,848
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

4,098
imageboxkyso1.0.01 of 1See more

imagebox kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kyso/imagebox:latest68091eace89c
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

3,835
jupyter-diffkyso1.0.01 of 1See more

jupyter-diff kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kyso/jupyter-diff:latest82299a9e5a86
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

1,173
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

2,766
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

5,333
mock-oidclabs64io-helm-chartsVerified publisher0.1.01 of 1See more

mock-oidc labs64io-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

703
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

26,377
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
expat@2.2.10-2
2.2.10-2+deb11u7

Open the chart page →

3,891
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,242
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,242
qbittorrentnoxleonardo0918000.1.01 of 1See more

qbittorrentnox leonardo091800 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
expat@2.5.0-r2
2.6.4-r0

Open the chart page →

1,118
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

4,058
delugelib42Verified publisher1.3.01 of 1See more

deluge lib42 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lib42/deluge:20c4d1d326f95
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

898
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

4,643
qbittorrentlib42Verified publisher1.0.01 of 1See more

qbittorrent lib42 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

2,166
librenmslibrenms10.1.11 of 5See more

librenms librenms 10.1.1

1 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
crazymax/rrdcached:1.8.0841b10cdae76
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

3,149
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

38,239
motionlinuxoid690.1.01 of 1See more

motion linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
expat@2.2.10-2+deb11u6
2.2.10-2+deb11u7

Open the chart page →

494
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

10,780
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,242
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

1,949
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-ui-react:latestba6853e35c60
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

5,905
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

7,534
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
expat@2.6.0-r0
2.6.4-r0

Open the chart page →

3,234
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
expat@2.6.0-r0
2.6.4-r0

Open the chart page →

3,234
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

6,680
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

6,578
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

23,689
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
expat@2.2.10-2
2.2.10-2+deb11u7

Open the chart page →

2,078
narrativeloglsst-sqre0.1.01 of 1See more

narrativelog lsst-sqre 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lsstsqre/narrativelog:0.1.0ce01de04ce21
expat@2.2.10-2+deb11u1
2.2.10-2+deb11u7

Open the chart page →

1,639
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.8

Open the chart page →

17,858

Container images carrying it

1,293 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
expat@2.6.0-r0
2.6.4-r0
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
expat@2.6.2-r0
2.6.4-r0
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
expat@2.6.0-r0
2.6.4-r0
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
expat@2.2.10-2
2.2.10-2+deb11u7
1
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
expat@2.6.3-r0
2.6.4-r0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
expat@2.5.0-r2
2.6.4-r0
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
expat@2.5.0-r2
2.6.4-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-frauddetectionservice77cefdab4d5c
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
expat@2.5.0-r0
2.6.4-r0
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm2
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
expat@2.6.3-r0
2.6.4-r0
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
expat@2.5.0-2.el9_4
0:2.5.0-2.el9_4.2
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
expat@2.5.0-r1
2.6.4-r0
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
expat@2.2.10-2
2.2.10-2+deb11u7
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.