StackRadar

CVE-2024-50602

Medium

Advisory

Published 27 Oct 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,286
of 17,787 indexed, latest versions
Container images
1,293
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,286 of 17,787 indexed charts deploy, on 1,293 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.1.0-4ubuntu1.4+esm10, 2.1.0-7ubuntu0.16.04.5+esm10, 2.2.5-3ubuntu0.9+esm2, 2.2.9-1ubuntu0.8+4 more938
expatapk2.5.0-r0, 2.5.0-r1, 2.5.0-r2, 2.5.0-r4+3 more2.6.4-r0220
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+14 more0:2.2.5-16.el8_10, 0:2.5.0-2.el9_4.2, 0:2.5.0-3.el9_5.1134
pythonbitnami3.11.11-0, 3.12.8-03.9.212
python-3.12apk3.12.0-r13.12.8-r01
OSV records
ALPINE-CVE-2024-50602BIT-python-2024-50602CGA-8hv9-chc6-m8mcCGA-h7g8-992h-qr83DEBIAN-CVE-2024-50602RHSA-2024:11200RHSA-2024:9502RHSA-2024:9541UBUNTU-CVE-2024-50602DLA-4145-1RLSA-2024:9502
Also known as
BIT-libpython-2024-50602, BIT-python-min-2024-50602, CGA-rf44-r3rp-vh3g, CGA-rmvw-44qh-5jcf, RHSA-2025:3350, USN-7145-1

Charts affected

1,286 by stars
ChartLatestAffected imagesRadar Score
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

13,711
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm2

Open the chart page →

8,946
hello-wordmuraig-hello-word0.2.21 of 1See more

hello-word muraig-hello-word 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

532
my-music-appmusic-serverVerified publisher0.1.11 of 1See more

my-music-app music-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
abdullahkhabir/radio:latest56526d0cc929
expat@2.5.0-r0
2.6.4-r0

Open the chart page →

1,561
pagesmuthu-pages1.0.02 of 3See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,233
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
2.4.7-1ubuntu0.5

Open the chart page →

12,861
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
2.4.7-1ubuntu0.5

Open the chart page →

12,861
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
expat@2.6.0-r0
2.6.4-r0

Open the chart page →

3,429
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
expat@2.2.5-4.el8_5.3
0:2.2.5-16.el8_10

Open the chart page →

9,149
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

967
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

5,383
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
expat@2.2.5-10.el8_7.1
0:2.2.5-16.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm2
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5

Open the chart page →

27,812
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
expat@2.6.2-r0
2.6.4-r0
ahmetgrbzz/web_server:1.02e7fef69c29f
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

3,032
mysql2s3bkmysql2s3bk0.1.01 of 1See more

mysql2s3bk mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
pyaephyohein/mysql2s3bk:alphafdee05f2d441
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

1,207
nginx-playgroundmysql2s3bk0.1.01 of 1See more

nginx-playground mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/nginx:1.24-alpine77e5d4a6ad90
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

652
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
hazegoodlife/haaze:milksite8d4c63169e14
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

8,776
myweatherhelmmyweather1.3.112 of 7See more

myweatherhelm myweather 1.3.11

2 of the 7 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
expat@2.5.0-1
2.5.0-1+deb12u2
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm2

Open the chart page →

17,411
pagesnarain1.0.02 of 3See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,233
pagesnarasimha-pages1.0.02 of 3See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,233
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

12,839
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

20,233
betydbncsaVerified publisher0.6.12 of 4See more

betydb ncsa 0.6.1

2 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
pecan/bety:5.4.1f825d480cd62
expat@2.2.10-2
2.2.10-2+deb11u7

Open the chart page →

9,542
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

4,989
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

15,408
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

5,456
pecanncsaVerified publisher0.6.23 of 15See more

pecan ncsa 0.6.2

3 of the 15 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
pecan/bety:5.4.1f825d480cd62
expat@2.2.10-2
2.2.10-2+deb11u7
pecan/web:1.7.2814d678c5550
expat@2.2.10-2
2.2.10-2+deb11u7

Open the chart page →

14,154
smilencsaVerified publisher1.1.016 of 23See more

smile ncsa 1.1.0

16 of the 23 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/classification_split:0.1.24bfda60829fe
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/classification_train:0.1.207477060bba8
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/clowder_list:0.1.051cb17626519
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm2
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
expat@2.5.0-1
2.5.0-1+deb12u2
socialmediamacroscope/image_crawler:0.1.2f508216be63c
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm2
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
expat@2.5.0-1
2.5.0-1+deb12u2
socialmediamacroscope/preprocessing:0.1.3ca863306314b
expat@2.5.0-1
2.5.0-1+deb12u2
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

109,485
nginx-custom-selinuxnginx-custom1.0.01 of 1See more

nginx-custom-selinux nginx-custom 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/nginx:1.25-alpine516475cc129d
expat@2.6.2-r0
2.6.4-r0

Open the chart page →

686
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

4,731
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

4,731
minio-directpvnineinfra-charts4.0.81 of 5See more

minio-directpv nineinfra-charts 4.0.8

1 of the 5 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
quay.io/minio/directpv:v4.0.84560083eb77d
expat@2.2.5-11.el8
0:2.2.5-16.el8_10

Open the chart page →

7,035
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

9,831
servernodejs0.0.21 of 1See more

server nodejs 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
maissacrement/pock8snodejs:0.0.16da0db1159da
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7

Open the chart page →

1,902
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8

Open the chart page →

22,713
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
expat@2.2.10-2
2.2.10-2+deb11u7

Open the chart page →

2,955
config-server-helm-chartnotesprojectchart0.1.01 of 1See more

config-server-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/config-server-another:lateste7f20450d2ae
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

3,422
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

5,887
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

6,864
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

13,387
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

5,928
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7

Open the chart page →

5,885
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
2.1.0-4ubuntu1.4+esm10

Open the chart page →

41,455
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm2
linuxserver/codimd:latestb801bbcf6386
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

27,486
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm2

Open the chart page →

27,667
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

1,587
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
expat@2.6.3-r0
2.6.4-r0

Open the chart page →

5,825
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.2

Open the chart page →

2,626
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-50602.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
expat@2.5.0-r1
2.6.4-r0

Open the chart page →

797

Container images carrying it

1,293 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
2.6.1-2ubuntu0.2
1
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
2.5.0-1+deb12u2
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
2.5.0-1+deb12u2
1
apache/camel-k:1.10.43bb13d14f64a
expat@2.2.5-8.el8_6.3
0:2.2.5-16.el8_10
1
apache/drill:1.21.11f96558fd292
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
2.5.0-1+deb12u2
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1
apache/kafka:3.9.0fbc7d7c428e3
expat@2.6.3-r0
2.6.4-r0
1
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.5
1
apachepinot/pinot:latest-jdk110018bb04ced7
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
1
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.5
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
1
apache/rocketmq:5.3.0434d8398f996
expat@2.6.1-2build1
2.6.1-2ubuntu0.2
1
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.5
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.5
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.8
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
expat@2.2.10-2+deb11u2
2.2.10-2+deb11u7
1
apache/superset:4.0.1ab9467fd712c
expat@2.5.0-1
2.5.0-1+deb12u2
1
apache/tika:2.9.0.092d055a84e9e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
expat@2.5.0-r1
2.6.4-r0
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
expat@2.2.5-11.el8
0:2.2.5-16.el8_10
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
expat@2.2.5-4.el8
0:2.2.5-16.el8_10
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
expat@2.2.5-11.el8
0:2.2.5-16.el8_10
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
expat@2.2.5-11.el8
0:2.2.5-16.el8_10
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
expat@2.2.5-11.el8
0:2.2.5-16.el8_10
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
expat@2.6.2-r0
2.6.4-r0
1
aquasec/trivy:0.43.1944a04445179
expat@2.5.0-r1
2.6.4-r0
1
archish27/python-fastapi-postgres:latest6610071a2101
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
2.5.0-1+deb12u2
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
aroralalit/student-producer:1.0.02a094f597b36
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
expat@2.5.0-1
2.5.0-1+deb12u2
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
expat@2.5.0-1
2.5.0-1+deb12u2
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8
1
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
expat@2.2.10-2+deb11u3
2.2.10-2+deb11u7
1
assistiot/identity-manager_kc:latest0df4b4fa899a
expat@2.2.5-8.el8_6.2
0:2.2.5-16.el8_10
1
assistiot/location_processing:lateste9bae124095f
expat@2.4.7-1
2.4.7-1ubuntu0.5
1
assistiot/open_api_backend:1.1.230812ba93555
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.5
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
expat@2.5.0-r1
2.6.4-r0
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
expat@2.5.0-r2
2.6.4-r0
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
expat@2.2.10-2+deb11u5
2.2.10-2+deb11u7
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8
1
assistiot/semantic_translation:latest2a2587804717
expat@2.5.0-r1
2.6.4-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.