CVE-2024-8176
HighAdvisory
Published 14 Mar 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.013
- 69th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,081
- of 17,787 indexed, latest versions
- Container images
- 1,061
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: expat security update
Carried by container images the latest versions of 1,081 of 17,787 indexed charts deploy, on 1,061 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| expatdeb | 2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+23 more | 2.4.7-1ubuntu0.6, 2.5.0-1+deb12u2, 2.6.1-2ubuntu0.3 | 698 |
| expatapk | 2.5.0-r1, 2.5.0-r2, 2.5.0-r4, 2.6.0-r0+4 more | 2.7.0-r0 | 212 |
| expatrpm | 2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+17 more | 0:2.2.5-17.el8_10, 0:2.5.0-3.el9_5.3, 0:2.5.0-5.el9_6 | 151 |
- OSV records
- ALPINE-CVE-2024-8176CGA-45r8-c55g-5gv3DEBIAN-CVE-2024-8176RHSA-2025:3531RHSA-2025:3913RHSA-2025:7444RLSA-2025:3531RLSA-2025:3913UBUNTU-CVE-2024-8176
- Also known as
- CGA-w842-53hm-6m5r, USN-7424-1
Charts affected
1,081 by stars
Container images carrying it
1,061 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| lsstsqre/ | b75bf8aaafa4 | expat | no fix listed | 1 |
| makersquad/ | a40dd258c527 | expat | 2.5.0-1+deb12u2 | 1 |
| maksymhencha/ | 7f096a681192 | expat | no fix listed | 1 |
| maptiler/ | 7e206140057b | expat | no fix listed | 1 |
| mariadb/ | 56c5e0908148 | expat | 0:2.2.5-17.el8_10 | 1 |
| mathieuruellan/ | 04572c8a1b04 | expat | 2.7.0-r0 | 1 |
| mbround18/ | 70bd4da591cd | expat | 2.4.7-1ubuntu0.6 | 1 |
| mediagis/ | c15e941485ef | expat | no fix listed | 1 |
| mediagis/ | d0eae7b51374 | expat | 2.4.7-1ubuntu0.6 | 1 |
| merlos/ | a38fc7e09ed7 | expat | 2.5.0-1+deb12u2 | 1 |
| metabase/ | 7807bc5cad17 | expat | 2.7.0-r0 | 1 |
| mher/ | 51c3c3db5be3 | expat | 2.7.0-r0 | 1 |
| middlewareeng/ | 747d880812f1 | expat | 2.5.0-1+deb12u2 | 1 |
| minio/ | 2a374c124d44 | expat | 0:2.2.5-17.el8_10 | 1 |
| minio/ | c631532a394e | expat | 0:2.2.5-17.el8_10 | 1 |
| minio/ | 1484c87239ea | expat | 0:2.2.5-17.el8_10 | 1 |
| minio/ | 6d770d7f255c | expat | 0:2.2.5-17.el8_10 | 1 |
| minio/ | 2adc5be088f5 | expat | 0:2.2.5-17.el8_10 | 1 |
| mintproject/ | 02260d20a21f | expat | 2.5.0-1+deb12u2 | 1 |
| mlikiowa/ | 1336a777f9a4 | expat | 2.4.7-1ubuntu0.6 | 1 |
| moonrailgun/ | b528c8f8fcc4 | expat | 2.7.0-r0 | 1 |
| moreillon/ | d7d4a5463525 | expat | 2.5.0-1+deb12u2 | 1 |
| moreillon/ | e418cc694bd5 | expat | 2.5.0-1+deb12u2 | 1 |
| moreillon/ | e8fd856e593d | expat | 2.5.0-1+deb12u2 | 1 |
| moreillon/ | 6597e6b98d21 | expat | 2.5.0-1+deb12u2 | 1 |
| moreillon/ | d2ee0423b797 | expat | 2.5.0-1+deb12u2 | 1 |
| mshanley80/ | 5b189a70c0fb | expat | no fix listed | 1 |
| muhammedgamal/ | 74b4cd69b6fa | expat | 2.5.0-1+deb12u2 | 1 |
| muluder/ | 43b597a93da7 | expat | no fix listed | 1 |
| mvance/ | 4bf67b567f39 | expat | 2.5.0-1+deb12u2 | 1 |
| mvance/ | 76906da36d18 | expat | 2.5.0-1+deb12u2 | 1 |
| netboxcommunity/ | 3d652dca5351 | expat | 2.4.7-1ubuntu0.6 | 1 |
| nethermind/ | 15517708c3b6 | expat | 2.4.7-1ubuntu0.6 | 1 |
| nginxinc/ | 8265b1df5a89 | expat | 2.7.0-r0 | 1 |
| nginxinc/ | 8f14986c54fa | expat | 2.7.0-r0 | 1 |
| nirmalnaveen/ | 8541a39162f3 | expat | 2.5.0-1+deb12u2 | 1 |
| nodered/ | e2632a7a35dd | expat | 2.7.0-r0 | 1 |
| odavid/ | e7ab3bbc948e | expat | 2.7.0-r0 | 1 |
| offchainlabs/ | e95865866129 | expat | 2.5.0-1+deb12u2 | 1 |
| oled01/ | 05d3e398e675 | expat | 2.5.0-1+deb12u2 | 1 |
| omecproject/ | 28a90cc26716 | expat | no fix listed | 1 |
| omecproject/ | b4ae7d0d6b74 | expat | no fix listed | 1 |
| omecproject/ | bcc5f19fd676 | expat | no fix listed | 1 |
| omecproject/ | 5715e5648aa0 | expat | no fix listed | 1 |
| omecproject/ | d109a8e57e71 | expat | no fix listed | 1 |
| onosproject/ | 44914a8d4b3f | expat | no fix listed | 1 |
| opea/ | 25dd26d9cd09 | expat | 2.5.0-1+deb12u2 | 1 |
| opea/ | 38c51b791efa | expat | 2.5.0-1+deb12u2 | 1 |
| opea/ | bdb9ec215872 | expat | 2.7.0-r0 | 1 |
| opea/ | 58f91683892d | expat | 2.5.0-1+deb12u2 | 1 |