StackRadar

CVE-2024-8176

High

Advisory

Published 14 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,081
of 17,787 indexed, latest versions
Container images
1,061
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,081 of 17,787 indexed charts deploy, on 1,061 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+23 more2.4.7-1ubuntu0.6, 2.5.0-1+deb12u2, 2.6.1-2ubuntu0.3698
expatapk2.5.0-r1, 2.5.0-r2, 2.5.0-r4, 2.6.0-r0+4 more2.7.0-r0212
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+17 more0:2.2.5-17.el8_10, 0:2.5.0-3.el9_5.3, 0:2.5.0-5.el9_6151
OSV records
ALPINE-CVE-2024-8176CGA-45r8-c55g-5gv3DEBIAN-CVE-2024-8176RHSA-2025:3531RHSA-2025:3913RHSA-2025:7444RLSA-2025:3531RLSA-2025:3913UBUNTU-CVE-2024-8176
Also known as
CGA-w842-53hm-6m5r, USN-7424-1

Charts affected

1,081 by stars
ChartLatestAffected imagesRadar Score
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

10,106
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

6,092
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.6

Open the chart page →

13,656
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
expat@2.2.5-4.el8
0:2.2.5-17.el8_10

Open the chart page →

6,977
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
expat@2.5.0-1
2.5.0-1+deb12u2
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
expat@2.5.0-1
2.5.0-1+deb12u2
sirrend/helmup-notifications-service:0.1.3997866417011
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

16,532
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

17,365
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
expat@2.6.3-r0
2.7.0-r0

Open the chart page →

11,794
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,415
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,489
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,435
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,435
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,716
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
expat@2.2.5-8.el8_6.3
0:2.2.5-17.el8_10

Open the chart page →

9,318
jenkinsjkimVerified publisher5.5.142 of 2See more

jenkins jkim 5.5.14

2 of the 2 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
2.5.0-1+deb12u2
kiwigrid/k8s-sidecar:1.27.6db85bd553253
expat@2.6.2-r0
2.7.0-r0

Open the chart page →

7,393
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.6
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.6
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.6

Open the chart page →

14,250
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

5,795
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
expat@2.5.0-2.el9_4
0:2.5.0-3.el9_5.3

Open the chart page →

12,063
kronickronic0.1.71 of 1See more

kronic kronic 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/mshade/kronic:v0.1.466e3043851cd
expat@2.6.0-r0
2.7.0-r0

Open the chart page →

1,061
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
2.5.0-1+deb12u2
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

20,424
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
expat@2.6.2-r0
2.7.0-r0

Open the chart page →

4,723
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,749
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

12,477
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed

Open the chart page →

114,025
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

35,058
fhir-serverlinuxforhealth0.9.11 of 2See more

fhir-server linuxforhealth 0.9.1

1 of the 2 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
expat@2.2.5-16.el8_10
0:2.2.5-17.el8_10

Open the chart page →

1,052
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

5,741
plane-enterprisemakeplaneOfficialVerified publisher3.7.21 of 13See more

plane-enterprise makeplane 3.7.2

1 of the 13 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
expat@2.6.2-r0
2.7.0-r0

Open the chart page →

4,942
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

3,014
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
expat@2.5.0-r1
2.7.0-r0

Open the chart page →

5,941
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.3

Open the chart page →

4,184
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
expat@2.2.5-4.el8
0:2.2.5-17.el8_10

Open the chart page →

6,915
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

13,763
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

5,051
opencatalogiopencatalogi1.0.63 of 8See more

opencatalogi opencatalogi 1.0.6

3 of the 8 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
expat@2.5.0-r1
2.7.0-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
2.5.0-1+deb12u2
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
2.5.0-1+deb12u2

Open the chart page →

14,862
opikopikOfficialVerified publisher2.2.611 of 13See more

opik opik 2.2.61

1 of the 13 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.6

Open the chart page →

14,422
phonebook-chartphonebook-chart0.1.02 of 3See more

phonebook-chart phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:2.035c37ae2bafd
expat@2.6.2-r0
2.7.0-r0
ahmetgrbzz/web_server:2.0f018bafd2b0c
expat@2.6.2-r0
2.7.0-r0

Open the chart page →

3,032
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
expat@2.6.4-r0
2.7.0-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
expat@2.6.4-r0
2.7.0-r0

Open the chart page →

3,778
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
2.4.7-1ubuntu0.6

Open the chart page →

7,616
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

31,949
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.6

Open the chart page →

6,835
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.6

Open the chart page →

7,466
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
expat@2.4.7-1ubuntu0.5
2.4.7-1ubuntu0.6

Open the chart page →

7,487
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
expat@2.5.0-1.el9
0:2.5.0-3.el9_5.3

Open the chart page →

9,885
mac-ouirm3lVerified publisher1.25.01 of 1See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
rm3l/mac-oui:1.8.03a5e1f95c132
expat@2.2.5-11.el8_9.1
0:2.2.5-17.el8_10

Open the chart page →

1,975
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,159
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

6,918
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

5,321
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

13,562
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

30,310
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2024-8176.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
dserio83/velero-watchdog:0.1.8d5deae589229
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2

Open the chart page →

11,545

Container images carrying it

1,061 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
expat@2.4.7-1
2.4.7-1ubuntu0.6
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
expat@2.4.7-1
2.4.7-1ubuntu0.6
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
expat@2.6.4-r0
2.7.0-r0
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
expat@2.2.5-16.el8_10
0:2.2.5-17.el8_10
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
expat@2.6.4-r0
2.7.0-r0
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.7.0-r0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
expat@2.6.0-r0
2.7.0-r0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
expat@2.5.0-r1
2.7.0-r0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
expat@2.6.0-r0
2.7.0-r0
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
expat@2.6.2-r0
2.7.0-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
expat@2.6.2-r0
2.7.0-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
expat@2.6.2-r0
2.7.0-r0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.3
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
expat@2.6.2-r0
2.7.0-r0
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
expat@2.6.0-r0
2.7.0-r0
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
expat@2.6.3-r0
2.7.0-r0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
expat@2.5.0-r1
2.7.0-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
expat@2.5.0-r2
2.7.0-r0
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
expat@2.5.0-r2
2.7.0-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
expat@2.5.0-1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.