StackRadar

CVE-2026-24515

Low

Advisory

Published 23 Jan 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,169
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,169 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more972
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0197
OSV records
ALPINE-CVE-2026-24515CGA-7rqm-52vp-qcqqDEBIAN-CVE-2026-24515UBUNTU-CVE-2026-24515
Also known as
CGA-8crp-j9g8-89r5, USN-8022-1, USN-8022-2

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
no fix listed
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

13,197

Container images carrying it

1,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
kimai/kimai2:2.67.03084f1e5ecdc
expat@2.5.0-1+deb12u2
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
expat@2.5.0-1+deb12u2
no fix listed
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
expat@2.6.2-r0
2.7.4-r0
1
knspar/phronetis:0.1.4609499d2dc91a
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed
1
kong/httpbin:latesta6ac46531193
expat@2.4.7-1ubuntu0.5
2.4.7-1ubuntu0.7
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
expat@2.7.0-r0
2.7.4-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
expat@2.4.7-1ubuntu0.5
2.4.7-1ubuntu0.7
1
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
2.8.2-1~deb13u1
1
leantime/leantime:3.3.3ad4bfb0699d3
expat@2.6.4-r0
2.7.4-r0
1
lib42/jackett:latesta55596cda383
expat@2.5.0-1
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
no fix listed
1
library/cassandra:3.11.10b095ff3248c6
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
library/docker:28.5.2-dind2a232a42256f
expat@2.7.3-r0
2.7.4-r0
1
library/docker:27-cli851f91d24121
expat@2.6.4-r0
2.7.4-r0
1
library/docker:27-dindaa3df78ecf32
expat@2.6.4-r0
2.7.4-r0
1
library/docker:26.1-dinddd43b430341a
expat@2.6.2-r0
2.7.4-r0
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
expat@2.5.0-1+deb12u2
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
no fix listed
1
library/kibana:7.17.150172f1c538e7
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
library/kibana:8.18.004c0fc150f3a
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1
1
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
2.8.2-1~deb13u1
1
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
expat@2.7.1-2
2.8.2-1~deb13u1
1
library/nginx:1.27-alpine65645c7bb6a0
expat@2.7.0-r0
2.7.4-r0
1
library/nginx:1.276784fb0834aa
expat@2.5.0-1+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
expat@2.5.0-1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
expat@2.5.0-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.