StackRadar

CVE-2026-24515

Low

Advisory

Published 23 Jan 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,209
of 17,787 indexed, latest versions
Container images
1,177
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,209 of 17,787 indexed charts deploy, on 1,177 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more979
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0198
OSV records
ALPINE-CVE-2026-24515CGA-7rqm-52vp-qcqqDEBIAN-CVE-2026-24515UBUNTU-CVE-2026-24515
Also known as
CGA-8crp-j9g8-89r5, USN-8022-1, USN-8022-2

Charts affected

1,209 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

15,287
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
expat@2.7.1-r0
2.7.4-r0

Open the chart page →

14,618
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

9,296
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1

Open the chart page →

6,323
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
expat@2.5.0-1
no fix listed

Open the chart page →

5,548
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7

Open the chart page →

14,172
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
no fix listed
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

13,197

Container images carrying it

1,177 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
expat@2.5.0-1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
expat@2.5.0-1+deb12u1
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
expat@2.7.1-2
2.8.2-1~deb13u1
1
dellcloud/category:distributed02fc234353a9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
dellcloud/pages:1.04d2eb25b9225
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
devopstales/kubedash:3.1.08bb837da5aec
expat@2.7.0-r0
2.7.4-r0
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
diygod/rsshub:2025-11-097a6312cac0d5
expat@2.5.0-1+deb12u2
no fix listed
1
djjudas21/bearhugmugs:0.1.14fa898a52d97
expat@2.6.4-r0
2.7.4-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
expat@2.7.1-2
2.8.2-1~deb13u1
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
expat@2.5.0-1+deb12u2
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
expat@2.5.0-1+deb12u2
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
expat@2.5.0-1
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1
1
dpage/pgadmin4:9.252cb72a9e3da
expat@2.7.0-r0
2.7.4-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
expat@2.6.4-r0
2.7.4-r0
1
dragonflyoss/client:v1.5.4a1b52779c4dd
expat@2.5.0-1+deb12u3
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
expat@2.5.0-1
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
drpcorg/dshackle:0.54.08858fae1859d
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
drumsergio/genieacs:1.2.16.028244054e1bf
expat@2.5.0-1+deb12u2
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
expat@2.5.0-1+deb12u1
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
expat@2.5.0-1+deb12u1
no fix listed
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
expat@2.7.1-2
2.8.2-1~deb13u1
1
elastictranscoder/media:627e21dc963ab3858c6b
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
elastictranscoder/media-storage:f6d861a026208b8c2359
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
elautoestopista/aeneabot:4.2.1125ba620d528
expat@2.7.3-r0
2.7.4-r0
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
expat@2.6.2-r0
2.7.4-r0
1
emqx/ecp-ui:2.5.1e33e9816f147
expat@2.5.0-1+deb12u1
no fix listed
1
erenozcan17/react_frontend:v4.56e1b14973f9b
expat@2.7.1-r0
2.7.4-r0
1
erudikaltd/scoold:1.66.0949c56b57e8f
expat@2.7.3-r0
2.7.4-r0
1
escaping/core-keeper-dedicated:latest87fa79255962
expat@2.7.1-2
2.8.2-1~deb13u1
1
esphome/esphome:2026.7.44866347cb5b4
expat@2.7.1-2
2.8.2-1~deb13u1
1
esphome/esphome:2026.8.285abea33854b
expat@2.7.1-2
2.8.2-1~deb13u1
1
esphome/esphome:2024.3.09ab8cc88b28c
expat@2.5.0-1
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
expat@2.5.0-1+deb12u1
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
expat@2.5.0-1+deb12u1
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
expat@2.7.1-2
2.8.2-1~deb13u1
1
esteban1930/frontend-1:1.8.0f9078279632c
expat@2.7.1-r0
2.7.4-r0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
ethpandaops/assertoor:latest1efa2fba6711
expat@2.7.1-2
2.8.2-1~deb13u1
1
evoapicloud/evolution-manager:latestcbfeb314afb9
expat@2.7.3-r0
2.7.4-r0
1
extrim/perlite:1.5.99cb7eb5598b6
expat@2.7.0-r0
2.7.4-r0
1
falcosecurity/event-generator:latest932956d86c99
expat@2.5.0-1+deb12u2
no fix listed
1
featurehub/dacha2:1.9.1c8d5551b5e40
expat@2.7.0-r0
2.7.4-r0
1
featurehub/edge:1.9.198ad426737f6
expat@2.7.0-r0
2.7.4-r0
1
featurehub/mr:1.9.1477d8bf771a9
expat@2.7.0-r0
2.7.4-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.