StackRadar

CVE-2026-24515

Low

Advisory

Published 23 Jan 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,203
of 17,781 indexed, latest versions
Container images
1,171
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,203 of 17,781 indexed charts deploy, on 1,171 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more976
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0195
OSV records
ALPINE-CVE-2026-24515CGA-7rqm-52vp-qcqqDEBIAN-CVE-2026-24515UBUNTU-CVE-2026-24515
Also known as
CGA-8crp-j9g8-89r5, USN-8022-1, USN-8022-2

Charts affected

1,203 by stars
ChartLatestAffected imagesRadar Score
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,022
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

4,751
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,099
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
expat@2.5.0-1
no fix listed

Open the chart page →

12,607
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,604
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
expat@2.5.0-1+deb12u1
no fix listed
openbas/platform:2.0.5d986d80b0a75
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

25,017
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.4-r0

Open the chart page →

2,000
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

6,015
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
expat@2.5.0-1
no fix listed

Open the chart page →

5,973
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

14,290
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
hmediade/printserver-init:latest7f005eb6c718
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

10,839
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
no fix listed

Open the chart page →

16,384
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

26,612
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

8,685
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.7
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

20,650
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

3,407
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,733
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

725
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

7,862
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,959
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

57,669
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
2.2.5-3ubuntu0.9+esm3

Open the chart page →

12,611
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

25,160
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

19,295
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

27,721
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

8,967
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
library/zookeeper:3.8-temurin55d1e5b2e601
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

37,671
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

11,812
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

10,418
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3

Open the chart page →

16,212
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7

Open the chart page →

5,320
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,062
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

10,494
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

1,262
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,650
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

18,066
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,650
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

11,069
intelowlintelowl-helm6.6.1-01-06-20262 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

2 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
no fix listed
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
expat@2.7.3-r0
2.7.4-r0

Open the chart page →

17,852
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

3,774
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

1,836
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,122
opencloudjacobcolvinVerified publisher0.2.38 of 13See more

opencloud jacobcolvin 0.2.3

8 of the 13 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
expat@2.7.0-r0
2.7.4-r0
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

45,239

Container images carrying it

1,171 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
79
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
79
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3
13
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
11
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
10
library/rabbitmq:3.13-management:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
8
jellyfin/jellyfin:10.11:10.11.11:latestaefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1
7
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
7
oomk8s/readiness-check:2.0.07daa08b81954
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
6
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.7.4-r0
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed
5
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed
5
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
5
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
4
library/nginx:1.27.1287ff321f9e3
expat@2.5.0-1+deb12u1
no fix listed
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
expat@2.7.3-r0
2.7.4-r0
4
library/rabbitmq:3.11-managementc3f70098e01d
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
4
mastercloudapps/planner:v1.2340a950b311b2
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
4
opea/llm-tgi:1.00c25aab3f106
expat@2.5.0-1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
4
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
3
ciscolabs/rtsp-server:latestb59fc10bb821
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
3
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
3
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed
3
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.4
3
guacamole/guacamole:1.6.0f344085e618b
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
3
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1
3
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
expat@2.6.3-r0
2.7.4-r0
3
library/nginx:1.25:1.25.5a484819eb602
expat@2.5.0-1
no fix listed
3
library/node:ltsbe23f54a88d3
expat@2.5.0-1+deb12u2
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
3
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed
3
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.7.4-r0
2
apache/druid:37.0.00116fb802786
expat@2.5.0-1+deb12u2
no fix listed
2
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
expat@2.5.0-1
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
2.8.2-1~deb13u1
2
excalidraw/excalidraw:latestf7ee194addd6
expat@2.7.0-r0
2.7.4-r0
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
expat@2.7.1-2
2.8.2-1~deb13u1
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.