StackRadar

CVE-2026-25210

High

Advisory

Published 30 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,203
of 17,781 indexed, latest versions
Container images
1,171
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,203 of 17,781 indexed charts deploy, on 1,171 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more976
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0195
OSV records
ALPINE-CVE-2026-25210DEBIAN-CVE-2026-25210CGA-5v3h-h3q3-xg43UBUNTU-CVE-2026-25210
Also known as
CGA-mf53-85qx-vr2x, USN-8022-1, USN-8022-2

Charts affected

1,203 by stars
ChartLatestAffected imagesRadar Score
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,598
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,628
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3

Open the chart page →

11,839
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
2.8.2-1~deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
2.8.2-1~deb13u1
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

30,816
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4

Open the chart page →

4,309
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1

Open the chart page →

11,582
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,901
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
expat@2.5.0-1+deb12u1
no fix listed
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

17,693
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

2,160
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.672 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

2 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.7.4-r0
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,218
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

107,811
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,327
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
expat@2.7.1-r0
2.7.4-r0

Open the chart page →

2,866
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

24,488
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

5,852
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

5,751
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

15,477
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,052
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

9,770
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

10,315
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

18,137
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

4,378
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

13,635
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestd3c209a5d531
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

14,914
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

2,388
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.4-r0

Open the chart page →

14,917
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
expat@2.5.0-1
no fix listed
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
expat@2.5.0-1
no fix listed

Open the chart page →

22,202
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

17,896
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

77,687
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,613
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

13,145
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7

Open the chart page →

7,190
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

84,444

Container images carrying it

1,171 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
ispras/svacer:11-2-042aa9fa9f189
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-helloworld-v1:latest328b237e4fb1
expat@2.5.0-1
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
expat@2.5.0-1
no fix listed
1
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/node-agent-k8s:1.2.9268ab879ea51
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/pilot:1.10.0294ca55bd1cc
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/pilot:1.2.9c09319753454
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/proxyv2:1.2.90c78be035e98
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/proxyv2:1.10.088c6c693e67a
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
ixsystems/truecommand:3.2.019c218455cd2
expat@2.7.1-2
2.8.2-1~deb13u1
1
jacobalberty/unifi:v7.1.664a3616625dda
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3
1
jacobalberty/unifi:5.10.19c409924e2463
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jbtronics/part-db1:latest5db71f6db59d
expat@2.5.0-1+deb12u3
no fix listed
1
jeboehm/mailserver-filter:5.0.92e756949e537d
expat@2.7.0-r0
2.7.4-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
expat@2.7.1-r0
2.7.4-r0
1
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
expat@2.5.0-1
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
jlesage/firefox:v25.03.1055c28defe31
expat@2.7.0-r0
2.7.4-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
expat@2.1.0-7ubuntu0.16.04.5
2.1.0-7ubuntu0.16.04.5+esm11
1
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
expat@2.5.0-1+deb12u2
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.