CVE-2026-25210

High

Advisory

Published 30 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,202; of 17,790 indexed, latest versions
Container images: 1,169; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,169 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more	2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more	972
expatapk	2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more	2.7.4-r0	197

OSV records: ALPINE-CVE-2026-25210 DEBIAN-CVE-2026-25210 CGA-5v3h-h3q3-xg43 UBUNTU-CVE-2026-25210
Also known as: CGA-mf53-85qx-vr2x, USN-8022-1, USN-8022-2

Charts affected

1,202 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

7,685

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-25210.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	expat@2.5.0-1+deb12u1	no fix listed
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	expat@2.6.3-r0	2.7.4-r0

Open the chart page →

13,197

Container images carrying it

1,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
rtuszik/photon-docker :2.4.0	21549c60f9e6	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	1
rundeck/rundeck :3.2.7	4d64fe56f767	expat@2.1.0-7ubuntu0.16.04.5	2.1.0-7ubuntu0.16.04.5+esm11	1
rundeck/rundeck :3.0.16	b13e8059ad72	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm11	1
ryshe/terraria :latest	b1c89f7f359a	expat@2.5.0-1+deb12u2	no fix listed	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	expat@2.4.7-1ubuntu0.5	2.4.7-1ubuntu0.7	1
saidsef/scapy-containerised :v2025.02	f17f7c435891	expat@2.6.4-r0	2.7.4-r0	1
santisbon/evwatcher :latest	c4e994ca4540	expat@2.5.0-1	no fix listed	1
santisbon/evworker :latest	e807283f8d69	expat@2.5.0-1	no fix listed	1
santisbon/speedtest :latest	8ee3a1697227	expat@2.5.0-1	no fix listed	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	expat@2.5.0-1+deb12u1	no fix listed	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	expat@2.5.0-1	no fix listed	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	expat@2.4.7-1ubuntu0.4	2.4.7-1ubuntu0.7	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	expat@2.4.7-1ubuntu0.4	2.4.7-1ubuntu0.7	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	expat@2.4.7-1ubuntu0.4	2.4.7-1ubuntu0.7	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	1
scrapinghub/splash :3.4.1	a5f89bc84606	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.8+esm1	1
seafileltd/seafile-mc :10.0.1	70628f29c663	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.8+esm1	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	expat@2.4.7-1ubuntu0.3	2.4.7-1ubuntu0.7	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	expat@2.2.9-1build1	2.2.9-1ubuntu0.8+esm1	1
seldonio/locust-core :0.8	1d0da98a2d76	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm11	1
seyiogunniran/my-nginx :1.0	3a0ed39e5830	expat@2.7.1-r0	2.7.4-r0	1
shamimkuet/nginx :1.0.2	b82902a76a04	expat@2.5.0-1	no fix listed	1
shaowenchen/ops-server :latest	315444f703f4	expat@2.4.7-1ubuntu0.6	2.4.7-1ubuntu0.7	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3	1
signalen/backend :2.50.14	760256000738	expat@2.5.0-1+deb12u2	no fix listed	1
sigp/siren :v3.0.4	2c219b04758e	expat@2.5.0-1+deb12u1	no fix listed	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	expat@2.5.0-1	no fix listed	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	expat@2.5.0-1	no fix listed	1
sirrend/helmup-notifications-service :0.1.3	997866417011	expat@2.5.0-1	no fix listed	1
sismics/docs :v1.10	f4b0ef019cf1	expat@2.2.5-3	2.2.5-3ubuntu0.9+esm3	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	expat@2.5.0-1	no fix listed	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	expat@2.5.0-1+deb12u1	no fix listed	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3	1
snipe/snipe-it :v8.3.1	141ebf2386fe	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	1
snipe/snipe-it :v6.0.14	55fb7636a98c	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.8+esm1	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	expat@2.2.5-3ubuntu0.9	2.2.5-3ubuntu0.9+esm3	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	expat@2.5.0-1	no fix listed	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	expat@2.2.5-3ubuntu0.9	2.2.5-3ubuntu0.9+esm3	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	expat@2.5.0-1	no fix listed	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	expat@2.5.0-1	no fix listed	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	expat@2.5.0-1	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	expat@2.5.0-1	no fix listed	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	expat@2.7.1-2	2.8.2-1~deb13u1	1
speckle/speckle-monitor-deployment :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	2faf1508c1d3	expat@2.5.0-1	no fix listed	1