StackRadar

CVE-2026-25210

High

Advisory

Published 30 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,203
of 17,781 indexed, latest versions
Container images
1,171
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,203 of 17,781 indexed charts deploy, on 1,171 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more976
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0195
OSV records
ALPINE-CVE-2026-25210DEBIAN-CVE-2026-25210CGA-5v3h-h3q3-xg43UBUNTU-CVE-2026-25210
Also known as
CGA-mf53-85qx-vr2x, USN-8022-1, USN-8022-2

Charts affected

1,203 by stars
ChartLatestAffected imagesRadar Score
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,598
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

10,628
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3

Open the chart page →

11,839
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
2.8.2-1~deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
2.8.2-1~deb13u1
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

30,816
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4

Open the chart page →

4,309
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1

Open the chart page →

11,582
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,901
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
expat@2.5.0-1+deb12u1
no fix listed
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

17,693
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

2,160
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.672 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

2 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.7.4-r0
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,218
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

107,811
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,327
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
expat@2.7.1-r0
2.7.4-r0

Open the chart page →

2,866
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

24,488
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

5,852
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

5,751
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

15,477
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,052
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

9,770
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

10,315
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

18,137
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

4,378
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

13,635
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestd3c209a5d531
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

14,914
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

2,388
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.4-r0

Open the chart page →

14,917
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
expat@2.5.0-1
no fix listed
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
expat@2.5.0-1
no fix listed

Open the chart page →

22,202
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

17,896
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11

Open the chart page →

77,687
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,613
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

13,145
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7

Open the chart page →

7,190
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

84,444

Container images carrying it

1,171 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.7.4-r0
1
aktosecurity/data-ingestion-service213aded7adc5
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.7.4-r0
1
alpine/helm105741fa6621
expat@2.6.2-r0
2.7.4-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.7.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.7.4-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.7.4-r0
1
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.28.13e5c0b053fed7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.7.4-r0
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
2.8.2-1~deb13u1
1
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.7.4-r0
1
apache/kafka:3.9.0fbc7d7c428e3
expat@2.6.3-r0
2.7.4-r0
1
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/rocketmq:5.3.0434d8398f996
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.