StackRadar

CVE-2026-25210

High

Advisory

Published 30 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,203
of 17,781 indexed, latest versions
Container images
1,171
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,203 of 17,781 indexed charts deploy, on 1,171 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more976
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0195
OSV records
ALPINE-CVE-2026-25210DEBIAN-CVE-2026-25210CGA-5v3h-h3q3-xg43UBUNTU-CVE-2026-25210
Also known as
CGA-mf53-85qx-vr2x, USN-8022-1, USN-8022-2

Charts affected

1,203 by stars
ChartLatestAffected imagesRadar Score
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
expat@2.5.0-1
no fix listed
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
expat@2.5.0-1
no fix listed
sirrend/helmup-notifications-service:0.1.3997866417011
expat@2.5.0-1
no fix listed

Open the chart page →

16,514
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

12,397
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

3,470
immichimmich-helm0.3.02 of 4See more

immich immich-helm 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

15,712
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

17,284
iris-webappiris-webapp0.2.42 of 2See more

iris-webapp iris-webapp 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
expat@2.6.3-r0
2.7.4-r0
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

11,764
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,701
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,604
jenkinsjkimVerified publisher5.5.142 of 2See more

jenkins jkim 5.5.14

2 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
no fix listed
kiwigrid/k8s-sidecar:1.27.6db85bd553253
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

7,387
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

14,130
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,789
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
expat@2.7.1-r0
2.7.4-r0

Open the chart page →

1,838
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed

Open the chart page →

20,403
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

4,095
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,710
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.8+esm1

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

113,791
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
expat@2.7.1-r0
2.7.4-r0

Open the chart page →

5,654
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

3,544
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

2,113
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

3,980
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

35,050
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
expat@2.7.1-r3
2.7.4-r0

Open the chart page →

4,292
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,734
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

13,479
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

4,942
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1

Open the chart page →

2,975
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,753
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.4

Open the chart page →

4,137
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
expat@2.7.1-2
2.7.1-2ubuntu0.2

Open the chart page →

11,103
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

13,738
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

7,527
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
expat@2.7.3-r0
2.7.4-r0

Open the chart page →

37,373
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

1,238
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
no fix listed

Open the chart page →

14,838
opentelemetry-demoopentelemetry-helmVerified publisher0.41.13 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

3 of the 34 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
expat@2.7.3-r0
2.7.4-r0
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7

Open the chart page →

14,334
opsopsVerified publisher1.2.01 of 2See more

ops ops 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
shaowenchen/ops-server:latest315444f703f4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

8,939
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

2,278
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,681
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,883

Container images carrying it

1,171 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.7.4-r0
1
aktosecurity/data-ingestion-service213aded7adc5
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.7.4-r0
1
alpine/helm105741fa6621
expat@2.6.2-r0
2.7.4-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.7.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.7.4-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.7.4-r0
1
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.28.13e5c0b053fed7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.7.4-r0
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
2.8.2-1~deb13u1
1
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.7.4-r0
1
apache/kafka:3.9.0fbc7d7c428e3
expat@2.6.3-r0
2.7.4-r0
1
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/rocketmq:5.3.0434d8398f996
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.