StackRadar

CVE-2026-32776

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,385
of 17,787 indexed, latest versions
Container images
1,376
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,385 of 17,787 indexed charts deploy, on 1,376 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.8.2-1~deb13u11,144
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+8 more2.7.5-r0232
OSV records
ALPINE-CVE-2026-32776CGA-mxh2-cg9w-8rh2DEBIAN-CVE-2026-32776UBUNTU-CVE-2026-32776
Also known as
CGA-r2qv-8vvf-wqph

Charts affected

1,385 by stars
ChartLatestAffected imagesRadar Score
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,648
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

9,422
changedetectionhelmforgeVerified publisher1.1.151 of 1See more

changedetection helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.3ecacd9fd0c66
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,602
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

10,898
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

9,991
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

18,923
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

29,852
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
expat@2.5.0-1+deb12u2
no fix listed
library/zookeeper:3.9.5f258365d4882
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

8,598
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

3,660
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,294
immichhelmforgeVerified publisher1.2.82 of 5See more

immich helmforge 1.2.8

2 of the 5 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

11,080
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,350
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,442
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,041
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,704
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,702
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,911
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
expat@2.7.4-1
no fix listed

Open the chart page →

4,321
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

4,741
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,224
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,106
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

3,142
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
expat@2.5.0-1
no fix listed

Open the chart page →

11,441
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,615
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
openaev/platform:3.260904.00a12ce8b3db9
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

7,502
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
expat@2.5.0-1+deb12u1
no fix listed
openbas/platform:2.0.5d986d80b0a75
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

25,099
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.5-r0

Open the chart page →

2,001
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,076
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
expat@2.5.0-1
no fix listed

Open the chart page →

5,114
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

14,350
hivemq-edgehivemqOfficialVerified publisher0.1.351 of 1See more

hivemq-edge hivemq 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.13aba306d1f089
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,241
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
expat@2.4.7-1ubuntu0.2
no fix listed
hmediade/printserver-init:latest7f005eb6c718
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,918
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
no fix listed

Open the chart page →

14,629
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

26,579
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

32,336
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
no fix listed

Open the chart page →

16,482
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
no fix listed

Open the chart page →

20,727
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
expat@2.7.0-r0
2.7.5-r0

Open the chart page →

3,355
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,038
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,749
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
expat@2.6.3-r0
2.7.5-r0

Open the chart page →

725
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:postgres9fd5faf1fe80
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:apacheb2f8c6d52623
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

11,171
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
expat@2.4.7-1
no fix listed

Open the chart page →

7,184
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
expat@2.4.7-1
no fix listed

Open the chart page →

7,902
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,770
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

57,728
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
no fix listed

Open the chart page →

12,632
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-32776.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,184

Container images carrying it

1,376 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
expat@2.2.9-1ubuntu0.6
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
expat@2.6.1-2ubuntu0.4
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
expat@2.6.1-2ubuntu0.3
no fix listed
2
quay.io/frrouting/frr:10.4.38745af1f9bbb
expat@2.7.4-r0
2.7.5-r0
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
expat@2.6.2-r0
2.7.5-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
expat@2.7.3-r0
2.7.5-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.7.5-r0
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
expat@2.6.1-2ubuntu0.3
no fix listed
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
expat@2.5.0-1+deb12u2
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
expat@2.2.9-1ubuntu0.6
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
expat@2.2.5-3ubuntu0.2
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
2.8.2-1~deb13u1
1
aboogie/login_test_backend:new9c41a4483ac8
expat@2.5.0-1
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
expat@2.6.1-2ubuntu0.2
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
expat@2.6.1-2build1
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
expat@2.2.9-1build1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
expat@2.5.0-1+deb12u2
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
no fix listed
1
akeyless/base:latest759e4289fae8
expat@2.6.1-2ubuntu0.4
no fix listed
1
akeyless/gateway:5.3.13d2e7dce5eb9
expat@2.6.1-2ubuntu0.4
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
expat@2.6.1-2ubuntu0.4
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.7.5-r0
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
expat@2.7.4-1
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
expat@2.7.4-1
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
expat@2.6.1-2ubuntu0.3
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
expat@2.7.4-1
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
expat@2.7.4-1
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
expat@2.7.4-1
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
no fix listed
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.7.5-r0
1
alpine/helm105741fa6621
expat@2.6.2-r0
2.7.5-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.5-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.7.5-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.5-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.7.5-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.7.5-r0
1
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.7.5-r0
1
alpine/k8s:1.28.13e5c0b053fed7
expat@2.6.2-r0
2.7.5-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.7.5-r0
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
expat@2.6.1-2ubuntu0.4
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
no fix listed
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.