CVE-2026-41080

Low

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.9; base score, highest
EPSS: 0.004; 33rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,454; of 17,790 indexed, latest versions
Container images: 1,457; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,454 of 17,790 indexed charts deploy, on 1,457 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more	2.1.0-7ubuntu0.16.04.5+esm12, 2.8.2-1~deb13u1	1,144
expatapk	2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more	2.8.0-r0, 2.8.1-r0	313

OSV records: ALPINE-CVE-2026-41080 CGA-f542-4m97-5v2v DEBIAN-CVE-2026-41080 UBUNTU-CVE-2026-41080
Also known as: CGA-h7ph-x4mx-672f, USN-8520-1

Charts affected

1,454 by stars

Chart

Latest

Affected images

Radar Score

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	expat@2.4.7-1ubuntu0.3	no fix listed

Open the chart page →

14,173

tabbyxd

1.0.6

1 of 2 See more

7,697

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	expat@2.5.0-1+deb12u1	no fix listed
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	expat@2.6.3-r0	2.8.1-r0

Open the chart page →

13,783

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	expat@2.4.7-1ubuntu0.7	no fix listed

Open the chart page →

7,929

Container images carrying it

1,457 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/cassandra :4.0	093ee8ee5eb2	expat@2.5.0-1+deb12u2	no fix listed	1
library/cassandra :3.11.10	b095ff3248c6	expat@2.2.9-1build1	no fix listed	1
library/docker :28.5.2-dind	2a232a42256f	expat@2.7.3-r0	2.8.1-r0	1
library/docker :27-cli	851f91d24121	expat@2.6.4-r0	2.8.1-r0	1
library/docker :27-dind	aa3df78ecf32	expat@2.6.4-r0	2.8.1-r0	1
library/docker :26.1-dind	dd43b430341a	expat@2.6.2-r0	2.8.1-r0	1
library/drupal :11.4.6-php8.5-apache-bookworm	28f7931ecbcb	expat@2.5.0-1+deb12u2	no fix listed	1
library/eclipse-temurin :21	1f79c73404fb	expat@2.7.4-1	no fix listed	1
library/eclipse-temurin :21	85f00967bcc6	expat@2.7.4-1	no fix listed	1
library/flink :1.14.6-scala_2.12	2461f02672b3	expat@2.4.7-1	no fix listed	1
library/httpd :2.4.63	1ae8051591a5	expat@2.5.0-1+deb12u1	no fix listed	1
library/kibana :7.17.15	0172f1c538e7	expat@2.2.9-1ubuntu0.6	no fix listed	1
library/kibana :8.18.0	04c0fc150f3a	expat@2.2.9-1ubuntu0.8	no fix listed	1
library/kibana :7.17.8	c5781ba340ef	expat@2.2.9-1ubuntu0.6	no fix listed	1
library/kibana :7.17.3	e2e2031c15be	expat@2.2.9-1ubuntu0.4	no fix listed	1
library/kong :3.8.0	712e407b20ea	expat@2.4.7-1ubuntu0.7	no fix listed	1
library/matomo :5.1.2-apache	2415789e1602	expat@2.5.0-1+deb12u1	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	expat@2.5.0-1+deb12u1	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/nginx :1.27.4	09369da6b103	expat@2.5.0-1+deb12u1	no fix listed	1
library/nginx :1.29	1881968aff6f	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/nginx :1.31.0-alpine	2f07d83bf561	expat@2.7.5-r0	2.8.1-r0	1
library/nginx :1.29.8-alpine	5616878291a2	expat@2.7.5-r0	2.8.1-r0	1
library/nginx :1.27-alpine	65645c7bb6a0	expat@2.7.0-r0	2.8.1-r0	1
library/nginx :1.27	6784fb0834aa	expat@2.5.0-1+deb12u1	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	expat@2.5.0-1	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	expat@2.5.0-1	no fix listed	1
library/nginx :1.28-alpine	a8b39bd9cf0f	expat@2.7.5-r0	2.8.1-r0	1
library/nginx :1.29.3-alpine	b3c656d55d7a	expat@2.7.3-r0	2.8.1-r0	1
library/nginx :1.27.3	fb197595ebe7	expat@2.5.0-1+deb12u1	no fix listed	1
library/node :20	8f693eaa7e0a	expat@2.5.0-1+deb12u2	no fix listed	1
library/python :3.8-alpine	3d93b1f77efc	expat@2.6.3-r0	2.8.1-r0	1
library/python :3.8	d41127070014	expat@2.5.0-1+deb12u1	no fix listed	1
library/python :3.9	da5aee29682d	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/rabbitmq :3.12-management-alpine	0b44fbcc3a4b	expat@2.6.3-r0	2.8.1-r0	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	expat@2.2.9-1ubuntu0.6	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	expat@2.2.5-3ubuntu0.2	no fix listed	1
library/redmine :6.1.2	04ac44a2595b	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	expat@2.4.7-1ubuntu0.4	no fix listed	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	expat@2.4.7-1ubuntu0.2	no fix listed	1
library/tomcat :11.0.25-jdk17-temurin-noble	9e1d2afa6898	expat@2.6.1-2ubuntu0.4	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	expat@2.5.0-1+deb12u1	no fix listed	1
library/wordpress :6.4.3-apache	8ae66efb09a2	expat@2.5.0-1	no fix listed	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/wordpress :php8.1-apache	f73396626d2f	expat@2.7.1-2	2.8.2-1~deb13u1	1
library/xwiki :lts-postgres-tomcat	56490ac14a31	expat@2.6.1-2ubuntu0.4	no fix listed	1
library/znc :1.10.1	c731c6a9b8b6	expat@2.7.5-r0	2.8.1-r0	1
library/zookeeper :3.8-temurin	55d1e5b2e601	expat@2.4.7-1ubuntu0.2	no fix listed	1
library/zookeeper :3.9.5	cab8944a33a1	expat@2.4.7-1ubuntu0.7	no fix listed	1
library/zookeeper :3.9.4	dfa9ba46d14b	expat@2.4.7-1ubuntu0.7	no fix listed	1