StackRadar

CVE-2026-41080

Low

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,454
of 17,792 indexed, latest versions
Container images
1,456
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,454 of 17,792 indexed charts deploy, on 1,456 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.1.0-7ubuntu0.16.04.5+esm12, 2.8.2-1~deb13u11,143
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more2.8.0-r0, 2.8.1-r0313
OSV records
ALPINE-CVE-2026-41080CGA-f542-4m97-5v2vDEBIAN-CVE-2026-41080UBUNTU-CVE-2026-41080
Also known as
CGA-h7ph-x4mx-672f, USN-8520-1

Charts affected

1,454 by stars
ChartLatestAffected imagesRadar Score
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,784
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

8,261
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
expat@2.6.1-2ubuntu0.3
no fix listed
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed

Open the chart page →

16,357
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

22,165
piepieVerified publisher0.11.11 of 1See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pie:0.18.0aa467443e407
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

2,171
pagespighosh-pages1.0.02 of 3See more

pages pighosh-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

7,193
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
expat@2.5.0-1
no fix listed

Open the chart page →

11,423
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
expat@2.2.9-1ubuntu0.7
no fix listed

Open the chart page →

6,777
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
expat@2.2.9-1ubuntu0.7
no fix listed

Open the chart page →

6,722
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

4,971
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
no fix listed

Open the chart page →

12,009
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
no fix listed

Open the chart page →

7,632
planectlplanectlVerified publisher0.7.04 of 10See more

planectl planectl 0.7.0

4 of the 10 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.8.1-r0
gitea/act_runner:0.2.11c57233403eff
expat@2.6.3-r0
2.8.1-r0
library/node:208f693eaa7e0a
expat@2.5.0-1+deb12u2
no fix listed
quay.io/argoproj/argocd:v2.14.115fc69e31c755
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

26,158
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,338
k8s-node-image9-1-24pnnl-miscscripts0.2.1492 of 2See more

k8s-node-image9-1-24 pnnl-miscscripts 0.2.149

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-25pnnl-miscscripts0.2.1052 of 2See more

k8s-node-image9-1-25 pnnl-miscscripts 0.2.105

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-26pnnl-miscscripts0.2.922 of 2See more

k8s-node-image9-1-26 pnnl-miscscripts 0.2.92

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-27pnnl-miscscripts0.2.902 of 2See more

k8s-node-image9-1-27 pnnl-miscscripts 0.2.90

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-28pnnl-miscscripts0.2.1022 of 2See more

k8s-node-image9-1-28 pnnl-miscscripts 0.2.102

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-29pnnl-miscscripts0.2.642 of 2See more

k8s-node-image9-1-29 pnnl-miscscripts 0.2.64

2 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
expat@2.6.4-r0
2.8.1-r0
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

1,492
k8s-node-image9-1-30pnnl-miscscripts0.2.561 of 2See more

k8s-node-image9-1-30 pnnl-miscscripts 0.2.56

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

620
k8s-node-image9-1-31pnnl-miscscripts0.2.271 of 2See more

k8s-node-image9-1-31 pnnl-miscscripts 0.2.27

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

620
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

4,297
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
expat@2.5.0-1
no fix listed

Open the chart page →

12,998
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

9,227
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
expat@2.5.0-1
no fix listed

Open the chart page →

6,587
Practica_4_helmpr04helm0.1.02 of 7See more

Practica_4_helm pr04helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,697
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
library/rabbitmq:3-management-alpine606d8c0d6b3c
expat@2.7.3-r0
2.8.1-r0
slagattollas/weatherservice-practica:latest68e7f56393fc
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

28,537
pagesprasanthi1.0.02 of 3See more

pages prasanthi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
expat@2.5.0-1
no fix listed

Open the chart page →

5,534
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

3,328
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
expat@2.5.0-1
no fix listed

Open the chart page →

8,233
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
expat@2.7.3-r0
2.8.1-r0

Open the chart page →

2,756
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
expat@2.7.3-r0
2.8.1-r0

Open the chart page →

3,275
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,449
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
expat@2.7.0-r0
2.8.1-r0

Open the chart page →

3,366
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

2,856
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,162
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
expat@2.5.0-1
no fix listed

Open the chart page →

14,624
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
no fix listed

Open the chart page →

12,652
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
no fix listed

Open the chart page →

12,652
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

4,408
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,702
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,497
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

21,287
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,090
app-config-frontendradar-baseVerified publisher2.4.11 of 1See more

app-config-frontend radar-base 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

807
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,471
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,073

Container images carrying it

1,456 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.1-r0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
expat@2.7.1-r0
2.8.1-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
expat@2.7.4-r0
2.8.1-r0
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/kubelauncher/cassandrab66aba320083
expat@2.7.4-1
no fix listed
1
ghcr.io/kubelauncher/kubectl7280594a2f18
expat@2.7.4-1
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
no fix listed
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
expat@2.6.4-r0
2.8.1-r0
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.8.1-r0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/duplicati:latesta792931146b4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.1-r0
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
expat@2.6.2-r0
2.8.1-r0
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.1-r0
1
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
expat@2.7.4-1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.13f6ab3c93e4e
expat@2.7.4-1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.