CVE-2026-41080

Low

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.9; base score, highest
EPSS: 0.004; 33rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,454; of 17,790 indexed, latest versions
Container images: 1,457; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,454 of 17,790 indexed charts deploy, on 1,457 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more	2.1.0-7ubuntu0.16.04.5+esm12, 2.8.2-1~deb13u1	1,144
expatapk	2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more	2.8.0-r0, 2.8.1-r0	313

OSV records: ALPINE-CVE-2026-41080 CGA-f542-4m97-5v2v DEBIAN-CVE-2026-41080 UBUNTU-CVE-2026-41080
Also known as: CGA-h7ph-x4mx-672f, USN-8520-1

Charts affected

1,454 by stars

Chart

Latest

Affected images

Radar Score

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	expat@2.4.7-1ubuntu0.3	no fix listed

Open the chart page →

14,173

tabbyxd

1.0.6

1 of 2 See more

7,697

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	expat@2.5.0-1+deb12u1	no fix listed
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	expat@2.6.3-r0	2.8.1-r0

Open the chart page →

13,783

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	expat@2.4.7-1ubuntu0.7	no fix listed

Open the chart page →

7,929

Container images carrying it

1,457 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	expat@2.5.0-1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	expat@2.5.0-1	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	expat@2.5.0-1	no fix listed	2
nacos/nacos-server :latest	1c191c30c8cd	expat@2.7.4-1	no fix listed	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	expat@2.7.0-r0	2.8.1-r0	2
obolnetwork/charon :v1.10.0	278c7e2897b6	expat@2.7.1-2	2.8.2-1~deb13u1	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	expat@2.2.9-1ubuntu0.4	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm12	2
opea/chatqna-conversation-ui :1.0	02d5674ca863	expat@2.6.3-r0	2.8.1-r0	2
opea/embedding-tei :1.0	5c9639de61c1	expat@2.5.0-1	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	expat@2.5.0-1	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	expat@2.5.0-1	no fix listed	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	expat@2.7.0-r0	2.8.1-r0	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	expat@2.5.0-1+deb12u1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	expat@2.5.0-1+deb12u1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	expat@2.5.0-1+deb12u1	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	expat@2.5.0-1+deb12u1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	expat@2.5.0-1+deb12u1	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	expat@2.5.0-1+deb12u1	no fix listed	2
opendatacube/ows :latest	668cbb41473c	expat@2.6.1-2ubuntu0.2	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	expat@2.4.7-1	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	expat@2.5.0-1	no fix listed	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	expat@2.4.7-1ubuntu0.2	no fix listed	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	expat@2.4.7-1ubuntu0.4	no fix listed	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	expat@2.4.7-1ubuntu0.3	no fix listed	2
requarks/wiki :2 :latest	68f0d1848261	expat@2.7.5-r0	2.8.1-r0	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	expat@2.2.9-1ubuntu0.4	no fix listed	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	expat@2.5.0-1	no fix listed	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	expat@2.2.9-1ubuntu0.6	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	expat@2.4.7-1	no fix listed	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	expat@2.4.7-1ubuntu0.2	no fix listed	2
uffizzi/controller :latest	0344805f267b	expat@2.5.0-1	no fix listed	2
uselagoon/docker-host :v3.6.1	2c89ed939b8b	expat@2.7.0-r0	2.8.1-r0	2
vdiogov/glpi-conteiner :latest	6945f84f0058	expat@2.5.0-1	no fix listed	2
wurstmeister/zookeeper :latest	7a7fd44a7210	expat@2.1.0-4ubuntu1	no fix listed	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	expat@2.4.7-1ubuntu0.6	no fix listed	2
ghcr.io/browserless/chromium :v2.56.7	b1ba7b054af2	expat@2.6.1-2ubuntu0.4	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	expat@2.6.1-2ubuntu0.3	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	expat@2.4.7-1	no fix listed	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	expat@2.4.7-1	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	expat@2.5.0-1+deb12u2	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.5.2	c80ae007ce2c	expat@2.5.0-1+deb12u3	no fix listed	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	expat@2.2.9-1build1	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	expat@2.2.9-1build1	no fix listed	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	expat@2.2.9-1build1	no fix listed	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	expat@2.5.0-1	no fix listed	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	expat@2.2.5-3ubuntu0.2	no fix listed	2
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	expat@2.5.0-1+deb12u2	no fix listed	2
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	expat@2.6.1-2ubuntu0.4	no fix listed	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	expat@2.5.0-1+deb12u1	no fix listed	2