StackRadarChart IndexLive demo

CVE-2026-41080

Low

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.9; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,452; of 17,797 indexed, latest versions
Container images: 1,451; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,452 of 17,797 indexed charts deploy, on 1,451 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more	2.1.0-7ubuntu0.16.04.5+esm12, 2.8.2-1~deb13u1	1,139
expatapk	2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more	2.8.0-r0, 2.8.1-r0	312

OSV records: ALPINE-CVE-2026-41080 CGA-f542-4m97-5v2v DEBIAN-CVE-2026-41080 UBUNTU-CVE-2026-41080
Also known as: CGA-h7ph-x4mx-672f, USN-8520-1

Charts affected

1,452 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-41080.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	expat@2.5.0-1+deb12u3	no fix listed

Open the chart page →

—

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41080.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	expat@2.4.7-1ubuntu0.7	no fix listed

Open the chart page →

7,936

Container images carrying it

1,451 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	expat@2.5.0-1+deb12u1	no fix listed	1