StackRadar

CVE-2026-41080

Low

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,441
of 17,792 indexed, latest versions
Container images
1,439
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,441 of 17,792 indexed charts deploy, on 1,439 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.1.0-7ubuntu0.16.04.5+esm12, 2.8.2-1~deb13u11,130
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more2.8.0-r0, 2.8.1-r0309
OSV records
ALPINE-CVE-2026-41080CGA-f542-4m97-5v2vDEBIAN-CVE-2026-41080UBUNTU-CVE-2026-41080
Also known as
CGA-h7ph-x4mx-672f, USN-8520-1

Charts affected

1,441 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,439 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
featurehub/dacha2:1.9.1c8d5551b5e40
expat@2.7.0-r0
2.8.1-r0
1
featurehub/edge:1.9.198ad426737f6
expat@2.7.0-r0
2.8.1-r0
1
featurehub/mr:1.9.1477d8bf771a9
expat@2.7.0-r0
2.8.1-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
expat@2.7.1-2
2.8.2-1~deb13u1
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
expat@2.2.9-1ubuntu0.8
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
expat@2.5.0-1+deb12u1
no fix listed
1
flanksource/batch-runner:v1.0.44689687a7cf95
expat@2.6.1-2ubuntu0.3
no fix listed
1
flashcatcloud/categraf:latest42e6ab16472e
expat@2.6.1-2ubuntu0.4
no fix listed
1
flowable/flowable-rest:7.1.0b7ae287502cd
expat@2.6.3-r0
2.8.1-r0
1
fluent/fluent-bit:4.0-debuge76397ef3983
expat@2.5.0-1+deb12u2
no fix listed
1
flyway/flyway:9.1545b5d7cdc75a
expat@2.2.9-1ubuntu0.6
no fix listed
1
fnzv/dump1090:latestb3079b95c336
expat@2.4.7-1ubuntu0.2
no fix listed
1
folioci/edge-connexion:latestb4863d135524
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-agreements:latest29c3f233a498
expat@2.6.2-r0
2.8.1-r0
1
folioci/mod-authtoken:latest995a25a33133
expat@2.7.4-r0
2.8.1-r0
1
folioci/mod-copycat:latest1513fad2b799
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-courses:latest68ca414f5596
expat@2.7.4-r0
2.8.1-r0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-eusage-reports:latest15de67587091
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-ldp:latestb55696fd9065
expat@2.7.0-r0
2.8.1-r0
1
folioci/mod-licenses:latestcfd6109bf477
expat@2.6.2-r0
2.8.1-r0
1
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-oa:latestae3b069d4ba5
expat@2.6.2-r0
2.8.1-r0
1
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-pubsub:latest0a4fa4ad5d72
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-search:latest44d7ee9acdf6
expat@2.7.1-r0
2.8.1-r0
1
folioci/mod-serials-management:latest571fa1ffe8c9
expat@2.6.2-r0
2.8.1-r0
1
folioci/mod-service-interaction:latestf53c327a48e8
expat@2.6.2-r0
2.8.1-r0
1
folioci/mod-user-import:latest1807734472bd
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-users-bl:latest4e2d96c9340d
expat@2.7.5-r0
2.8.1-r0
1
folioci/mod-z3950:latest2493041ce880
expat@2.7.1-2
2.8.2-1~deb13u1
1
fosrl/pangolin:1.13.0c32ad797ab96
expat@2.7.3-r0
2.8.1-r0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
expat@2.2.5-3ubuntu0.9
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
expat@2.2.5-3ubuntu0.7
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
expat@2.6.1-2ubuntu0.4
no fix listed
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
expat@2.4.7-1ubuntu0.6
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
expat@2.2.9-1ubuntu0.4
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
expat@2.1.0-4ubuntu1.4
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
expat@2.1.0-4ubuntu1.4
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
expat@2.5.0-1+deb12u1
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
expat@2.6.1-2ubuntu0.2
no fix listed
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
expat@2.7.3-r0
2.8.1-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
expat@2.7.3-r0
2.8.1-r0
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
expat@2.2.5-3ubuntu0.9
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
expat@2.4.7-1ubuntu0.7
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
expat@2.5.0-1+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.