StackRadar

CVE-2026-45186

High

Advisory

Published 10 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,598
of 17,792 indexed, latest versions
Container images
1,645
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,598 of 17,792 indexed charts deploy, on 1,645 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.8.2-1~deb13u11,130
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more2.8.1-r0309
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+22 more0:2.5.0-2.el8_10, 0:2.5.0-6.el9_8.1206
OSV records
ALPINE-CVE-2026-45186DEBIAN-CVE-2026-45186RHSA-2026:22721RHSA-2026:23230RLSA-2026:22721RLSA-2026:23230CGA-5xh9-v979-7vhcUBUNTU-CVE-2026-45186
Also known as
CGA-6x8g-rx24-rm2q

Charts affected

1,598 by stars
ChartLatestAffected imagesRadar Score
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
expat@2.5.0-1
no fix listed

Open the chart page →

15,278
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
no fix listed

Open the chart page →

41,444
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
expat@2.2.5-3ubuntu0.7
no fix listed
linuxserver/codimd:latestb801bbcf6386
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

27,493
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

27,684
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,297
firecrawlobeoneVerified publisher3.0.52See more

firecrawl obeone 3.0.5

2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-management-alpine606d8c0d6b3c
expat@2.7.3-r0
2.8.1-r0
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

—
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,093
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.8.1-r0

Open the chart page →

17,134
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
expat@2.7.4-r0
2.8.1-r0

Open the chart page →

2,353
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
expat@2.7.5-r0
2.8.1-r0

Open the chart page →

1,110
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
expat@2.6.3-r0
2.8.1-r0

Open the chart page →

5,826
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
expat@2.6.1-2ubuntu0.1
no fix listed

Open the chart page →

2,631
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,360
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

9,062
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
expat@2.2.5-11.el8
0:2.5.0-2.el8_10
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
expat@2.2.5-11.el8
0:2.5.0-2.el8_10
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

18,667
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

6,096
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed

Open the chart page →

9,747
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

5,699
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
expat@2.2.5-4.el8
0:2.5.0-2.el8_10

Open the chart page →

18,032
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
expat@2.2.5-3
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

63,280
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

88,653
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

26,246
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

15,718
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
woojoong/wowza:latestec230db19652
expat@2.2.5-3
no fix listed

Open the chart page →

42,655
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

29,156
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
expat@2.2.9-1build1
no fix listed
omecproject/mme-exporter:paging-latestbcc5f19fd676
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

40,825
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

12,942
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

38,902
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
expat@2.1.0-7ubuntu0.16.04.4
no fix listed

Open the chart page →

12,626
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
voltha/voltha-cli:1.6.0c4e41e92f046
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
expat@2.1.0-4ubuntu1.4
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

93,946
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
expat@2.2.5-3ubuntu0.2
no fix listed
voltha/voltha-onos:5.1.8e038acb950d3
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

41,101
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

11,051
opencost-lensopencost-lens1.0.01 of 2See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
expat@2.7.3-r0
2.8.1-r0

Open the chart page →

1,110
minioopenobserve5.0.71 of 2See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
expat@2.2.5-10.el8_7.1
0:2.5.0-2.el8_10

Open the chart page →

7,471
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

12,185
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
expat@2.2.5-13.el8_10
0:2.5.0-2.el8_10
andrianrf/backoffice-be:latest6036614803d4
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1
andrianrf/iso-server:latest7da47f525c7d
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1

Open the chart page →

35,116
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
expat@2.2.5-13.el8_10
0:2.5.0-2.el8_10

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
expat@2.5.0-2.el9_4.1
0:2.5.0-6.el9_8.1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
expat@2.5.0-2.el9_4
0:2.5.0-6.el9_8.1

Open the chart page →

19,051
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
expat@2.2.5-16.el8_10
0:2.5.0-2.el8_10
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
expat@2.5.0-3.el9_5.1
0:2.5.0-6.el9_8.1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
expat@2.5.0-3.el9_5.1
0:2.5.0-6.el9_8.1

Open the chart page →

13,041
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
expat@2.2.5-10.el8
0:2.5.0-2.el8_10
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
expat@2.2.5-10.el8
0:2.5.0-2.el8_10

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
expat@2.2.5-10.el8
0:2.5.0-2.el8_10

Open the chart page →

16,563
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
expat@2.5.0-5.el9_7.1
0:2.5.0-6.el9_8.1

Open the chart page →

4,170
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
expat@2.5.0-1.el8_10
0:2.5.0-2.el8_10

Open the chart page →

5,863
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
expat@2.2.5-4.el8
0:2.5.0-2.el8_10

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
expat@2.2.5-10.el8
0:2.5.0-2.el8_10

Open the chart page →

19,471
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1

Open the chart page →

8,643
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

13,612
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

13,573
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
expat@2.2.5-11.el8
0:2.5.0-2.el8_10

Open the chart page →

13,556

Container images carrying it

1,645 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/grycap/im:latest06a16d4f279f
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
expat@2.5.0-1
no fix listed
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
expat@2.6.4-r0
2.8.1-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
expat@2.7.3-r0
2.8.1-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
expat@2.7.1-r0
2.8.1-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
expat@2.7.4-r0
2.8.1-r0
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
expat@2.7.3-r0
2.8.1-r0
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
expat@2.7.5-r0
2.8.1-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
expat@2.7.0-r0
2.8.1-r0
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
no fix listed
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
expat@2.5.0-5.el9_6
0:2.5.0-6.el9_8.1
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
expat@2.5.0-5.el9_6
0:2.5.0-6.el9_8.1
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1
1
ghcr.io/itzg/minecraft-server:latest46919d151d39
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
expat@2.7.0-r0
2.8.1-r0
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
expat@2.2.5-3.el8
0:2.5.0-2.el8_10
1
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
expat@2.7.3-r0
2.8.1-r0
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
expat@2.6.1-2ubuntu0.1
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
expat@2.2.5-3ubuntu0.9
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
expat@2.6.1-2ubuntu0.2
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
expat@2.6.1-2ubuntu0.2
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
expat@2.2.9-1build1
no fix listed
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
expat@2.2.9-1ubuntu0.2
no fix listed
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
expat@2.4.7-1
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
expat@2.4.7-1
no fix listed
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.1-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.