StackRadar

CVE-2026-45186

High

Advisory

Published 10 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,598
of 17,792 indexed, latest versions
Container images
1,645
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,598 of 17,792 indexed charts deploy, on 1,645 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.8.2-1~deb13u11,130
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more2.8.1-r0309
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+22 more0:2.5.0-2.el8_10, 0:2.5.0-6.el9_8.1206
OSV records
ALPINE-CVE-2026-45186DEBIAN-CVE-2026-45186RHSA-2026:22721RHSA-2026:23230RLSA-2026:22721RLSA-2026:23230CGA-5xh9-v979-7vhcUBUNTU-CVE-2026-45186
Also known as
CGA-6x8g-rx24-rm2q

Charts affected

1,598 by stars
ChartLatestAffected imagesRadar Score
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

8,441
bitcoincosmicrocks2.0.31 of 2See more

bitcoin cosmicrocks 2.0.3

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/knots:29.2.knots20251010d7db5cd4079b
expat@2.7.3-r0
2.8.1-r0

Open the chart page →

927
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,983
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
expat@2.7.0-r0
2.8.1-r0

Open the chart page →

1,932
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

14,642
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
confluentinc/cp-zookeeper:6.1.078c190f4472c
expat@2.2.5-4.el8
0:2.5.0-2.el8_10

Open the chart page →

58,869
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

9,296
piwigocronce0.0.61 of 1See more

piwigo cronce 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
mathieuruellan/piwigo:latest04572c8a1b04
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

1,084
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,883
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
expat@2.7.0-r0
2.8.1-r0

Open the chart page →

11,544
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
no fix listed

Open the chart page →

15,419
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
expat@2.2.9-1ubuntu0.6
no fix listed
wazuh/wazuh-manager:4.4.121994f40e0da
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

13,944
cspconsolecspconsole1.3.113 of 5See more

cspconsole cspconsole 1.3.11

3 of the 5 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
no fix listed
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
no fix listed
library/nginx:1.28-alpinea8b39bd9cf0f
expat@2.7.5-r0
2.8.1-r0

Open the chart page →

12,394
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,548
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
no fix listed

Open the chart page →

16,683
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,440
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
expat@2.6.2-r0
2.8.1-r0

Open the chart page →

1,141
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
expat@2.7.5-r0
2.8.1-r0

Open the chart page →

3,983
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
expat@2.6.1-2ubuntu0.4
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

14,322
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.1-r0

Open the chart page →

22,355
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
razzy10/product-service:latest702e411956db
expat@2.5.0-5.el9_6
0:2.5.0-6.el9_8.1

Open the chart page →

3,598
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,142
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
no fix listed

Open the chart page →

27,768
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

18,881
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,184
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,035
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
no fix listed

Open the chart page →

22,445
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,230
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
no fix listed

Open the chart page →

24,375
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
expat@2.2.5-4.el8
0:2.5.0-2.el8_10

Open the chart page →

7,494
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

15,861
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,163
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,849
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

3,005
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
no fix listed

Open the chart page →

6,092
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
expat@2.5.0-2.el9_4.1
0:2.5.0-6.el9_8.1

Open the chart page →

3,233
prometheus-dellhw-exporterdellhw-exporterVerified publisher1.3.01 of 1See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
expat@2.5.0-5.el9_7.1
0:2.5.0-6.el9_8.1

Open the chart page →

1,855
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,254
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,149
deployhubdeployhubVerified publisher10.0.4155 of 11See more

deployhub deployhub 10.0.415

5 of the 11 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
expat@2.7.3-r0
2.8.1-r0
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
expat@2.7.3-r0
2.8.1-r0
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
expat@2.7.3-r0
2.8.1-r0
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
expat@2.7.3-r0
2.8.1-r0
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
expat@2.7.3-r0
2.8.1-r0

Open the chart page →

11,191
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

14,920
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
expat@2.6.4-r0
2.8.1-r0

Open the chart page →

2,097
frontend-servicedev-krishan-dhaka-charts1.0.21 of 1See more

frontend-service dev-krishan-dhaka-charts 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
devkrishan001/frontend:latesta0ad60836e6b
expat@2.7.5-r0
2.8.1-r0

Open the chart page →

1,037
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-45186.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

30,156

Container images carrying it

1,645 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-45186.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.