StackRadar

CVE-2026-45186

High

Advisory

Published 10 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,598
of 17,790 indexed, latest versions
Container images
1,647
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: expat security update

Carried by container images the latest versions of 1,598 of 17,790 indexed charts deploy, on 1,647 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+33 more2.8.2-1~deb13u11,131
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+10 more2.8.1-r0310
expatrpm2.2.5-3.el8, 2.2.5-3.el8_2.3, 2.2.5-4.el8, 2.2.5-4.el8_4.4+22 more0:2.5.0-2.el8_10, 0:2.5.0-6.el9_8.1206
OSV records
ALPINE-CVE-2026-45186DEBIAN-CVE-2026-45186RHSA-2026:22721RHSA-2026:23230RLSA-2026:22721RLSA-2026:23230CGA-5xh9-v979-7vhcUBUNTU-CVE-2026-45186
Also known as
CGA-6x8g-rx24-rm2q

Charts affected

1,598 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,647 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
akeyless/base-rhel:0.0.14ba8900a0061
expat@2.2.5-11.el8
0:2.5.0-2.el8_10
1
akeyless/gateway:5.3.13d2e7dce5eb9
expat@2.6.1-2ubuntu0.4
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
expat@2.6.1-2ubuntu0.4
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.8.1-r0
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
expat@2.7.4-1
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
expat@2.7.4-1
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
expat@2.6.1-2ubuntu0.3
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
expat@2.7.4-1
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
expat@2.7.4-1
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
expat@2.7.4-1
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
no fix listed
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.8.1-r0
1
alpine/helm105741fa6621
expat@2.6.2-r0
2.8.1-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.8.1-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.8.1-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.8.1-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.8.1-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.8.1-r0
1
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.8.1-r0
1
alpine/k8s:1.28.13e5c0b053fed7
expat@2.6.2-r0
2.8.1-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.8.1-r0
1
anchore/anchore-engine:v0.10.0bde9eedf639d
expat@2.2.5-4.el8
0:2.5.0-2.el8_10
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
expat@2.2.5-3.el8
0:2.5.0-2.el8_10
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
expat@2.6.1-2ubuntu0.4
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
no fix listed
1
andrianrf/backoffice:latest047a7837651e
expat@2.2.5-13.el8_10
0:2.5.0-2.el8_10
1
andrianrf/backoffice-be:latest6036614803d4
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1
1
andrianrf/iso-server:latest7da47f525c7d
expat@2.5.0-1.el9
0:2.5.0-6.el9_8.1
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
no fix listed
1
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
expat@2.6.1-2ubuntu0.4
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
expat@2.6.1-2ubuntu0.4
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
2.8.2-1~deb13u1
1
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
no fix listed
1
apache/camel-k:1.10.43bb13d14f64a
expat@2.2.5-8.el8_6.3
0:2.5.0-2.el8_10
1
apache/camel-k:2.11.0d173e7efe258
expat@2.7.4-1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
expat@2.4.7-1ubuntu0.6
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
no fix listed
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.8.1-r0
1
apache/kafka:3.9.0fbc7d7c428e3
expat@2.6.3-r0
2.8.1-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.