StackRadar

CVE-2026-56405

Medium

Advisory

Published 21 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,391
of 17,792 indexed, latest versions
Container images
1,374
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,391 of 17,792 indexed charts deploy, on 1,374 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+32 more2.5.0-1+deb12u3, 2.8.2-1~deb13u11,121
expatapk2.5.0-r4, 2.6.4-r0, 2.6.4-r1, 2.7.0-r0+9 more2.8.2-r0253
OSV records
ALPINE-CVE-2026-56405CGA-2r65-39hv-c468DEBIAN-CVE-2026-56405UBUNTU-CVE-2026-56405
Also known as
CGA-6mc4-rw6m-8pjc, CGA-v7hc-v7f3-2f43, CGA-vxhx-gmqq-f3g8

Charts affected

1,391 by stars
ChartLatestAffected imagesRadar Score
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed

Open the chart page →

8,146
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
samba-serversamba-serverVerified publisher1.1.01 of 1See more

samba-server samba-server 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

1,030
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
expat@2.5.0-1
2.5.0-1+deb12u3
santisbon/evworker:lateste807283f8d69
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

14,313
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,769
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

10,236
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

4,144
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

9,863
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,410
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,715
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

13,610
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

1,294
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
expat@2.6.4-r0
2.8.2-r0

Open the chart page →

2,820
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

3,276
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,893
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
expat@2.7.1-2
2.8.2-1~deb13u1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

8,316
zncschichtelVerified publisher0.3.11 of 1See more

znc schichtel 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/znc:1.10.1c731c6a9b8b6
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

750
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,234
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

6,224
cinnyappschoenwald1.0.111 of 1See more

cinnyapp schoenwald 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
expat@2.8.1-r0
2.8.2-r0

Open the chart page →

800
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

2,130
synapse-adminschoenwald1.0.11 of 1See more

synapse-admin schoenwald 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,798
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,035
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
expat@2.7.4-1
no fix listed

Open the chart page →

10,464
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

2,260
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,931
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

3,136
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

2,298
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

1,872
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

843
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

23,099
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

5,510
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

1,294
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,317
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,317
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
expat@2.7.4-r4
2.8.2-r0

Open the chart page →

5,254
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,262
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

11,719
frontendsignalen4.24.01 of 1See more

frontend signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
signalen/frontend:2.27.81ab79cb7fe21
expat@2.8.1-r0
2.8.2-r0

Open the chart page →

1,157
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

5,908
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

9,256
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,988
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,592
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,874
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,908
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

28,576
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,874
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

24,881

Container images carrying it

1,374 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
expat@2.6.1-2ubuntu0.1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
expat@2.6.4-r0
2.8.2-r0
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
expat@2.7.0-r0
2.8.2-r0
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/firecrawl/firecrawl:2.11.34132de0537d308
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
expat@2.7.2-r0
2.8.2-r0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
expat@2.7.2-r0
2.8.2-r0
1
ghcr.io/gchq/cyberchef:11.0.045082a0ac41d
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
expat@2.6.4-r0
2.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
expat@2.8.1-r0
2.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
expat@2.8.1-r0
2.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
expat@2.8.1-r0
2.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
expat@2.7.3-r0
2.8.2-r0
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
expat@2.8.1-r0
2.8.2-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
expat@2.7.1-r0
2.8.2-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
expat@2.7.3-r0
2.8.2-r0
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
expat@2.7.0-r0
2.8.2-r0
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.