StackRadar

CVE-2026-56405

Medium

Advisory

Published 21 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,373
of 17,792 indexed, latest versions
Container images
1,354
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,373 of 17,792 indexed charts deploy, on 1,354 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+32 more2.5.0-1+deb12u3, 2.8.2-1~deb13u11,106
expatapk2.5.0-r4, 2.6.4-r0, 2.6.4-r1, 2.7.0-r0+9 more2.8.2-r0248
OSV records
ALPINE-CVE-2026-56405CGA-2r65-39hv-c468DEBIAN-CVE-2026-56405UBUNTU-CVE-2026-56405
Also known as
CGA-6mc4-rw6m-8pjc, CGA-v7hc-v7f3-2f43, CGA-vxhx-gmqq-f3g8

Charts affected

1,373 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,452
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

19,270
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,455
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
expat@2.2.9-1build1
no fix listed

Open the chart page →

68,417
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

10,227
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

17,954
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
expat@2.6.4-r0
2.8.2-r0

Open the chart page →

2,589
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
expat@2.2.5-3ubuntu0.7
no fix listed

Open the chart page →

12,858
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

11,281
mini-blogmini-blog-helm0.1.02 of 3See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
beyzkaya/blog-frontend:v1.0.0bf412d75c510
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

13,107
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

43,532
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,762
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,762
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

12,175
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,546
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

19,293
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/camera-viewer:lateste418cc694bd5
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

11,708
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

9,900
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

11,008
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
2.5.0-1+deb12u3
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
2.5.0-1+deb12u3
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
2.5.0-1+deb12u3
moreillon/user-manager-front:v5.1.06597e6b98d21
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

6,877
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
no fix listed

Open the chart page →

26,022
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
no fix listed

Open the chart page →

15,727
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

5,719
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

12,027
radicalemt1905024.1.11 of 1See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,546
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

13,759
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
expat@2.2.5-3ubuntu0.7
no fix listed

Open the chart page →

8,976
pagesmuthu-pages1.0.02 of 3See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
no fix listed

Open the chart page →

12,851
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
no fix listed

Open the chart page →

12,851
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,394
Practica_4_helmmy-heml-appVerified publisher0.1.02 of 7See more

Practica_4_helm my-heml-app 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,822
nginx-chartmy-nginx-chart0.1.01 of 1See more

nginx-chart my-nginx-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
amaraiheanacho/nginx-site:latest5c86fccf5daa
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

840
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
hazegoodlife/haaze:milksite8d4c63169e14
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

9,556
myweatherhelmmyweather1.3.113 of 7See more

myweatherhelm myweather 1.3.11

3 of the 7 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
expat@2.5.0-1
2.5.0-1+deb12u3
library/rabbitmq:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
no fix listed
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

18,042
pagesnarain1.0.02 of 3See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
pagesnarasimha-pages1.0.02 of 3See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,876
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
fahncsaVerified publisher1.1.11 of 1See more

fah ncsa 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
linuxserver/foldingathome:8.5.67477f6455f47
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,087
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
expat@2.2.9-1ubuntu0.6
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
expat@2.2.5-3ubuntu0.9
no fix listed
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
expat@2.5.0-1
2.5.0-1+deb12u3
socialmediamacroscope/image_crawler:0.1.2f508216be63c
expat@2.2.5-3ubuntu0.9
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
expat@2.5.0-1
2.5.0-1+deb12u3
socialmediamacroscope/preprocessing:0.1.3ca863306314b
expat@2.5.0-1
2.5.0-1+deb12u3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

109,730
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

30,326
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,914
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

7,464
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

3,805
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,344
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,344
nginx-sitenginx-site0.1.01 of 1See more

nginx-site nginx-site 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56405.

Container imageDigestPackageFixed in
amaraiheanacho/nginx-site:latest5c86fccf5daa
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

840

Container images carrying it

1,354 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
expat@2.7.0-r0
2.8.2-r0
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
expat@2.7.1-2
2.8.2-1~deb13u1
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
expat@2.7.5-r1
2.8.2-r0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
expat@2.7.3-r0
2.8.2-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
expat@2.7.0-r0
2.8.2-r0
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
expat@2.4.7-1ubuntu0.7
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
expat@2.4.7-1ubuntu0.7
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
expat@2.4.7-1ubuntu0.4
no fix listed
1
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
expat@2.4.7-1ubuntu0.5
no fix listed
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/zazukoians/qlever-server:v0.10.11de7869ab46e
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
expat@2.2.5-3ubuntu0.9
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
expat@2.2.9-1ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
expat@2.4.7-1ubuntu0.7
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
expat@2.2.5-3ubuntu0.9
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
expat@2.6.1-2ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.