StackRadar

CVE-2026-56407

Medium

Advisory

Published 21 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,393
of 17,790 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,393 of 17,790 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+32 more2.5.0-1+deb12u3, 2.8.2-1~deb13u11,124
expatapk2.5.0-r4, 2.6.4-r0, 2.6.4-r1, 2.7.0-r0+9 more2.8.2-r0253
OSV records
ALPINE-CVE-2026-56407CGA-c74f-vmw4-2hx6DEBIAN-CVE-2026-56407UBUNTU-CVE-2026-56407
Also known as
CGA-2x58-v45m-v39g, CGA-4q57-wfc4-m3hp, CGA-j395-chh6-c4p3

Charts affected

1,393 by stars
ChartLatestAffected imagesRadar Score
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

10,157
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

8,441
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,983
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

14,642
logstream-leadercriblio4.19.21 of 1See more

logstream-leader criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,277
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

9,296
logstream-workergroupcriblio4.19.21 of 1See more

logstream-workergroup criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,277
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,883
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
opencsghq/kubectl:latestb6d87e1048c2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

59,452
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

11,544
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

15,419
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
expat@2.2.9-1ubuntu0.6
no fix listed
wazuh/wazuh-manager:4.4.121994f40e0da
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

13,944
cspconsolecspconsole1.3.113 of 5See more

cspconsole cspconsole 1.3.11

3 of the 5 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
library/nginx:1.28-alpinea8b39bd9cf0f
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

12,394
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,548
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,683
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,440
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

3,983
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
expat@2.6.1-2ubuntu0.4
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

14,322
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

22,355
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,142
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
no fix listed

Open the chart page →

27,768
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

18,881
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,184
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,035
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
no fix listed

Open the chart page →

22,445
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,230
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
no fix listed

Open the chart page →

24,375
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

15,861
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,163
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,242
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,849
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,005
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

6,092
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,254
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,149
deployhubdeployhubVerified publisher10.0.4155 of 11See more

deployhub deployhub 10.0.415

5 of the 11 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
expat@2.7.3-r0
2.8.2-r0
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
expat@2.7.3-r0
2.8.2-r0
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
expat@2.7.3-r0
2.8.2-r0
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
expat@2.7.3-r0
2.8.2-r0
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
expat@2.7.3-r0
2.8.2-r0

Open the chart page →

11,191
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

14,920
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
expat@2.6.4-r0
2.8.2-r0

Open the chart page →

2,097
frontend-servicedev-krishan-dhaka-charts1.0.21 of 1See more

frontend-service dev-krishan-dhaka-charts 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
devkrishan001/frontend:latesta0ad60836e6b
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

1,037
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

30,156
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

29,157
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

9,685
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

13,011
devtron-enterprisedevtron48.0.04 of 28See more

devtron-enterprise devtron 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
expat@2.8.1-r0
2.8.2-r0
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
expat@2.6.1-2ubuntu0.4
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
2.5.0-1+deb12u3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

68,695
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,959
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56407.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

9,685

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
expat@2.4.7-1ubuntu0.4
no fix listed
1
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
expat@2.7.4-r0
2.8.2-r0
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
expat@2.4.7-1ubuntu0.5
no fix listed
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
expat@2.7.5-r0
2.8.2-r0
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/zazukoians/qlever-server:v0.10.11de7869ab46e
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
expat@2.7.1-r0
2.8.2-r0
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
expat@2.2.5-3ubuntu0.9
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
expat@2.2.9-1ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
expat@2.4.7-1ubuntu0.7
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
expat@2.2.5-3ubuntu0.9
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
expat@2.6.1-2ubuntu0.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
expat@2.6.1-2ubuntu0.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
expat@2.6.1-2ubuntu0.3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
expat@2.6.1-2ubuntu0.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
expat@2.7.5-r0
2.8.2-r0
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
expat@2.7.4-1
no fix listed
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
expat@2.7.5-r0
2.8.2-r0
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
expat@2.5.0-1
2.5.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
expat@2.5.0-1
2.5.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
expat@2.5.0-1
2.5.0-1+deb12u3
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
expat@2.5.0-1
2.5.0-1+deb12u3
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
expat@2.2.9-1build1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
expat@2.5.0-1
2.5.0-1+deb12u3
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
expat@2.7.4-1
no fix listed
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
expat@2.4.7-1
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
expat@2.6.1-2ubuntu0.3
no fix listed
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
expat@2.6.1-2ubuntu0.3
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
expat@2.4.7-1ubuntu0.2
no fix listed
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
expat@2.7.5-r0
2.8.2-r0
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
expat@2.7.3-r0
2.8.2-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.