StackRadar

CVE-2026-56408

Medium

Advisory

Published 21 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,394
of 17,787 indexed, latest versions
Container images
1,380
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,394 of 17,787 indexed charts deploy, on 1,380 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+32 more2.5.0-1+deb12u3, 2.8.2-1~deb13u11,126
expatapk2.5.0-r4, 2.6.4-r0, 2.6.4-r1, 2.7.0-r0+9 more2.8.2-r0254
OSV records
ALPINE-CVE-2026-56408CGA-hpc5-6g7r-r4rpDEBIAN-CVE-2026-56408UBUNTU-CVE-2026-56408
Also known as
CGA-p8q2-2q8j-3g4f, CGA-pf9w-48v9-4g6r, CGA-qh6j-h9pj-wj7h

Charts affected

1,394 by stars
ChartLatestAffected imagesRadar Score
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

14,792
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed

Open the chart page →

16,159
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed

Open the chart page →

8,073
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
samba-serversamba-serverVerified publisher1.1.01 of 1See more

samba-server samba-server 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

1,027
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
expat@2.5.0-1
2.5.0-1+deb12u3
santisbon/evworker:lateste807283f8d69
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,090
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

11,314
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

9,340
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,864
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

9,687
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,065
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,559
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,009
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

1,292
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
expat@2.6.4-r0
2.8.2-r0

Open the chart page →

2,817
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

3,265
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,865
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
expat@2.7.1-2
2.8.2-1~deb13u1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

8,082
zncschichtelVerified publisher0.3.11 of 1See more

znc schichtel 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/znc:1.10.1c731c6a9b8b6
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

748
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,019
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

6,154
cinnyappschoenwald1.0.111 of 1See more

cinnyapp schoenwald 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
expat@2.8.1-r0
2.8.2-r0

Open the chart page →

804
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
expat@2.7.5-r0
2.8.2-r0

Open the chart page →

2,134
synapse-adminschoenwald1.0.11 of 1See more

synapse-admin schoenwald 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,803
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

2,967
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
expat@2.7.4-1
no fix listed

Open the chart page →

10,429
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

2,257
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,630
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

2,748
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

2,196
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

1,770
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
expat@2.7.0-r0
2.8.2-r0

Open the chart page →

840
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

23,022
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

5,496
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
expat@2.7.1-r0
2.8.2-r0

Open the chart page →

1,292
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,322
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.2-r0

Open the chart page →

1,322
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
expat@2.7.4-r4
2.8.2-r0

Open the chart page →

5,230
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

10,972
frontendsignalen4.24.01 of 1See more

frontend signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
signalen/frontend:2.27.81ab79cb7fe21
expat@2.8.1-r0
2.8.2-r0

Open the chart page →

1,161
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

5,894
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

9,235
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

3,929
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,571
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,793
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56408.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,827

Container images carrying it

1,380 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
2.5.0-1+deb12u3
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
2.5.0-1+deb12u3
2
nacos/nacos-server:latest1c191c30c8cd
expat@2.7.4-1
no fix listed
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
expat@2.7.0-r0
2.8.2-r0
2
obolnetwork/charon:v1.10.0278c7e2897b6
expat@2.7.1-2
2.8.2-1~deb13u1
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
expat@2.2.9-1ubuntu0.4
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
2
opea/embedding-tei:1.05c9639de61c1
expat@2.5.0-1
2.5.0-1+deb12u3
2
opea/reranking-tei:1.0e48613afb191
expat@2.5.0-1
2.5.0-1+deb12u3
2
opea/retriever-redis:1.0eb746b263705
expat@2.5.0-1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
2.5.0-1+deb12u3
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
expat@2.4.7-1ubuntu0.2
no fix listed
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
expat@2.4.7-1ubuntu0.4
no fix listed
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
expat@2.4.7-1ubuntu0.3
no fix listed
2
requarks/wiki:2:latest68f0d1848261
expat@2.7.5-r0
2.8.2-r0
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
expat@2.5.0-1
2.5.0-1+deb12u3
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
expat@2.2.9-1ubuntu0.6
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
expat@2.4.7-1
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed
2
uffizzi/controller:latest0344805f267b
expat@2.5.0-1
2.5.0-1+deb12u3
2
uselagoon/docker-host:v3.6.12c89ed939b8b
expat@2.7.0-r0
2.8.2-r0
2
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
2.5.0-1+deb12u3
2
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
expat@2.4.7-1ubuntu0.6
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
expat@2.6.1-2ubuntu0.3
no fix listed
2
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
expat@2.8.1-r0
2.8.2-r0
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
expat@2.2.9-1build1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
expat@2.2.9-1build1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
expat@2.2.9-1build1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
expat@2.5.0-1
2.5.0-1+deb12u3
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
expat@2.8.1-r0
2.8.2-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
expat@2.8.1-r0
2.8.2-r0
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
expat@2.2.5-3ubuntu0.2
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
expat@2.6.1-2ubuntu0.4
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
expat@2.6.1-2ubuntu0.4
no fix listed
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.