CVE-2026-66046
HighAdvisory
Published 18 Aug 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.006
- 46th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,771
- of 17,790 indexed, latest versions
- Container images
- 1,636
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
CVE-2026-66046 affecting package expat for versions less than 2.8.3-2
Carried by container images the latest versions of 1,771 of 17,790 indexed charts deploy, on 1,636 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| expatdeb | 2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+36 more | 2.8.4-1 | 1,230 |
| expatapk | 2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more | 2.8.4-r0 | 404 |
| expatrpm | 2.8.2-1.azl3 | 2.8.3-2 | 2 |
Charts affected
1,771 by stars
Container images carrying it
1,636 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| firefart/ | 0d6249906d8c | expat | no fix listed | 1 |
| fireflyiii/ | ae69fdd95cde | expat | no fix listed | 1 |
| fiware/ | 29456835bb2c | expat | no fix listed | 1 |
| fiware/ | d551a13e8278 | expat | no fix listed | 1 |
| flanksource/ | 689687a7cf95 | expat | no fix listed | 1 |
| flashcatcloud/ | 42e6ab16472e | expat | no fix listed | 1 |
| fluent/ | e76397ef3983 | expat | no fix listed | 1 |
| flyway/ | 45b5d7cdc75a | expat | no fix listed | 1 |
| fnzv/ | b3079b95c336 | expat | no fix listed | 1 |
| folioci/ | c3cfa89eee2f | expat | 2.8.4-r0 | 1 |
| folioci/ | b4863d135524 | expat | 2.8.4-r0 | 1 |
| folioci/ | 48c9b1d180d4 | expat | 2.8.4-r0 | 1 |
| folioci/ | c64e4d9dd3fc | expat | 2.8.4-r0 | 1 |
| folioci/ | e760dbb81d1a | expat | 2.8.4-r0 | 1 |
| folioci/ | eedfcbc29792 | expat | 2.8.4-r0 | 1 |
| folioci/ | 1ef654ee9f23 | expat | 2.8.4-r0 | 1 |
| folioci/ | 682b852e056d | expat | 2.8.4-r0 | 1 |
| folioci/ | 15ef73b1abd0 | expat | 2.8.4-r0 | 1 |
| folioci/ | 86106f20ef51 | expat | 2.8.4-r0 | 1 |
| folioci/ | 995a25a33133 | expat | 2.8.4-r0 | 1 |
| folioci/ | 22f65982efd7 | expat | 2.8.4-r0 | 1 |
| folioci/ | 6bdddcafbc0f | expat | 2.8.4-r0 | 1 |
| folioci/ | dd0cdc89670a | expat | 2.8.4-r0 | 1 |
| folioci/ | 1513fad2b799 | expat | 2.8.4-r0 | 1 |
| folioci/ | 68ca414f5596 | expat | 2.8.4-r0 | 1 |
| folioci/ | 0cc86bf09755 | expat | 2.8.4-r0 | 1 |
| folioci/ | f1d7caf4544b | expat | 2.8.4-r0 | 1 |
| folioci/ | 1ad1811c9b37 | expat | 2.8.4-r0 | 1 |
| folioci/ | 3ae8cb99daa3 | expat | 2.8.4-r0 | 1 |
| folioci/ | 79ea8e2e7ebf | expat | 2.8.4-r0 | 1 |
| folioci/ | 3e2412815c0f | expat | 2.8.4-r0 | 1 |
| folioci/ | 2d6767933c59 | expat | 2.8.4-r0 | 1 |
| folioci/ | 15de67587091 | expat | 2.8.4-r0 | 1 |
| folioci/ | 0192adad3897 | expat | 2.8.4-r0 | 1 |
| folioci/ | 14450bc15430 | expat | 2.8.4-r0 | 1 |
| folioci/ | 4bc4057abaea | expat | 2.8.4-r0 | 1 |
| folioci/ | c58c989dac44 | expat | 2.8.4-r0 | 1 |
| folioci/ | cc8584e43382 | expat | 2.8.4-r0 | 1 |
| folioci/ | f92ff0a3ca40 | expat | 2.8.4-r0 | 1 |
| folioci/ | ba84812b4d58 | expat | 2.8.4-r0 | 1 |
| folioci/ | 45b7b13e81e1 | expat | 2.8.4-r0 | 1 |
| folioci/ | 0bc720abcb78 | expat | 2.8.4-r0 | 1 |
| folioci/ | 88de493f86db | expat | 2.8.4-r0 | 1 |
| folioci/ | 5f3358ccaa0f | expat | 2.8.4-r0 | 1 |
| folioci/ | 8ed83674352b | expat | 2.8.4-r0 | 1 |
| folioci/ | 998ac4782e0d | expat | 2.8.4-r0 | 1 |
| folioci/ | a8c1a90005fc | expat | 2.8.4-r0 | 1 |
| folioci/ | 5cd5ef063f2a | expat | 2.8.4-r0 | 1 |
| folioci/ | fc4528220fb8 | expat | 2.8.4-r0 | 1 |
| folioci/ | ceeaacc3bf16 | expat | 2.8.4-r0 | 1 |