StackRadar

CVE-2026-66046

High

Advisory

Published 18 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,771
of 17,790 indexed, latest versions
Container images
1,636
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-66046 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,771 of 17,790 indexed charts deploy, on 1,636 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+36 more2.8.4-11,230
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0404
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-66046DEBIAN-CVE-2026-66046UBUNTU-CVE-2026-66046AZL-96605ECHO-38c1-1304-759b

Charts affected

1,771 by stars
ChartLatestAffected imagesRadar Score
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
expat@2.6.4-r0
2.8.4-r0

Open the chart page →

2,096
frontend-servicedev-krishan-dhaka-charts1.0.21 of 1See more

frontend-service dev-krishan-dhaka-charts 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
devkrishan001/frontend:latesta0ad60836e6b
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,037
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

30,150
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

29,151
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,152
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron48.0.06 of 28See more

devtron-enterprise devtron 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
expat@2.8.1-r0
2.8.4-r0
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
expat@2.6.1-2ubuntu0.4
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
expat@2.8.2-r0
2.8.4-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
expat@2.8.2-r0
2.8.4-r0
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

66,542
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,957
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,152
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron-labs48.0.06 of 28See more

devtron-enterprise devtron-labs 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
expat@2.8.1-r0
2.8.4-r0
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
expat@2.6.1-2ubuntu0.4
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
expat@2.8.2-r0
2.8.4-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
expat@2.8.2-r0
2.8.4-r0
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

66,542
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
expat@2.8.1-r0
2.8.4-r0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,957
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

27,608
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
epam/ai-dial-admin-backend:0.20.00ac5be78d7c2
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

4,053
difydify1.0.03 of 4See more

dify dify 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
langgenius/dify-plugin-daemon:main-localda995c129e2f
expat@2.6.1-2ubuntu0.4
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed

Open the chart page →

19,063
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

7,480
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
expat@2.5.0-1
no fix listed

Open the chart page →

7,167
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

10,129
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
expat@2.6.1-2build1
no fix listed

Open the chart page →

17,053
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
expat@2.7.1-2
no fix listed

Open the chart page →

5,144
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
expat@2.7.1-2
no fix listed

Open the chart page →

5,885
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
expat@2.5.0-1
no fix listed

Open the chart page →

13,031
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,626
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

21,455
dnsmasq-k8sdnsmasq-k8s1.4.11 of 1See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
expat@2.7.1-2
no fix listed

Open the chart page →

3,030
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,307
exim4dossif0.2.01 of 1See more

exim4 dossif 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
tianon/exim4:latestb489049cdbca
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,340
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

24,975
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,831
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

24,714
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
expat@2.4.7-1
no fix listed

Open the chart page →

30,759
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,283
rundeckdwardu-helm-charts0.3.42 of 2See more

rundeck dwardu-helm-charts 0.3.4

2 of the 2 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed
rundeck/rundeck:3.2.74d64fe56f767
expat@2.1.0-7ubuntu0.16.04.5
no fix listed

Open the chart page →

19,820
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
expat@2.5.0-1
no fix listed

Open the chart page →

9,251
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,743
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

2,513
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
expat@2.7.1-2
no fix listed

Open the chart page →

13,422
management-portaleclipse-aeriosVerified publisher1.1.02 of 2See more

management-portal eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
expat@2.7.4-r0
2.8.4-r0
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,889
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,995
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

5,150
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
expat@2.7.1-2
no fix listed

Open the chart page →

3,153
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,164
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

975
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

7,333
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,167
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-66046.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

25,239

Container images carrying it

1,636 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager:latest3caa8f710ee0
expat@2.5.0-1+deb12u2
no fix listed
1
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
no fix listed
1
moreillon/user-manager-front:v5.1.06597e6b98d21
expat@2.5.0-1
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
expat@2.5.0-1
no fix listed
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
expat@2.7.3-r0
2.8.4-r0
1
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
expat@2.8.2-r0
2.8.4-r0
1
mshanley80/httpbin2022:latest5b189a70c0fb
expat@2.2.9-1ubuntu0.6
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
expat@2.5.0-1
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
mvance/unbound:1.20.04bf67b567f39
expat@2.5.0-1
no fix listed
1
mvance/unbound:1.22.076906da36d18
expat@2.5.0-1+deb12u1
no fix listed
1
n8nio/n8n:2.38.45d9f0cc5672b
expat@2.8.3-r1
2.8.4-r0
1
n8nio/n8n:2.25.7761374d4eb84
expat@2.7.5-r0
2.8.4-r0
1
n8nio/n8n:2.36.8cfe2704ff858
expat@2.8.2-r0
2.8.4-r0
1
n8nio/n8n:1.115.1ed16e560c40e
expat@2.7.2-r0
2.8.4-r0
1
netbirdio/dashboard:v2.91.0aae926912ca4
expat@2.8.2-r0
2.8.4-r0
1
netboxcommunity/netbox:v3.2.83d652dca5351
expat@2.4.7-1
no fix listed
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
expat@2.7.4-1
no fix listed
1
netdata/netdata:v2.11.0c45c71eb23ff
expat@2.8.2-1~deb13u1
no fix listed
1
nethermind/nethermind:1.14.615517708c3b6
expat@2.4.7-1ubuntu0.1
no fix listed
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
expat@2.7.3-r0
2.8.4-r0
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
expat@2.4.7-1ubuntu0.7
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
expat@2.7.1-2
no fix listed
1
nginxdemos/hello:plain-text751bf8933179
expat@2.7.1-r0
2.8.4-r0
1
nginxdemos/hello:0.4b28d1e16c676
expat@2.7.1-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:latest4210a3296e7c
expat@2.8.3-1~deb13u1
no fix listed
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
expat@2.7.0-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
expat@2.8.2-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
expat@2.7.1-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
expat@2.8.3-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
no fix listed
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
expat@2.7.4-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
expat@2.8.2-r0
2.8.4-r0
1
nginx/nginx-ingress:edge520d439f9a9a
expat@2.8.3-1~deb13u1
no fix listed
1
nirmalnaveen/supermario:latest8541a39162f3
expat@2.5.0-1
no fix listed
1
nodered/node-red:5.0.410f40d0a83e7
expat@2.8.2-r0
2.8.4-r0
1
nodered/node-red:4.1.2216e7403aab9
expat@2.7.3-r0
2.8.4-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
expat@2.7.5-r0
2.8.4-r0
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
no fix listed
1
novosga/novosga:latest34b9acbe6e51
expat@2.7.5-r0
2.8.4-r0
1
octoboxio/octobox:latestd909041c46eb
expat@2.7.3-r0
2.8.4-r0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
expat@2.5.0-1+deb12u2
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
expat@2.5.0-1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
expat@2.5.0-1+deb12u1
no fix listed
1
olvid/bot-daemon:2.0.1e0e6b165d879
expat@2.6.1-2ubuntu0.4
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
expat@2.2.9-1build1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
expat@2.2.5-3
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
expat@2.2.5-3ubuntu0.2
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.