StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,170
of 17,787 indexed, latest versions
Container images
1,146
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,170 of 17,787 indexed charts deploy, on 1,146 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,144
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,170 by stars
ChartLatestAffected imagesRadar Score
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,721
servereoloserverVerified publisher0.1.03 of 7See more

server eoloserver 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

9,334
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,290
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,457
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

6,431
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,891
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

12,127
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

7,368
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
expat@2.4.7-1ubuntu0.1
no fix listed

Open the chart page →

4,920
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
expat@2.2.9-1build1
no fix listed

Open the chart page →

20,933
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

7,617
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,773
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
expat@2.4.7-1
no fix listed

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
expat@2.1.0-7ubuntu0.16.04.5
no fix listed

Open the chart page →

14,673
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,741
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
no fix listed

Open the chart page →

12,454
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
expat@2.7.1-2
2.8.3-1~deb13u1
fireflyiii/data-importer:version-2.2.3ab52bf932546
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

4,829
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
expat@2.2.9-1ubuntu0.8
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

8,902
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
expat@2.4.7-1
no fix listed

Open the chart page →

5,651
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,077
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,442
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,112
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

13,241
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
expat@2.6.1-2ubuntu0.2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

9,342
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
no fix listed

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
expat@2.2.9-1build1
no fix listed

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

13,551
dizquetvgeek-cookbookVerified publisher4.4.21 of 1See more

dizquetv geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
vexorian/dizquetv:1.4.37e2b99844a5c
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

4,879
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
expat@2.2.9-1build1
no fix listed

Open the chart page →

12,222
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latesta792931146b4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,716
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
expat@2.2.9-1build1
no fix listed

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,994
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,077
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

12,581
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest37f28b362c93
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
no fix listed

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

12,958
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
expat@2.4.7-1
no fix listed

Open the chart page →

12,076

Container images carrying it

1,146 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
labs64/payment-gateway:0.0.10c66feefca17
expat@2.7.4-1
no fix listed
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
lancachenet/monolithic:latest37f28b362c93
expat@2.6.1-2ubuntu0.4
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
langgenius/dify-api:1.16.1dcefa5f7c47c
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
2.5.0-1+deb12u3
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
expat@2.6.1-2ubuntu0.4
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
expat@2.6.1-2ubuntu0.3
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
expat@2.6.1-2ubuntu0.4
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
2.8.3-1~deb13u1
1
lib42/jackett:latesta55596cda383
expat@2.5.0-1
2.5.0-1+deb12u3
1
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
library/cassandra:3.11.10b095ff3248c6
expat@2.2.9-1build1
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
library/eclipse-temurin:211f79c73404fb
expat@2.7.4-1
no fix listed
1
library/eclipse-temurin:2185f00967bcc6
expat@2.7.4-1
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
expat@2.4.7-1
no fix listed
1
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/kibana:7.17.150172f1c538e7
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:8.18.004c0fc150f3a
expat@2.2.9-1ubuntu0.8
no fix listed
1
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
no fix listed
1
library/kong:3.8.0712e407b20ea
expat@2.4.7-1ubuntu0.7
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/nextcloud:31.0.6-apache588609d76b21
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/nginx:1.291881968aff6f
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/nginx:1.276784fb0834aa
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/nginx:1.25.167f9a4f10d14
expat@2.5.0-1
2.5.0-1+deb12u3
1
library/nginx:1.25.49ff236ed47fe
expat@2.5.0-1
2.5.0-1+deb12u3
1
library/nginx:1.27.3fb197595ebe7
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/node:208f693eaa7e0a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
library/python:3.8d41127070014
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/python:3.9da5aee29682d
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/rabbitmq:3.11.5-management1b0f675d2f24
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/rabbitmq:3.7-managementb6dd45cc35b3
expat@2.2.5-3ubuntu0.2
no fix listed
1
library/redmine:6.1.204ac44a2595b
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/sonarqube:10.7.0-community0842dcd4c8f8
expat@2.4.7-1ubuntu0.4
no fix listed
1
library/sonarqube:10.0.0-communityef9723cf4fe4
expat@2.4.7-1ubuntu0.2
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
expat@2.6.1-2ubuntu0.4
no fix listed
1
library/varnish:7.5.04d0bb287d87b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
library/wordpress:6.4.3-apache8ae66efb09a2
expat@2.5.0-1
2.5.0-1+deb12u3
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/wordpress:php8.1-apachef73396626d2f
expat@2.7.1-2
2.8.3-1~deb13u1
1
library/xwiki:lts-postgres-tomcat56490ac14a31
expat@2.6.1-2ubuntu0.4
no fix listed
1
library/zookeeper:3.8-temurin55d1e5b2e601
expat@2.4.7-1ubuntu0.2
no fix listed
1
library/zookeeper:3.9.5cab8944a33a1
expat@2.4.7-1ubuntu0.7
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.