StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,182
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,182 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,154
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,182 by stars
ChartLatestAffected imagesRadar Score
kubeflowkromanow94-kubeflow0.5.13 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

3 of the 30 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
2.5.0-1+deb12u3
library/python:3.7eedf63967cdb
expat@2.5.0-1
2.5.0-1+deb12u3
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

68,994
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

8,922
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

4,462
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

9,652
aapm-servicekron-pam-aapm-helmcharts1.2.51 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.1.39dd602db8baa
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

2,645
kron-aapm-agentkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.41cc7d5be6529
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

2,746
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

13,517
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
expat@2.7.4-1
no fix listed

Open the chart page →

1,229
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

3,700
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

4,991
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

4,416
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

33,591
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

6,363
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

28,558
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

3,583
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

4,118
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

46,507
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
expat@2.2.9-1build1
no fix listed

Open the chart page →

14,368
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

8,634
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
expat@2.4.7-1ubuntu0.4
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

17,002
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
2.8.3-1~deb13u1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

20,299
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

6,879
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

3,143
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
expat@2.6.1-2build1
no fix listed

Open the chart page →

3,373
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

16,537
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

7,842
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

26,371
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,203
kubernetes-dashboardlbenicio-communityVerified publisher7.14.91 of 5See more

kubernetes-dashboard lbenicio-community 7.14.9

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,300
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

32,893
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

3,448
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

4,632
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

37,518
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,773
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,233
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,615
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

32,893
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

9,021
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

6,674
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,970
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

23,255
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,032
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

17,836
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

58,225
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

27,282
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,615

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/food-manager:lateste8fd856e593d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
moreillon/group-manager:latest3caa8f710ee0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
2.8.3-1~deb13u1
1
moreillon/user-manager-front:v5.1.06597e6b98d21
expat@2.5.0-1
2.5.0-1+deb12u3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
expat@2.5.0-1
2.5.0-1+deb12u3
1
mshanley80/httpbin2022:latest5b189a70c0fb
expat@2.2.9-1ubuntu0.6
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
expat@2.5.0-1
2.5.0-1+deb12u3
1
muluder/prograncontrollermcord:0.1.843b597a93da7
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
mvance/unbound:1.20.04bf67b567f39
expat@2.5.0-1
2.5.0-1+deb12u3
1
mvance/unbound:1.22.076906da36d18
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
netboxcommunity/netbox:v3.2.83d652dca5351
expat@2.4.7-1
no fix listed
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
expat@2.7.4-1
no fix listed
1
netdata/netdata:v2.11.0c45c71eb23ff
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
nethermind/nethermind:1.14.615517708c3b6
expat@2.4.7-1ubuntu0.1
no fix listed
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
expat@2.4.7-1ubuntu0.7
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
expat@2.7.1-2
2.8.3-1~deb13u1
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
2.8.3-1~deb13u1
1
nirmalnaveen/supermario:latest8541a39162f3
expat@2.5.0-1
2.5.0-1+deb12u3
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
expat@2.5.0-1
2.5.0-1+deb12u3
1
oled01/automx2:2025.1.105d3e398e675
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
olvid/bot-daemon:2.0.1e0e6b165d879
expat@2.6.1-2ubuntu0.4
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
expat@2.2.9-1build1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
expat@2.2.5-3
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
expat@2.2.5-3ubuntu0.2
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
onosproject/onos:2.2.144914a8d4b3f
expat@2.2.5-3ubuntu0.2
no fix listed
1
opea/asr:1.025dd26d9cd09
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/chatqna:1.038c51b791efa
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/codegen:1.058f91683892d
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/codegen-ui:1.02bee4eb66f3e
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/codetrans:1.0e2436483b73d
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/codetrans-ui:1.03ef121f34610
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/docsum:1.03eaa91849512
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/docsum-ui:1.07f854e9bffaf
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/guardrails-tgi:1.0262c6048aab8
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/speecht5:1.0249afad3d268
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/tts:1.0257ae94709e9
expat@2.5.0-1
2.5.0-1+deb12u3
1
opea/web-retriever-chroma:1.0fe08165d7770
expat@2.5.0-1
2.5.0-1+deb12u3
1
openaev/platform:3.260904.00a12ce8b3db9
expat@2.6.1-2ubuntu0.4
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
openbas/platform:2.0.5d986d80b0a75
expat@2.6.1-2ubuntu0.3
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
opencsghq/kubectl:latestb6d87e1048c2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.