StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,182
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,182 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,154
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,182 by stars
ChartLatestAffected imagesRadar Score
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,360
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,069
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,542
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

18,137
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,697
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,123
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,558
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,813
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

6,037
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

45,392
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,816
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,148
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,571
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,066
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

4,097
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,967
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,256
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,203
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

7,842
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,629
image-storage-servicejtektVerified publisher0.4.33 of 4See more

image-storage-service jtekt 0.4.3

3 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
moreillon/group-manager:latest3caa8f710ee0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
2.8.3-1~deb13u1
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
2.5.0-1+deb12u3
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
expat@2.5.0-1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,626
mumble-serverjuniorjpdj0.1.411 of 1See more

mumble-server juniorjpdj 0.1.41

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,138
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.171 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.17

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,402
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,520
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

5,681
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

4,116
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,433
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

6,136
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

8,879
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

27,282
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

8,990
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

9,832
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

14,833
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

7,333
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,615
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,292
workspacekaitoVerified publisher0.12.02 of 7See more

workspace kaito 0.12.0

2 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
expat@2.8.2-1.azl3
2.8.3-1
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
expat@2.8.2-1.azl3
2.8.3-1

Open the chart page →

2,364
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

6,836
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

16,464
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

32,522
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,599
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat56490ac14a31
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,634
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

12,541
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

10,303
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1

Open the chart page →

12,131
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
expat@2.2.5-3
no fix listed

Open the chart page →

14,827

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/explorer:latest120457ffcd69
expat@2.6.1-2ubuntu0.3
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
no fix listed
1
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
no fix listed
1
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
no fix listed
1
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
expat@2.2.9-1build1
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
openkm/openkm-ce:6.3.113bc465a7461b
expat@2.2.9-1ubuntu0.4
no fix listed
1
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
openproject/hocuspocus:release-338001b288dc1359dfb5
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
expat@2.2.9-1ubuntu0.6
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
expat@2.2.9-1ubuntu0.6
no fix listed
1
openthread/otbr:latestf307f59f6432
expat@2.2.5-3ubuntu0.9
no fix listed
1
openvino/model_server:2025.2.11e7cd1d70cc1
expat@2.6.1-2ubuntu0.3
no fix listed
1
openvpn/openvpn-as:latest2253c10ec652
expat@2.6.1-2ubuntu0.4
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
expat@2.2.5-3ubuntu0.2
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
expat@2.1.0-4ubuntu1.4
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
expat@2.2.9-1ubuntu0.6
no fix listed
1
owncloud/server:10.16.274c53d341076
expat@2.4.7-1ubuntu0.7
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
expat@2.4.7-1ubuntu0.7
no fix listed
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
expat@2.7.1-2
2.8.3-1~deb13u1
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
expat@2.4.7-1ubuntu0.7
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
expat@2.4.7-1ubuntu0.4
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
expat@2.4.7-1ubuntu0.4
no fix listed
1
penpotapp/exporter:2.17.272a8061e8806
expat@2.7.4-1
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
expat@2.4.7-1ubuntu0.2
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
expat@2.4.7-1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
expat@2.7.4-1
no fix listed
1
photoprism/photoprism:260728958642220223
expat@2.7.4-1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
expat@2.6.1-2build1
no fix listed
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
expat@2.7.1-2
2.8.3-1~deb13u1
1
pk910/powfaucet:v2-stable3dcae6a62896
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
expat@2.6.1-2ubuntu0.4
no fix listed
1
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
expat@2.6.1-2ubuntu0.4
no fix listed
1
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
expat@2.5.0-1
2.5.0-1+deb12u3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
expat@2.5.0-1
2.5.0-1+deb12u3
1
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
2.8.3-1~deb13u1
1
project2team4/react:latest3ff031a08887
expat@2.2.9-1ubuntu0.4
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
expat@2.6.1-2build1
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
pschichtel/mindustry-server:v145.1b543e9c2d371
expat@2.4.7-1ubuntu0.4
no fix listed
1
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
expat@2.2.9-1ubuntu0.4
no fix listed
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
expat@2.2.5-3ubuntu0.7
no fix listed
1
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
expat@2.6.1-2ubuntu0.4
no fix listed
1
qumine/minecraft-server:v0.1.15c0b650d51132
expat@2.4.7-1ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.