StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,169
of 17,787 indexed, latest versions
Container images
1,145
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,169 of 17,787 indexed charts deploy, on 1,145 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,143
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,169 by stars
ChartLatestAffected imagesRadar Score
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

5,238
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

4,578
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,367
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

13,220
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,694
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,378
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
expat@2.7.4-1
no fix listed

Open the chart page →

3,773
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,963
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

10,091
cortezacorteza1.1.01See more

corteza corteza 1.1.0

1 container image this version deploys carries CVE-2026-72522.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

—
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

14,559
logstream-leadercriblio4.19.21 of 1See more

logstream-leader criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,230
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

9,287
logstream-workergroupcriblio4.19.21 of 1See more

logstream-workergroup criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,230
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,860
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
opencsghq/kubectl:latestb6d87e1048c2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencsghq/label-studio:v2.4.0b4e849fcf94a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

15,380
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
expat@2.2.9-1ubuntu0.6
no fix listed
wazuh/wazuh-manager:4.4.121994f40e0da
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

13,852
cspconsolecspconsole1.3.112 of 5See more

cspconsole cspconsole 1.3.11

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

12,274
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,503
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,604
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,398
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
expat@2.6.1-2ubuntu0.4
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

13,936
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,062
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
no fix listed

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

5,974
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
no fix listed

Open the chart page →

22,405
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,172
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
no fix listed

Open the chart page →

24,335
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,666
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,090
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,798
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

2,945
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

6,075
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,212
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,106
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

14,856
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

29,033
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

9,607

Container images carrying it

1,145 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
2.5.0-1+deb12u3
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
expat@2.4.7-1ubuntu0.2
no fix listed
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
expat@2.4.7-1ubuntu0.4
no fix listed
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
expat@2.4.7-1ubuntu0.3
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
expat@2.5.0-1
2.5.0-1+deb12u3
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
expat@2.2.9-1ubuntu0.6
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
expat@2.4.7-1
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed
2
uffizzi/controller:latest0344805f267b
expat@2.5.0-1
2.5.0-1+deb12u3
2
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
2.5.0-1+deb12u3
2
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
expat@2.4.7-1ubuntu0.6
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
expat@2.6.1-2ubuntu0.3
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
expat@2.4.7-1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
expat@2.2.9-1build1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
expat@2.2.9-1build1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
expat@2.2.9-1build1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
expat@2.5.0-1
2.5.0-1+deb12u3
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
expat@2.2.5-3ubuntu0.2
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
expat@2.6.1-2ubuntu0.4
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
expat@2.2.9-1ubuntu0.6
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
expat@2.6.1-2ubuntu0.4
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
expat@2.6.1-2ubuntu0.3
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
2
1dev/server:11.9.0cd5b12fe5471
expat@2.6.1-2ubuntu0.3
no fix listed
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
5200710/hadoop:3.2.3-java8092d3088a5fb
expat@2.2.9-1ubuntu0.6
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
expat@2.2.5-3ubuntu0.2
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
2.8.3-1~deb13u1
1
aboogie/login_test_backend:new9c41a4483ac8
expat@2.5.0-1
2.5.0-1+deb12u3
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
expat@2.6.1-2ubuntu0.2
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
expat@2.6.1-2build1
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
expat@2.2.9-1build1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.