StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,182
of 17,781 indexed, latest versions
Container images
1,157
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,182 of 17,781 indexed charts deploy, on 1,157 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,155
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,182 by stars
ChartLatestAffected imagesRadar Score
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

14,956
memgraphmemgraphVerified publisher1.0.61 of 2See more

memgraph memgraph 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,373
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2api:3.86f56d239d280
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2auth:3.833ecfda16608
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2notifier:3.8f190a6212195
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
expat@2.2.9-1ubuntu0.6
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/kong:3.8.0712e407b20ea
expat@2.4.7-1ubuntu0.7
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

8,493
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,710
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
budibase/proxy:3.41.38d780b6ee602
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

10,775
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,812
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

7,857
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
expat@2.7.4-1
no fix listed

Open the chart page →

1,442
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
expat@2.7.4-1
no fix listed

Open the chart page →

1,216
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
expat@2.7.4-1
no fix listed

Open the chart page →

3,074
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,977
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,405
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,244
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,556
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

32,902
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

3,606
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

5,357
grayloggroundhog2k0.13.101 of 1See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
graylog/graylog:7.1.9598bd41fefd5
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,074
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
expat@2.6.1-2ubuntu0.1
no fix listed

Open the chart page →

3,395
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

4,332
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
expat@2.4.7-1ubuntu0.3
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

14,184
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
no fix listed

Open the chart page →

11,782
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

7,268
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
expat@2.2.9-1build1
no fix listed

Open the chart page →

30,668
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.3c81cc7d6bc9e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,415
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

6,457
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

12,111
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,500
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,903
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

8,636
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

13,350
reposilitereposilite1.4.21 of 1See more

reposilite reposilite 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

989
selenium-gridselenium-grid0.59.13 of 4See more

selenium-grid selenium-grid 0.59.1

3 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
selenium/hub:4.48.0-20260905d47c27474cb4
expat@2.6.1-2ubuntu0.4
no fix listed
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
expat@2.6.1-2ubuntu0.4
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

7,028
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

2,878
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

14,240
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,930
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
expat@2.7.4-1
no fix listed

Open the chart page →

8,825
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,668
bambooatlassian-data-centerVerified publisher2.0.151 of 2See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.114af4bb6c8d46
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,031
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
expat@2.2.9-1build1
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
expat@2.2.9-1build1
no fix listed

Open the chart page →

52,919
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
headwindmdm/hmdm:0.1.93550b4840840
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

5,870
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,106
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

27,267
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

2,604
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
expat@2.4.7-1ubuntu0.7
no fix listed
geopython/pycsw:3.0.0-beta284662ea6b78b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

13,953
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,170
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,109

Container images carrying it

1,157 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
apache/tika:latest-full80072bb73dd3
expat@2.7.4-1
no fix listed
1
apache/tika:2.9.0.092d055a84e9e
expat@2.4.7-1ubuntu0.2
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
2.5.0-1+deb12u3
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
expat@2.5.0-1
2.5.0-1+deb12u3
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
expat@2.5.0-1
2.5.0-1+deb12u3
1
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
no fix listed
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
expat@2.2.9-1ubuntu0.6
no fix listed
1
assistiot/location_processing:lateste9bae124095f
expat@2.4.7-1
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
expat@2.4.7-1ubuntu0.2
no fix listed
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
expat@2.2.9-1ubuntu0.4
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
expat@2.5.0-1
2.5.0-1+deb12u3
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
expat@2.5.0-1
2.5.0-1+deb12u3
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
expat@2.5.0-1
2.5.0-1+deb12u3
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
expat@2.2.9-1ubuntu0.6
no fix listed
1
atlassian/bamboo:12.1.114af4bb6c8d46
expat@2.6.1-2ubuntu0.4
no fix listed
1
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
expat@2.6.1-2ubuntu0.4
no fix listed
1
atlassian/bitbucket:10.2.705933f2b1cfd
expat@2.6.1-2ubuntu0.4
no fix listed
1
atlassian/confluence-server:7.10.03b9222ab32ef
expat@2.4.7-1ubuntu0.2
no fix listed
1
atlassian/crowd:7.2.3c81cc7d6bc9e
expat@2.6.1-2ubuntu0.4
no fix listed
1
atlassian/crowd:5.2.2ebf761c7d437
expat@2.6.1-2ubuntu0.4
no fix listed
1
atlassian/jira-software:8.14.037bc46cbec1a
expat@2.4.7-1ubuntu0.2
no fix listed
1
atlassian/jira-software:9.7.264a75aa4ec4e
expat@2.6.1-2ubuntu0.3
no fix listed
1
atlassian/jira-software:11.3.11e5548cd4eea8
expat@2.6.1-2ubuntu0.4
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
expat@2.5.0-1
2.5.0-1+deb12u3
1
avzini/web-app:latestf40b30210ed0
expat@2.5.0-1
2.5.0-1+deb12u3
1
baserow/backend:1.31.1e0b3c8130b91
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
baserow/baserow:1.30.1df0c42eb67e8
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
expat@2.2.9-1ubuntu0.2
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
expat@2.4.7-1ubuntu0.7
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
2.8.3-1~deb13u1
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
expat@2.7.1-2
2.8.3-1~deb13u1
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
expat@2.2.9-1ubuntu0.6
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bitnamilegacy/kubectl:1.301249fc292e84
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bitnamilegacy/kubectl:1.3164614ef8290f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
expat@2.5.0-1
2.5.0-1+deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bmeares/meerschaum:2.8.48e9c5bacaa82
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
bnjbvr/kresus:0.22.137e216b182c8
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
boky/postfix:5.1.0aafc77238423
expat@2.7.1-2
2.8.3-1~deb13u1
1
boky/postfix:4.4.0f3f247fd4252
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
expat@2.2.9-1build1
no fix listed
1
budibase/database:2.1.0d90f656261c9
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
budibase/proxy:3.41.38d780b6ee602
expat@2.7.1-2
2.8.3-1~deb13u1
1
calltelemetry/web:0.8.1-rc7205d13269e350
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.