StackRadar

CVE-2026-72522

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,169
of 17,787 indexed, latest versions
Container images
1,145
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

Carried by container images the latest versions of 1,169 of 17,787 indexed charts deploy, on 1,145 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+34 more2.5.0-1+deb12u3, 2.8.3-1~deb13u1, 2.8.4-11,143
expatrpm2.8.2-1.azl32.8.3-12
OSV records
DEBIAN-CVE-2026-72522UBUNTU-CVE-2026-72522AZL-94698ECHO-de7d-deea-1f3e

Charts affected

1,169 by stars
ChartLatestAffected imagesRadar Score
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

5,238
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

4,578
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,367
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

13,220
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

3,694
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,378
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
expat@2.7.4-1
no fix listed

Open the chart page →

3,773
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,963
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

10,091
cortezacorteza1.1.01See more

corteza corteza 1.1.0

1 container image this version deploys carries CVE-2026-72522.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

—
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

14,559
logstream-leadercriblio4.19.21 of 1See more

logstream-leader criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,230
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

9,287
logstream-workergroupcriblio4.19.21 of 1See more

logstream-workergroup criblio 4.19.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cribl/cribl:4.19.2044f9a5fac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,230
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

3,860
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
opencsghq/kubectl:latestb6d87e1048c2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencsghq/label-studio:v2.4.0b4e849fcf94a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

15,380
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
expat@2.2.9-1ubuntu0.6
no fix listed
wazuh/wazuh-manager:4.4.121994f40e0da
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

13,852
cspconsolecspconsole1.3.112 of 5See more

cspconsole cspconsole 1.3.11

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

12,274
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,503
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,604
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,398
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
expat@2.6.1-2ubuntu0.4
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
2.8.3-1~deb13u1

Open the chart page →

13,936
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,062
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
no fix listed

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

5,974
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
no fix listed

Open the chart page →

22,405
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,172
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
no fix listed

Open the chart page →

24,335
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,666
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,090
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

4,798
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

2,945
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

6,075
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,212
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,106
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

14,856
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
no fix listed

Open the chart page →

29,033
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-72522.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

9,607

Container images carrying it

1,145 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
expat@2.2.9-1build1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
expat@2.2.9-1build1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
expat@2.2.9-1build1
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
expat@2.7.4-1
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
expat@2.2.9-1build1
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
expat@2.2.9-1build1
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
expat@2.7.4-1
no fix listed
1
gethue/hue:4.11.011b649636e68
expat@2.2.9-1ubuntu0.6
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
expat@2.2.5-3ubuntu0.2
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
expat@2.4.7-1ubuntu0.6
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
expat@2.2.9-1ubuntu0.4
no fix listed
1
glasskube/operator:0.12.2be5133100d63
expat@2.4.7-1ubuntu0.2
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
expat@2.7.1-2
2.8.3-1~deb13u1
1
gotenberg/gotenberg:8.3467097317623a
expat@2.7.1-2
2.8.3-1~deb13u1
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
expat@2.8.2-1~deb13u1
2.8.3-1~deb13u1
1
gotson/komga:0.99.49b15ea6bfc30
expat@2.2.5-3ubuntu0.2
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
expat@2.4.7-1ubuntu0.5
no fix listed
1
graylog/graylog:7.1.9598bd41fefd5
expat@2.6.1-2ubuntu0.4
no fix listed
1
graylog/graylog:7.2.0-beta.2-1e8431d59b84d
expat@2.6.1-2ubuntu0.4
no fix listed
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
expat@2.6.1-2ubuntu0.4
no fix listed
1
guacamole/guacamole:1.5.50f62f6d17ab3
expat@2.4.7-1ubuntu0.2
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
gulacedia/web-dvwa-new:v367b467d961ca
expat@2.5.0-1
2.5.0-1+deb12u3
1
hamidyousefi93/saam-test:latestc34f071f6ed0
expat@2.5.0-1
2.5.0-1+deb12u3
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
expat@2.4.7-1ubuntu0.2
no fix listed
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
expat@2.4.7-1ubuntu0.6
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
expat@2.2.9-1build1
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
expat@2.2.9-1ubuntu0.4
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
expat@2.2.9-1build1
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
expat@2.2.9-1ubuntu0.6
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
hazegoodlife/haaze:milksite8d4c63169e14
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
headwindmdm/hmdm:0.1.93550b4840840
expat@2.4.7-1ubuntu0.7
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
expat@2.5.0-1
2.5.0-1+deb12u3
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
expat@2.2.9-1ubuntu0.7
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
expat@2.5.0-1
2.5.0-1+deb12u3
1
helmforge/fastmcp-server:0.2.061f759a1421f
expat@2.7.1-2
2.8.3-1~deb13u1
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
expat@2.7.1-2
2.8.3-1~deb13u1
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
expat@2.7.1-2
2.8.3-1~deb13u1
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
expat@2.5.0-1
2.5.0-1+deb12u3
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
hivemq/hivemq-edge:2026.13aba306d1f089
expat@2.6.1-2ubuntu0.4
no fix listed
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
expat@2.4.7-1ubuntu0.2
no fix listed
1
hivemq/hivemq-platform-operator:2.2.2a919f990141b
expat@2.7.4-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.