StackRadar

CVE-2026-76641

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,134
of 17,787 indexed, latest versions
Container images
1,054
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,134 of 17,787 indexed charts deploy, on 1,054 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0406
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.8.4-1646
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76641UBUNTU-CVE-2026-76641AZL-96932ECHO-0ffe-8d46-73ca

Charts affected

1,134 by stars
ChartLatestAffected imagesRadar Score
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

2,618
ejabberdjuniorjpdj0.1.471 of 1See more

ejabberd juniorjpdj 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

276
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,270
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.321 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

1 of the 17 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

15,418
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

14,130
kangalkangal2.3.11 of 2See more

kangal kangal 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:latest9ae209e3791e
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.91.0aae926912ca4
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,291
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,838
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

9,858
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

4,095
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,710
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed

Open the chart page →

113,791
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

5,654
api-docslabs64io-helm-chartsVerified publisher0.7.21 of 1See more

api-docs labs64io-helm-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.32.143d9316996884
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
auditflowlabs64io-helm-chartsVerified publisher0.12.11 of 3See more

auditflow labs64io-helm-charts 0.12.1

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinnedc7b26d3ca11c
expat@2.7.4-1
no fix listed

Open the chart page →

1,446
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
expat@2.7.4-1
no fix listed

Open the chart page →

2,657
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

2,113
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,146
prometheus-pve-exporterm0nsterrr-prometheus-pve-exporterVerified publisher2.7.01 of 1See more

prometheus-pve-exporter m0nsterrr-prometheus-pve-exporter 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

348
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

13,479
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

2,975
mcpmcp-chartsVerified publisher0.0.233 of 7See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
expat@2.8.1-r0
2.8.4-r0
glarad/mcp-management-portal-clr:0.6.8807e453354a7
expat@2.8.2-r0
2.8.4-r0
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
expat@2.7.4-1
no fix listed

Open the chart page →

6,929
metrics-server-exportermetrics-server-exporterVerified publisher2.4.01 of 1See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,272
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

4,137
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,575
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

37,373
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

1,238
opentelemetry-demoopentelemetry-helmVerified publisher0.41.15 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

5 of the 34 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
expat@2.7.5-r0
2.8.4-r0
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
expat@2.8.2-r0
2.8.4-r0
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
expat@2.7.3-r0
2.8.4-r0
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
expat@2.8.2-r0
2.8.4-r0
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.612See more

opik opik 2.2.61

2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
expat@2.4.7-1ubuntu0.7
no fix listed
redis/redis-stack-server:7.2.0-v10e44b2b49d059
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

—
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
expat@2.4.7-1ubuntu0.7
no fix listed
shaowenchen/ops-server:latest315444f703f4
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

8,939
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

2,278
piholepihole-helmVerified publisher1.6.01 of 1See more

pihole pihole-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

571
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
expat@2.4.7-1
no fix listed

Open the chart page →

7,576
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
expat@2.7.4-1
no fix listed
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

31,844
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,133
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

23,964
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

6,796
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,762
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

7,405
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
reportportal/service-ui:5.15.5aea8747cb639
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

11,869
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

6,639
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

7,432
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,120
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

6,879
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

12,930
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,324
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

13,541
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

16,449

Container images carrying it

1,054 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
expat@2.7.4-1
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
expat@2.4.7-1ubuntu0.4
no fix listed
1
ghcr.io/appscode/cluster-ui:2.4.0f527d10769ac
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
expat@2.4.7-1ubuntu0.2
no fix listed
1
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/appscode/website:v2026.9.1170d9d1b78d39
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/axoflow/axosyslog:4.27.00379598e9ad2
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
expat@2.4.7-1ubuntu0.5
no fix listed
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
expat@2.4.7-1ubuntu0.2
no fix listed
1
ghcr.io/blessingnator/keycloak-mcn-frontend:2.0.1ddd462dbde39
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
expat@2.2.9-1ubuntu0.6
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/bysamio/casepack-api:0.31.00eb3ad229c2c
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/bysamio/casepack-docs:0.8.0443d9850a688
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/bysamio/casepack-spa:0.30.0129212faf248
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
expat@2.4.7-1ubuntu0.2
no fix listed
1
ghcr.io/cedar2025/xboard:latest896e4926e0d7
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/cobbler/cobbler-web:v1.1.0c17978fb13dd
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/colanode/web:latestbcad696f03ee
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
expat@2.2.9-1ubuntu0.6
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
expat@2.4.7-1ubuntu0.2
no fix listed
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
expat@2.6.4-r0
2.8.4-r0
1
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
expat@2.6.1-2ubuntu0.1
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
expat@2.6.4-r0
2.8.4-r0
1
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
expat@2.7.0-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.