StackRadar

CVE-2026-76641

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,147
of 17,781 indexed, latest versions
Container images
1,067
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,147 of 17,781 indexed charts deploy, on 1,067 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.8.4-1656
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76641UBUNTU-CVE-2026-76641AZL-96932ECHO-0ffe-8d46-73ca

Charts affected

1,147 by stars
ChartLatestAffected imagesRadar Score
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

12,930
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,324
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

13,541
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

16,449
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,792
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

6,817
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
expat@2.2.9-1ubuntu0.4
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

45,832
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

2,577
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

13,486
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
expat@2.2.9-1build1
no fix listed

Open the chart page →

24,930
silverbulletstone0.10.01 of 1See more

silverbullet stone 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

422
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,826
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
supabase/storage-api:v1.60.4c8eb9858eafe
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

18,075
syncerdsyncerdVerified publisher0.2.21 of 1See more

syncerd syncerd 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

48
mumblesyntaxerror404Verified publisher1.0.41 of 1See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,099
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

4,010
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
expat@2.2.9-1ubuntu0.6
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

26,657
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,085
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.2a8b5b4777027
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

4,839
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

15,970
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,833
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
no fix listed

Open the chart page →

41,427
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

7,835
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.91 of 1See more

workflows-aggregator workflows-aggregator 0.16.9

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
expat@2.7.4-1
no fix listed

Open the chart page →

1,290
discord-botxxczakiVerified publisher0.27.51 of 2See more

discord-bot xxczaki 0.27.5

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e9f46b6aebac02e7b96ed41a3f62b26e871cf009bb919aac45dc
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

474
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,697
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

9,783
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.0f10fd24b2290
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,900
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,170
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

10,323
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

12,007
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

723
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

3,188
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
no fix listed

Open the chart page →

25,443
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

2,092
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

453
akeyless-gatewayakeyless-services-helmVerified publisher3.5.31 of 2See more

akeyless-gateway akeyless-services-helm 3.5.3

1 of the 2 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
akeyless/gateway:5.3.13d2e7dce5eb9
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,522
aktoakto0.2.03 of 7See more

akto akto 0.2.0

3 of the 7 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latestb53a854bd7c1
expat@2.6.1-2ubuntu0.4
no fix listed
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

13,613
akto-ai-guardrails-v2akto0.3.02 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

2 of the 6 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
expat@2.7.4-1
no fix listed
redis/redis-stack-server:7.4.0-v172035434f455
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

9,321
akto-central-setupakto1.1.104 of 5See more

akto-central-setup akto 1.1.10

4 of the 5 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
expat@2.7.4-1
no fix listed
library/eclipse-temurin:211f79c73404fb
expat@2.7.4-1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2b53a854bd7c1
expat@2.6.1-2ubuntu0.4
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,905
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,162
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,125
akto-hybrid-redactakto1.44.43 of 5See more

akto-hybrid-redact akto 1.44.4

3 of the 5 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.1_localf2e2d816ef82
expat@2.7.4-1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.1_local75f00caa6f3f
expat@2.7.4-1
no fix listed

Open the chart page →

4,777
akto-k8s-ebpfakto0.1.31 of 1See more

akto-k8s-ebpf akto 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

838
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,276
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
expat@2.7.4-1
no fix listed

Open the chart page →

2,741
akto-mini-testingakto1.45.72 of 5See more

akto-mini-testing akto 1.45.7

2 of the 5 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
expat@2.7.4-1
no fix listed
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

6,397
akto-regional-setupakto1.3.14 of 9See more

akto-regional-setup akto 1.3.1

4 of the 9 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
expat@2.7.4-1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
expat@2.7.4-1
no fix listed
redis/redis-stack-server:7.4.072035434f455
expat@2.4.7-1ubuntu0.4
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
expat@2.7.4-1
no fix listed

Open the chart page →

7,603

Container images carrying it

1,067 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.8.4-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.8.4-r0
1
alpine/k8s:1.36.244ef4942e171
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.8.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.8.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.8.4-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.8.4-r0
1
alpine/k8s:1.35.6b7a12c5ddf26
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.35.5d870622d0040
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.8.4-r0
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
expat@2.6.1-2ubuntu0.4
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
no fix listed
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
no fix listed
1
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
expat@2.6.1-2ubuntu0.4
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
expat@2.6.1-2ubuntu0.4
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
no fix listed
1
apache/camel-k:2.11.0d173e7efe258
expat@2.7.4-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
expat@2.4.7-1ubuntu0.6
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
no fix listed
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
no fix listed
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.8.4-r0
1
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
no fix listed
1
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
no fix listed
1
apache/rocketmq:5.3.0434d8398f996
expat@2.6.1-2build1
no fix listed
1
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
no fix listed
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
no fix listed
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
no fix listed
1
apache/tika:latest-full80072bb73dd3
expat@2.7.4-1
no fix listed
1
apache/tika:2.9.0.092d055a84e9e
expat@2.4.7-1ubuntu0.2
no fix listed
1
appwrite/appwrite:1.9.01aaa70127114
expat@2.7.4-r0
2.8.4-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
expat@2.7.5-r0
2.8.4-r0
1
appwrite/console:8.7.383dcdc8492ac6
expat@2.7.4-r0
2.8.4-r0
1
aquasec/trivy:0.74.062b1e65e8869
expat@2.8.2-r0
2.8.4-r0
1
aquasec/trivy:0.69.3bcc376de8d77
expat@2.7.4-r0
2.8.4-r0
1
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
no fix listed
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
expat@2.2.9-1ubuntu0.6
no fix listed
1
assistiot/location_processing:lateste9bae124095f
expat@2.4.7-1
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
expat@2.4.7-1ubuntu0.2
no fix listed
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
expat@2.2.9-1ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.