StackRadar

CVE-2026-76641

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,147
of 17,781 indexed, latest versions
Container images
1,067
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,147 of 17,781 indexed charts deploy, on 1,067 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+27 more2.8.4-1656
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76641UBUNTU-CVE-2026-76641AZL-96932ECHO-0ffe-8d46-73ca

Charts affected

1,147 by stars
ChartLatestAffected imagesRadar Score
mod-inventory-storagefolio-org0.1.371 of 1See more

mod-inventory-storage folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-inventory-storage:latestf92ff0a3ca40
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

81
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

878
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

568
mod-invoice-storagefolio-org0.1.341 of 1See more

mod-invoice-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-invoice-storage:latest0bc720abcb78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

225
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,151
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,088
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,103
mod-notesfolio-org0.1.341 of 1See more

mod-notes folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-notes:latest998ac4782e0d
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

156
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

271
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

962
mod-ordersfolio-org0.1.341 of 1See more

mod-orders folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-orders:latestfc4528220fb8
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

456
mod-orders-storagefolio-org0.1.351 of 1See more

mod-orders-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-orders-storage:latestceeaacc3bf16
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

442
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

808
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

665
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

394
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

827
mod-patron-blocksfolio-org0.1.341 of 1See more

mod-patron-blocks folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-patron-blocks:latestde7318069a67
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

359
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,214
mod-pubsubfolio-org0.1.341 of 1See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-pubsub:latest0a4fa4ad5d72
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,009
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

571
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,531
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-source-record-managerfolio-org0.1.371 of 1See more

mod-source-record-manager folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-source-record-manager:latesta940caf026ee
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

58
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

342
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,214
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

430
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,321
okapifolio-org0.3.311 of 1See more

okapi folio-org 0.3.31

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
folioci/okapi:latestdf29ac807a45
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

48
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

294
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
expat@2.6.1-2ubuntu0.2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

9,342
garge-apigargeVerified publisher0.1.541 of 1See more

garge-api garge 0.1.54

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.12.5a7484b916ee4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,287
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
no fix listed

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
expat@2.2.9-1build1
no fix listed

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

13,551
dizquetvgeek-cookbookVerified publisher4.4.21 of 1See more

dizquetv geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
vexorian/dizquetv:1.4.37e2b99844a5c
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

4,879
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
expat@2.2.9-1build1
no fix listed

Open the chart page →

12,222
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latesta792931146b4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,716
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
expat@2.2.9-1build1
no fix listed

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,994
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

12,581
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest37f28b362c93
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
expat@2.2.9-1build1
no fix listed

Open the chart page →

14,283
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
expat@2.4.7-1
no fix listed

Open the chart page →

12,076
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-76641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
expat@2.2.9-1build1
no fix listed

Open the chart page →

17,702

Container images carrying it

1,067 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
folioci/edge-sip2:latest86106f20ef51
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-authtoken:latest995a25a33133
expat@2.7.4-r0
2.8.4-r0
1
folioci/mod-calendar:latest22f65982efd7
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-configuration:latestdd0cdc89670a
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-copycat:latest1513fad2b799
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-courses:latest68ca414f5596
expat@2.7.4-r0
2.8.4-r0
1
folioci/mod-data-export:latest0cc86bf09755
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-data-export-spring:latestf1d7caf4544b
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-data-export-worker:latest1ad1811c9b37
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-email:latest79ea8e2e7ebf
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-entities-links:latest3e2412815c0f
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-eusage-reports:latest15de67587091
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-event-config:latest0192adad3897
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-finance:latest14450bc15430
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-finance-storage:latest4bc4057abaea
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-gobi:latestc58c989dac44
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-inn-reach:latestcc8584e43382
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-inventory-storage:latestf92ff0a3ca40
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-inventory-update:latestba84812b4d58
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-invoice:latest45b7b13e81e1
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-invoice-storage:latest0bc720abcb78
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-notes:latest998ac4782e0d
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-notify:latesta8c1a90005fc
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-orders:latestfc4528220fb8
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-orders-storage:latestceeaacc3bf16
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-organizations:latest7dc9ccf3d937
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-organizations-storage:lateste46892405fde
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-password-validator:latestb31d75f2bf7b
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-patron:latest5f213acfe2f8
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-patron-blocks:latestde7318069a67
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-pubsub:latest0a4fa4ad5d72
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-remote-storage:latest4f12177123dc
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-search:latest44d7ee9acdf6
expat@2.7.1-r0
2.8.4-r0
1
folioci/mod-sender:latestd88a675dddf0
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-source-record-manager:latesta940caf026ee
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-tags:latest6e8beeb70272
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-template-engine:latestd105c585da30
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-user-import:latest1807734472bd
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-users:latest6f60033321b0
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-users-bl:latest4e2d96c9340d
expat@2.7.5-r0
2.8.4-r0
1
folioci/okapi:latestdf29ac807a45
expat@2.8.3-r0
2.8.4-r0
1
fosrl/pangolin:1.13.0c32ad797ab96
expat@2.7.3-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.