CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 760; of 17,787 indexed, latest versions
Container images: 598; deployed by those charts
Fix available: 3 of 3; affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 760 of 17,787 indexed charts deploy, on 598 images.

Affected package	Affected versions	Fixed in	Images
expatapk	2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more	2.8.4-r0	406
expatdeb	2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more	2.8.4-1	190
expatrpm	2.8.2-1.azl3	2.8.3-2	2

OSV records: ALPINE-CVE-2026-76956 DEBIAN-CVE-2026-76956 AZL-96848 ECHO-8a36-8d53-bf0c

Charts affected

760 by stars

Chart

Latest

Affected images

Radar Score

jenkinsjenkinsci

5.9.62

1 See more

jenkins jenkinsci 5.9.62

1 container image this version deploys carries CVE-2026-76956.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

—

gitlab-runnergitlab

0.92.1

1 of 1 See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.1	af0325804248	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

904

nextcloudnextcloud

9.2.6

1 of 1 See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nextcloud :34.0.3-apache	b97df9e0e1ee	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

4,507

metallbmetallb

0.16.1

1 of 4 See more

metallb metallb 0.16.1

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
quay.io/frrouting/frr :10.4.3	8745af1f9bbb	expat@2.7.4-r0	2.8.4-r0

Open the chart page →

2,127

nginx-ingressnginx

2.7.1

1 of 1 See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :5.6.1	8ca7b42ae702	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,285

artifact-hubartifact-hub

1.23.0

1 of 7 See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	expat@2.7.4-r0	2.8.4-r0

Open the chart page →

10,755

piholemojo2600

2.38.0

1 of 1 See more

pihole mojo2600 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
pihole/pihole :2026.07.2	f7d1be836e3b	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

571

n8ncommunity-charts

1.24.40

1 of 1 See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.38.4	5d9f0cc5672b	expat@2.8.3-r1	2.8.4-r0

Open the chart page →

772

mimir-distributedgrafana

6.2.0

1 of 6 See more

mimir-distributed grafana 6.2.0

1 of the 6 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	expat@2.7.5-r0	2.8.4-r0

Open the chart page →

4,517

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

718

metabasepmint93

2.27.6

1 of 1 See more

metabase pmint93 2.27.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	expat@2.7.5-r0	2.8.4-r0

Open the chart page →

1,639

n8nopen-8gears

2.1.1

1 of 1 See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.36.8	cfe2704ff858	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

1,038

openebsopenebs

4.6.1

1 of 35 See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

23,894

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	expat@2.8.2-1~deb13u1	no fix listed

Open the chart page →

3,092

maildocker-postfix

5.1.0

1 of 1 See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
boky/postfix :5.1.0	aafc77238423	expat@2.7.1-2	no fix listed

Open the chart page →

5,366

flux2fluxcd-community

2.19.0

1 of 7 See more

flux2 fluxcd-community 2.19.0

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

2,951

zammadzammad

18.2.0

1 See more

zammad zammad 18.2.0

1 container image this version deploys carries CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/zammad/zammad :7.1.3-0011	e65123a43ecc	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

—

atlantisatlantis

6.15.1

1 See more

atlantis atlantis 6.15.1

1 container image this version deploys carries CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	expat@2.8.3-r0	2.8.4-r0

Open the chart page →

—

penpotpenpot

1.9.0

1 of 4 See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
penpotapp/frontend :2.17.2	94fa2864d8fc	expat@2.8.3-r0	2.8.4-r0

Open the chart page →

4,314

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	expat@2.7.5-r0	2.8.4-r0

Open the chart page →

2,221

node-rednode-red

0.40.2

1 of 1 See more

node-red node-red 0.40.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
nodered/node-red :4.1.2	216e7403aab9	expat@2.7.3-r0	2.8.4-r0

Open the chart page →

2,172

kubesharkkubeshark-helm-charts

53.4.0

1 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
kubeshark/front :v53.4	cc7f07b99fac	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

825

pulsarapache

4.7.0

1 of 10 See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	expat@2.7.4-r0	2.8.4-r0

Open the chart page →

9,864

difydify-helm

0.38.0

2 of 11 See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.15	750e1111426e	expat@2.7.5-1	no fix listed
library/nginx :latest	05b8cb60c354	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

22,002

oktetookteto

0.0.0-2026-08-17

2 See more

okteto okteto 0.0.0-2026-08-17

2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	expat@2.8.2-r0	2.8.4-r0
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-17	3e56bdd1b90d	expat@2.7.1-2	no fix listed

Open the chart page →

—

yourlsyourls

8.9.11

1 of 2 See more

yourls yourls 8.9.11

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/yourls/yourls :1.10.6	9b220ea83329	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

2,203

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	expat@2.7.0-r0	2.8.4-r0

Open the chart page →

16,251

openprojectopenproject-helm-charts

13.11.0

1 of 5 See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
openproject/openproject :17.8.0-slim	48952034215d	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

19,926

chatwootchatwoot

2.0.24

1 of 3 See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
chatwoot/chatwoot :v4.15.1	67ebc751c171	expat@2.7.5-r0	2.8.4-r0

Open the chart page →

9,203

netbirdjaconi

0.15.1

1 of 4 See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/golang :latest	512690a56605	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

8,390

gotenbergmaikumori

1.25.0

1 of 1 See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	expat@2.8.2-1~deb13u1	no fix listed

Open the chart page →

9,683

oneuptimeoneuptime

13.0.4

1 of 7 See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
oneuptime/runner :release	4accc516d800	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

11,192

openclawopenclaw-helm

1.5.40

1 of 2 See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
chromedp/headless-shell :148.0.7778.97	313ed7255ae1	expat@2.7.1-2	no fix listed

Open the chart page →

5,660

trivytrivy-operator

0.26.0

1 of 1 See more

trivy trivy-operator 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

430

codefreshcodefresh-onprem

2.12.13

2 of 42 See more

codefresh codefresh-onprem 2.12.13

2 of the 42 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.31.4-alpine-otel	b37d9945be77	expat@2.8.3-r0	2.8.4-r0
quay.io/codefresh/dind :3.0.25	0885ab519dac	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

14,956

apim3graviteeio

4.12.19

2 of 4 See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	expat@2.8.3-1~deb13u1	no fix listed
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

4,806

wordpressgroundhog2k

0.16.4

1 of 1 See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/wordpress :7.1.0-apache	5a93c470ae82	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

3,685

budibasebudibase

0.0.0-master

2 of 7 See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
budibase/apps :3.41.3	44fe6feab985	expat@2.8.2-r0	2.8.4-r0
budibase/proxy :3.41.3	8d780b6ee602	expat@2.7.1-2	no fix listed

Open the chart page →

10,775

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	expat@2.7.3-r0	2.8.4-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	expat@2.7.3-r0	2.8.4-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	expat@2.7.3-r0	2.8.4-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	expat@2.7.3-r0	2.8.4-r0

Open the chart page →

6,743

excalidrawexcalidraw

0.18.0

1 of 1 See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
pmoscode/excalidraw :v0.18.0	8ee61554699c	expat@2.7.3-r0	2.8.4-r0

Open the chart page →

1,109

devtron-operatordevtron

0.23.3

1 of 11 See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
quay.io/devtron/dashboard :c7b89667-690-39290	c63823af3835	expat@2.8.1-r0	2.8.4-r0

Open the chart page →

32,902

nextcloudgroundhog2k

0.22.5

1 of 3 See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

4,507

n8nhelmforge

2.0.0

1 of 2 See more

863

monicamonica

1.0.15

1 of 1 See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/monicahq/monica-next :main	8be69156acbb	expat@2.7.1-2	no fix listed

Open the chart page →

5,634

nautobotnautobot

3.1.2

1 of 1 See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
networktocode/nautobot :3.0-py3.13	ed484336b1ad	expat@2.7.1-2	no fix listed

Open the chart page →

4,332

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
netrisai/controller-web-service-frontend :4.6.0-013	8c5074f55ae5	expat@2.7.3-r0	2.8.4-r0

Open the chart page →

30,326

paperless-ngxpaperless-ngx

0.3.22

1 of 3 See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

8,489

home-assistantalekc

2.11.2

1 of 1 See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	expat@2.8.1-r0	2.8.4-r0

Open the chart page →

2,133

phpmyadminalekc

0.3.1

1 of 1 See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.3-apache	3a8a8d6b5289	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

2,582

home-assistantandrenarchy

14.103.0

1 of 1 See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.1	612d76760b54	expat@2.8.1-r0	2.8.4-r0

Open the chart page →

2,133

Container images carrying it

598 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/immich-app/immich-server :v2.3.1	f8d06a32b1b2	expat@2.7.1-2	no fix listed	1
ghcr.io/itobey/fddb-exporter :2.4.1	a824933e0f87	expat@2.8.1-r0	2.8.4-r0	1
ghcr.io/jaydee94/kubeseal-webgui/ui :4.5.3	4447636e8102	expat@2.7.0-r0	2.8.4-r0	1
ghcr.io/jellyfin/jellyfin :10.11.11	45f648c382a0	expat@2.7.1-2	no fix listed	1
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	expat@2.7.3-r0	2.8.4-r0	1
ghcr.io/juniorjpdj/containers/ejabberd-captcha :26.07-r1	10c57cbc7ad0	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	expat@2.7.1-r0	2.8.4-r0	1
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	expat@2.7.1-r0	2.8.4-r0	1
ghcr.io/kenchrcum/tika :3.3.0-full	708446bc6783	expat@2.7.4-r0	2.8.4-r0	1
ghcr.io/kozea/radicale :3.7.6	00a3d8e1f04b	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	expat@2.7.1-2	no fix listed	1
ghcr.io/lerentis/bitwarden-crd-operator :0.17.0	0a608c6ead85	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/libretime/icecast :latest	3c98b92e9535	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	expat@2.6.4-r0	2.8.4-r0	1
ghcr.io/linuxserver/healthchecks :version-v3.9	b5c6bfb00b03	expat@2.7.0-r0	2.8.4-r0	1
ghcr.io/linuxserver/syslog-ng :4.10.2	47fae7f540f9	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	expat@2.7.1-2	no fix listed	1
ghcr.io/luzilla/unbound :v0.12.0	4fd8da9dc13c	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/manyfold3d/manyfold :0.136.0	d14ca4d82475	expat@2.7.4-r0	2.8.4-r0	1
ghcr.io/manyfold3d/manyfold-solo :0.147.2	ed5a792b0e8d	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/marcuwynu23/vite-app-sample :latest	21247f2b97c4	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/matter-js/matterjs-server :1.4.0	54232d0d3e7d	expat@2.8.2-1~deb13u1	no fix listed	1
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	expat@2.7.1-2	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/mkutlak/alluredeck-ui :0.41.0	c19509b1b336	expat@2.8.1-r0	2.8.4-r0	1
ghcr.io/moghtech/komodo-core :2.3.3	bca73d0eee14	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	expat@2.7.1-2	no fix listed	1
ghcr.io/music-assistant/server :2.10.3	885872224fa5	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/mydecisive/octant-ui :0.0.1-testing	61e4066b22fb	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	expat@2.7.1-2	no fix listed	1
ghcr.io/observal/observal-api :1.13.1	153b8b893232	expat@2.8.3-1~deb13u1	no fix listed	1
ghcr.io/observal/observal-web :1.13.1	738acf65cba7	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/okteto/buildkit :0.0.0-2026-08-03 :0.0.0-2026-08-17	14527ca5d2a9	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-03 :0.0.0-2026-08-17	3e56bdd1b90d	expat@2.7.1-2	no fix listed	1
ghcr.io/opencost/opencost-ui :1.118.0	571f87e528ea	expat@2.7.3-r0	2.8.4-r0	1
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/open-telemetry/demo :3.0.0-kafka	0601750a3ca4	expat@2.7.5-r0	2.8.4-r0	1
ghcr.io/open-telemetry/demo :3.0.0-telemetry-docs	3519858704e7	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/open-telemetry/demo :3.0.0-image-provider	93e1585e97ac	expat@2.7.3-r0	2.8.4-r0	1
ghcr.io/open-telemetry/demo :3.0.0-load-generator	cd12cb42fb15	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	expat@2.7.1-2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	expat@2.7.1-2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	expat@2.7.1-2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	expat@2.7.1-2	no fix listed	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	expat@2.7.4-r0	2.8.4-r0	1
ghcr.io/plausible/community-edition :v3.0.1	14c1afde21d6	expat@2.7.0-r0	2.8.4-r0	1
ghcr.io/port-labs/port-agent :v0.8.12	c92d1e223f5c	expat@2.8.2-1+e1	2.8.4-1	1
ghcr.io/processone/ejabberd :latest	5aeb0faa39cf	expat@2.8.2-r0	2.8.4-r0	1
ghcr.io/prophetse7en/clonarr :latest	9400d298b37a	expat@2.8.2-r0	2.8.4-r0	1