StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
774
of 17,787 indexed, latest versions
Container images
611
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 774 of 17,787 indexed charts deploy, on 611 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0412
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1197
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

774 by stars
ChartLatestAffected imagesRadar Score
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

2,257
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

840
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,674
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,292
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,322
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,322
frontendsignalen4.24.01 of 1See more

frontend signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
signalen/frontend:2.27.81ab79cb7fe21
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

1,161
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,857
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,954
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
no fix listed

Open the chart page →

3,929
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,437
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

7,586
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,821
stewardsoftwaremillVerified publisher0.1.121 of 1See more

steward softwaremill 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
fthomas/scala-steward:latest367afe974b7a
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

590
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
expat@2.8.3-1~deb13u1
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
expat@2.8.2-1~deb13u1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

65,130
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,487
anna-nginxstatic-nginx1.31.111 of 2See more

anna-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

417
hesselinkme-nginxstatic-nginx1.31.111 of 2See more

hesselinkme-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

417
steadybit-agentsteadybit3.1.1623 of 6See more

steadybit-agent steadybit 3.1.162

3 of the 6 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,120
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
no fix listed

Open the chart page →

3,355
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,397
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed

Open the chart page →

3,253
minecraftsyntaxerror404Verified publisher1.2.231 of 2See more

minecraft syntaxerror404 1.2.23

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

459
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,004
poscatechnostructuresVerified publisher1.0.01 of 1See more

posca technostructures 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,116
mrasiftech-thinker1.0.41 of 1See more

mrasif tech-thinker 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

2,043
tekton-ci-environment-injectortekton-ci-environment-injectorVerified publisher0.2.41 of 1See more

tekton-ci-environment-injector tekton-ci-environment-injector 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

511
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gitea/act_runner:nightly7940221bcfc9
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

4,213
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
expat@2.7.1-2
no fix listed
supabase/storage-api:latestf6c42a04163d
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

9,469
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,624
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest779759172676
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,797
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,826
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,434
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
erenozcan17/react_frontend:v4.56e1b14973f9b
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

6,974
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

3,222
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,110
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,308
hub-managertraefikVerified publisher1.0.01 of 1See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

635
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,568
rstudiouninettsigma21.3.61 of 3See more

rstudio uninettsigma2 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
sigma2as/rstudio-proxy:20260818-1df6a44d899e81ee3eb
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

847

Container images carrying it

611 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
expat@2.7.1-r0
2.8.4-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
expat@2.7.1-2
no fix listed
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/immich-app/immich-server:v3.2.12ab6a6273755
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
expat@2.7.1-2
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
expat@2.7.1-2
no fix listed
1
ghcr.io/itobey/fddb-exporter:2.4.1a824933e0f87
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
no fix listed
1
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.4-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
expat@2.7.1-r0
2.8.4-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
no fix listed
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/libretime/icecast:latest3c98b92e9535
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.8.4-r0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
no fix listed
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
expat@2.7.1-2
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
expat@2.7.1-2
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/observal/observal-web:1.13.1738acf65cba7
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
expat@2.7.1-2
no fix listed
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
expat@2.7.5-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.