StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
774
of 17,787 indexed, latest versions
Container images
611
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 774 of 17,787 indexed charts deploy, on 611 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0412
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1197
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

774 by stars
ChartLatestAffected imagesRadar Score
mod-data-export-workerfolio-org0.1.151 of 1See more

mod-data-export-worker folio-org 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-data-export-worker:latest1ad1811c9b37
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,214
mod-ebsconetfolio-org0.1.31 of 1See more

mod-ebsconet folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-ebsconet:latest3ae8cb99daa3
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,203
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

867
mod-entities-linksfolio-org0.1.11 of 1See more

mod-entities-links folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-entities-links:latest3e2412815c0f
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

286
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

563
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,225
mod-event-configfolio-org0.1.341 of 1See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-event-config:latest0192adad3897
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

420
mod-financefolio-org0.1.341 of 1See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-finance:latest14450bc15430
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

535
mod-finance-storagefolio-org0.1.341 of 1See more

mod-finance-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-finance-storage:latest4bc4057abaea
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

414
mod-gobifolio-org0.1.341 of 1See more

mod-gobi folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-gobi:latestc58c989dac44
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

595
mod-inn-reachfolio-org0.1.71 of 1See more

mod-inn-reach folio-org 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inn-reach:latestcc8584e43382
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

513
mod-inventory-storagefolio-org0.1.371 of 1See more

mod-inventory-storage folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inventory-storage:latestf92ff0a3ca40
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

81
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

878
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

568
mod-invoice-storagefolio-org0.1.341 of 1See more

mod-invoice-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-invoice-storage:latest0bc720abcb78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

226
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,152
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,089
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,104
mod-notesfolio-org0.1.341 of 1See more

mod-notes folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-notes:latest998ac4782e0d
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

156
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

271
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

962
mod-ordersfolio-org0.1.341 of 1See more

mod-orders folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-orders:latestfc4528220fb8
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

457
mod-orders-storagefolio-org0.1.351 of 1See more

mod-orders-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-orders-storage:latestceeaacc3bf16
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

443
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

808
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

666
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

394
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

828
mod-patron-blocksfolio-org0.1.341 of 1See more

mod-patron-blocks folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-patron-blocks:latestde7318069a67
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

360
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,215
mod-pubsubfolio-org0.1.341 of 1See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-pubsub:latest0a4fa4ad5d72
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,010
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

571
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,531
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-source-record-managerfolio-org0.1.371 of 1See more

mod-source-record-manager folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-source-record-manager:latesta940caf026ee
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

58
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

343
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,215
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

431
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,321
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
expat@2.7.1-2
no fix listed

Open the chart page →

2,432
okapifolio-org0.3.311 of 1See more

okapi folio-org 0.3.31

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/okapi:latestdf29ac807a45
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

48
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
expat@2.7.1-2
no fix listed

Open the chart page →

3,143
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

295
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
expat@2.7.1-2
no fix listed

Open the chart page →

8,955
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,339
panda-pulsegeneral-helm-chartsVerified publisher1.0.51 of 1See more

panda-pulse general-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latest7b14deeb416a
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

704
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

12,270
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
no fix listed

Open the chart page →

1,646
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

15,780

Container images carrying it

611 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/invidious/invidious:latest6f5c81c1e29d
expat@2.8.2-r0
2.8.4-r0
1
quay.io/kannika/kannika-api:0.18.0bcf9906d5a3c
expat@2.8.3-1~deb13u1
no fix listed
1
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
expat@2.8.1-r0
2.8.4-r0
1
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
expat@2.8.2-r0
2.8.4-r0
1
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
expat@2.8.2-r0
2.8.4-r0
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
expat@2.7.0-r0
2.8.4-r0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed
1
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
expat@2.8.2-r0
2.8.4-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
expat@2.7.5-r0
2.8.4-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
expat@2.8.2-r0
2.8.4-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.