StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,133
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,897
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.8.4-r0

Open the chart page →

4,531
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.8.4-r0

Open the chart page →

2,811
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

227
piholehelmforgeVerified publisher2.0.131 of 1See more

pihole helmforge 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

571
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,148
jellyfinloeken-at-homeVerified publisher10.11.81 of 1See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
loeken/jellyfin:10.11.87efbc24e47b0
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

883
meshery-operatormesheryOfficialVerified publisher1.0.691 of 2See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,415
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,244
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
expat@2.7.1-2
no fix listed

Open the chart page →

13,350
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

578
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,380
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

543
dialdialOfficialVerified publisher7.2.02 of 4See more

dial dial 7.2.0

2 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
expat@2.8.2-r0
2.8.4-r0
epam/ai-dial-core:0.47.000fab0cf9c78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

2,163
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,604
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
redocly/redoc:latest2e26bb660574
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,281
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

13,953
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,814
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

12,170
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

3,641
testkubekubeshop2.13.11 of 5See more

testkube kubeshop 2.13.1

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.18ffed0d2d494
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

2,368
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

480
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,494
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,039
limesurveyarea-42Verified publisher0.3.931 of 2See more

limesurvey area-42 0.3.93

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.0.15e75e2f455c8d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,668
athens-proxyathens-chartsOfficialVerified publisher0.17.11 of 1See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gomods/athens:v0.18.197cc113b34b0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,298
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,896
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,125
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
timescale/timescaledb:latest-pg16289d55704b1b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
expat@2.7.1-2
no fix listed

Open the chart page →

9,316
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

4,641
flyte-coreflyte2.0.481 of 3See more

flyte-core flyte 2.0.48

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,178
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

2,286
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,717
gitlab-runnergitlab-jh0.92.11 of 1See more

gitlab-runner gitlab-jh 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

904
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,380
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
expat@2.8.3-1~deb13u1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,806
giteagroundhog2k0.16.31 of 1See more

gitea groundhog2k 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gitea/gitea:1.27.387a67ee09d3a
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

535
headscaleheadscaleVerified publisher1.0.191 of 3See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

3,383
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.754 of 15See more

core instill-ai 0.1.75

4 of the 15 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
no fix listed
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
no fix listed
temporalio/admin-tools:1.28cfde8170c92f
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

4,634
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,681
kubearmorkubearmor1.7.42 of 4See more

kubearmor kubearmor 1.7.4

2 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
kubearmor/kubearmor:stablea08141311045
expat@2.8.2-r0
2.8.4-r0
kubearmor/kubearmor-init:stable236ade6e67b1
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,355
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,003
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.13.1153b8b893232
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/observal/observal-web:1.13.1738acf65cba7
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

5,828
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

5,218
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,582
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

2,866

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.714c4285bc303
expat@2.8.2-r0
2.8.4-r0
2
n8nio/n8n:2.38.45d9f0cc5672b
expat@2.8.3-r1
2.8.4-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
expat@2.7.0-r0
2.8.4-r0
2
nginxinc/nginx-unprivileged:stablecb92301e719d
expat@2.8.3-1~deb13u1
no fix listed
2
nutanix/nai-jobs:v2.8.09c373718e1b1
expat@2.8.3-1~deb13u1
no fix listed
2
obolnetwork/charon:v1.10.0278c7e2897b6
expat@2.7.1-2
no fix listed
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
expat@2.8.2-r0
2.8.4-r0
2
requarks/wiki:2:latest68f0d1848261
expat@2.7.5-r0
2.8.4-r0
2
swaggerapi/swagger-ui:v5.32.143d9316996884
expat@2.8.2-r0
2.8.4-r0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
expat@2.7.0-r0
2.8.4-r0
2
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
expat@2.8.1-r0
2.8.4-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
expat@2.8.1-r0
2.8.4-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
expat@2.8.1-r0
2.8.4-r0
2
ghcr.io/mogenius/mo-backup:latest4f89afef9010
expat@2.8.2-r0
2.8.4-r0
2
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
expat@2.8.3-r0
2.8.4-r0
2
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
expat@2.8.2-r0
2.8.4-r0
2
quay.io/frrouting/frr:10.4.38745af1f9bbb
expat@2.7.4-r0
2.8.4-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
expat@2.7.3-r0
2.8.4-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
expat@2.7.4-r0
2.8.4-r0
2
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
no fix listed
1
adamzammit/limesurvey:7.0.15e75e2f455c8d
expat@2.8.3-1~deb13u1
no fix listed
1
aerospike/aerospike-graph-service:3.3.1781ba5213efd
expat@2.8.3-r0
2.8.4-r0
1
aerospike/aerospike-graph-service:3.3.0f35739b97a46
expat@2.8.2-r0
2.8.4-r0
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.8.4-r0
1
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
expat@2.8.2-r0
2.8.4-r0
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.8.4-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.8.4-r0
1
alpine/k8s:1.36.244ef4942e171
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.8.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.8.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.8.4-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.8.4-r0
1
alpine/k8s:1.35.6b7a12c5ddf26
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.35.5d870622d0040
expat@2.8.1-r0
2.8.4-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.8.4-r0
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
no fix listed
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.8.4-r0
1
appwrite/appwrite:1.9.01aaa70127114
expat@2.7.4-r0
2.8.4-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
expat@2.7.5-r0
2.8.4-r0
1
appwrite/console:8.7.383dcdc8492ac6
expat@2.7.4-r0
2.8.4-r0
1
aquasec/trivy:0.74.062b1e65e8869
expat@2.8.2-r0
2.8.4-r0
1
aquasec/trivy:0.69.3bcc376de8d77
expat@2.7.4-r0
2.8.4-r0
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
expat@2.7.4-r0
2.8.4-r0
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
expat@2.7.1-2
no fix listed
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
expat@2.7.1-r0
2.8.4-r0
1
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
expat@2.8.3-1~deb13u1
no fix listed
1
boky/postfix:5.1.0aafc77238423
expat@2.7.1-2
no fix listed
1
budibase/apps:3.41.344fe6feab985
expat@2.8.2-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.