CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 774; of 17,787 indexed, latest versions
Container images: 611; deployed by those charts
Fix available: 3 of 3; affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 774 of 17,787 indexed charts deploy, on 611 images.

Affected package	Affected versions	Fixed in	Images
expatapk	2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more	2.8.4-r0	412
expatdeb	2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more	2.8.4-1	197
expatrpm	2.8.2-1.azl3	2.8.3-2	2

OSV records: ALPINE-CVE-2026-76956 DEBIAN-CVE-2026-76956 AZL-96848 ECHO-8a36-8d53-bf0c

Charts affected

774 by stars

Chart

Latest

Affected images

Radar Score

sparkuninettsigma2

1.1.4

1 of 3 See more

spark uninettsigma2 1.1.4

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :1.31.3-alpine	4a73073bd557	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

847

applicationuniversal-helm-chart

0.4.3

1 of 1 See more

application universal-helm-chart 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,839

excalidashunxwares

2026.2.5

1 of 2 See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
zimengxiong/excalidash-frontend :0.4.27	242629350b06	expat@2.7.4-r0	2.8.4-r0

Open the chart page →

2,622

evolution-apivcnngr

1.0.0

2 of 5 See more

evolution-api vcnngr 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
evoapicloud/evolution-api :latest	966625532d90	expat@2.7.5-r0	2.8.4-r0
evoapicloud/evolution-manager :latest	cbfeb314afb9	expat@2.7.3-r0	2.8.4-r0

Open the chart page →

3,747

simple-prima-notavcnngr

0.5.3

2 of 4 See more

simple-prima-nota vcnngr 0.5.3

2 of the 4 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.2	52cb72a9e3da	expat@2.7.0-r0	2.8.4-r0
vcnngr/pnfrontend :latest	4e4979ab8c41	expat@2.7.1-r0	2.8.4-r0

Open the chart page →

4,769

colanodevictorlane

0.3.3

1 of 3 See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/colanode/web :latest	bcad696f03ee	expat@2.7.0-r0	2.8.4-r0

Open the chart page →

2,077

n8nvictorlane

1.0.18

1 of 1 See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.115.1	ed16e560c40e	expat@2.7.2-r0	2.8.4-r0

Open the chart page →

6,470

video-dl-botvideo-dl-bot

1.4.3

1 of 1 See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,931

argus-test-envvk-helm-charts

2.0.0

1 of 1 See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,839

squawkvojtechpastyrik

0.1.10

1 of 1 See more

squawk vojtechpastyrik 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/vojtechpastyrik/squawk :0.1.10	4005df5f7229	expat@2.7.4-r0	2.8.4-r0

Open the chart page →

400

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

3,906

gateway-control-planewallarm

0.2.0

1 of 2 See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg17	bc8527e62f70	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

1,455

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

2,487

argocd-image-updaterwenerme

1.3.1

1 of 1 See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

718

gitlab-runnerwenerme

0.92.1

1 of 1 See more

gitlab-runner wenerme 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.1	af0325804248	expat@2.8.2-r0	2.8.4-r0

Open the chart page →

905

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	expat@2.7.1-r0	2.8.4-r0

Open the chart page →

14,618

wikiwikijs

3.0.0

1 of 2 See more

5,472

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	expat@2.7.5-r0	2.8.4-r0

Open the chart page →

1,640

wordpress-alpinewordpress-alpine

1.5.18

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/shesselink81/nginx-alpine :7.1.0.0	9783481cad2a	expat@2.8.2-r0	2.8.4-r0
ghcr.io/shesselink81/wordpress-alpine :7.1.0.0	32ace450bcd9	expat@2.8.3-r0	2.8.4-r0

Open the chart page →

4,032

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

5,635

xboardxboard

0.2.0

1 of 1 See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	expat@2.8.3-r0	2.8.4-r0

Open the chart page →

1,042

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,839

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,839

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	expat@2.8.3-1~deb13u1	no fix listed

Open the chart page →

1,839

Container images carrying it

611 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
featurehub/dacha2 :1.9.1	c8d5551b5e40	expat@2.7.0-r0	2.8.4-r0	1
featurehub/edge :1.9.1	98ad426737f6	expat@2.7.0-r0	2.8.4-r0	1
featurehub/mr :1.9.1	477d8bf771a9	expat@2.7.0-r0	2.8.4-r0	1
fireflyiii/core :version-6.6.6	ae69fdd95cde	expat@2.7.1-2	no fix listed	1
folioci/edge-caiasoft :latest	c3cfa89eee2f	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-connexion :latest	b4863d135524	expat@2.7.5-r0	2.8.4-r0	1
folioci/edge-dematic :latest	48c9b1d180d4	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-inn-reach :latest	c64e4d9dd3fc	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-ncip :latest	e760dbb81d1a	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-oai-pmh :latest	eedfcbc29792	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-orders :latest	1ef654ee9f23	expat@2.8.3-r0	2.8.4-r0	1
folioci/edge-patron :latest	682b852e056d	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-rtac :latest	15ef73b1abd0	expat@2.8.2-r0	2.8.4-r0	1
folioci/edge-sip2 :latest	86106f20ef51	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-authtoken :latest	995a25a33133	expat@2.7.4-r0	2.8.4-r0	1
folioci/mod-calendar :latest	22f65982efd7	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-circulation-storage :latest	6bdddcafbc0f	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-configuration :latest	dd0cdc89670a	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-copycat :latest	1513fad2b799	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-courses :latest	68ca414f5596	expat@2.7.4-r0	2.8.4-r0	1
folioci/mod-data-export :latest	0cc86bf09755	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-data-export-spring :latest	f1d7caf4544b	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-data-export-worker :latest	1ad1811c9b37	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-ebsconet :latest	3ae8cb99daa3	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-email :latest	79ea8e2e7ebf	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-entities-links :latest	3e2412815c0f	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-erm-usage-harvester :latest	2d6767933c59	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-eusage-reports :latest	15de67587091	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-event-config :latest	0192adad3897	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-finance :latest	14450bc15430	expat@2.8.1-r0	2.8.4-r0	1
folioci/mod-finance-storage :latest	4bc4057abaea	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-gobi :latest	c58c989dac44	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-inn-reach :latest	cc8584e43382	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-inventory-storage :latest	f92ff0a3ca40	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-inventory-update :latest	ba84812b4d58	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-invoice :latest	45b7b13e81e1	expat@2.8.1-r0	2.8.4-r0	1
folioci/mod-invoice-storage :latest	0bc720abcb78	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-login :latest	88de493f86db	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-login-saml :latest	5f3358ccaa0f	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-ncip :latest	8ed83674352b	expat@2.7.5-r0	2.8.4-r0	1
folioci/mod-notes :latest	998ac4782e0d	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-notify :latest	a8c1a90005fc	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-oai-pmh :latest	5cd5ef063f2a	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-orders :latest	fc4528220fb8	expat@2.8.3-r0	2.8.4-r0	1
folioci/mod-orders-storage :latest	ceeaacc3bf16	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-organizations :latest	7dc9ccf3d937	expat@2.8.1-r0	2.8.4-r0	1
folioci/mod-organizations-storage :latest	e46892405fde	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-password-validator :latest	b31d75f2bf7b	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-patron :latest	5f213acfe2f8	expat@2.8.2-r0	2.8.4-r0	1
folioci/mod-patron-blocks :latest	de7318069a67	expat@2.8.2-r0	2.8.4-r0	1