StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

13,521
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

859
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
no fix listed

Open the chart page →

5,852
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
no fix listed

Open the chart page →

9,770
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

4,243
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,811
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,491
buildkitdwiremindVerified publisher0.33.01 of 1See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,152
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
expat@2.8.2-1~deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

19,691
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

322
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
no fix listed

Open the chart page →

12,037
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,880
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.8.4-r0

Open the chart page →

14,917
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,657
btrfs-nfs-csibtrfs-nfs-csi0.4.01 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

3,183
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

933
pgcagriekinVerified publisher2.1.01 of 2See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,280
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,004
carbone-eecarboneOfficialVerified publisher1.0.61 of 1See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.11.0518172cbad49
expat@2.7.1-2
no fix listed

Open the chart page →

1,619
home-assistant-matter-servercharts-derwitt-devVerified publisher4.2.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,360
shlink-webchristianhuthVerified publisher1.13.11 of 1See more

shlink-web christianhuth 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
kafkacloudpirates-kafkaVerified publisher0.1.61 of 1See more

kafka cloudpirates-kafka 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

549
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

3,951
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
expat@2.7.1-2
no fix listed

Open the chart page →

11,205
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,028
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
epam/ai-dial-core:latest00fab0cf9c78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,521
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest1942d0feb4d5
expat@2.8.3-r0
2.8.4-r0
phpipam/phpipam-www:lateste7640697a075
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

444
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

3,539
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,967
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,423
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

4,341
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jhonbrownn/elchi:v1.5.146936e4f1caeb
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

15,383
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-eureka:latest05002092c621
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

15,860
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
expat@2.7.1-2
no fix listed

Open the chart page →

5,584
eoapieoapiOfficialVerified publisher0.16.23 of 7See more

eoapi eoapi 0.16.2

3 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
expat@2.7.0-r0
2.8.4-r0
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
expat@2.7.1-2
no fix listed

Open the chart page →

6,250
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,685
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,605
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,675
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
expat@2.7.0-r0
2.8.4-r0
featurehub/edge:1.9.198ad426737f6
expat@2.7.0-r0
2.8.4-r0
featurehub/mr:1.9.1477d8bf771a9
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

8,240
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,133
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

4,629
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
no fix listed

Open the chart page →

4,879
geo-checkergeo-checkerVerified publisher5.0.01 of 1See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ymuski/geo-checker:5.0.05ba7fd8c7bdc
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,455
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,000
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

840
kafkahelmforgeVerified publisher1.3.141 of 1See more

kafka helmforge 1.3.14

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

549

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
featurehub/edge:1.9.198ad426737f6
expat@2.7.0-r0
2.8.4-r0
1
featurehub/mr:1.9.1477d8bf771a9
expat@2.7.0-r0
2.8.4-r0
1
fireflyiii/core:version-6.6.6ae69fdd95cde
expat@2.7.1-2
no fix listed
1
folioci/edge-caiasoft:latestc3cfa89eee2f
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-connexion:latestb4863d135524
expat@2.7.5-r0
2.8.4-r0
1
folioci/edge-dematic:latest48c9b1d180d4
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-inn-reach:latestc64e4d9dd3fc
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-ncip:lateste760dbb81d1a
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-oai-pmh:latesteedfcbc29792
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-orders:latest1ef654ee9f23
expat@2.8.3-r0
2.8.4-r0
1
folioci/edge-patron:latest682b852e056d
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-rtac:latest15ef73b1abd0
expat@2.8.2-r0
2.8.4-r0
1
folioci/edge-sip2:latest86106f20ef51
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-authtoken:latest995a25a33133
expat@2.7.4-r0
2.8.4-r0
1
folioci/mod-calendar:latest22f65982efd7
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-configuration:latestdd0cdc89670a
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-copycat:latest1513fad2b799
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-courses:latest68ca414f5596
expat@2.7.4-r0
2.8.4-r0
1
folioci/mod-data-export:latest0cc86bf09755
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-data-export-spring:latestf1d7caf4544b
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-data-export-worker:latest1ad1811c9b37
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-email:latest79ea8e2e7ebf
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-entities-links:latest3e2412815c0f
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-eusage-reports:latest15de67587091
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-event-config:latest0192adad3897
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-finance:latest14450bc15430
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-finance-storage:latest4bc4057abaea
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-gobi:latestc58c989dac44
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-inn-reach:latestcc8584e43382
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-inventory-storage:latestf92ff0a3ca40
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-inventory-update:latestba84812b4d58
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-invoice:latest45b7b13e81e1
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-invoice-storage:latest0bc720abcb78
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.4-r0
1
folioci/mod-notes:latest998ac4782e0d
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-notify:latesta8c1a90005fc
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-orders:latestfc4528220fb8
expat@2.8.3-r0
2.8.4-r0
1
folioci/mod-orders-storage:latestceeaacc3bf16
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-organizations:latest7dc9ccf3d937
expat@2.8.1-r0
2.8.4-r0
1
folioci/mod-organizations-storage:lateste46892405fde
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-password-validator:latestb31d75f2bf7b
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-patron:latest5f213acfe2f8
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-patron-blocks:latestde7318069a67
expat@2.8.2-r0
2.8.4-r0
1
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.