StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
mod-ebsconetfolio-org0.1.31 of 1See more

mod-ebsconet folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-ebsconet:latest3ae8cb99daa3
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,203
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

866
mod-entities-linksfolio-org0.1.11 of 1See more

mod-entities-links folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-entities-links:latest3e2412815c0f
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

285
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

563
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,224
mod-event-configfolio-org0.1.341 of 1See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-event-config:latest0192adad3897
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

420
mod-financefolio-org0.1.341 of 1See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-finance:latest14450bc15430
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

534
mod-finance-storagefolio-org0.1.341 of 1See more

mod-finance-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-finance-storage:latest4bc4057abaea
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

413
mod-gobifolio-org0.1.341 of 1See more

mod-gobi folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-gobi:latestc58c989dac44
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

595
mod-inn-reachfolio-org0.1.71 of 1See more

mod-inn-reach folio-org 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inn-reach:latestcc8584e43382
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

512
mod-inventory-storagefolio-org0.1.371 of 1See more

mod-inventory-storage folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inventory-storage:latestf92ff0a3ca40
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

81
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

878
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

568
mod-invoice-storagefolio-org0.1.341 of 1See more

mod-invoice-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-invoice-storage:latest0bc720abcb78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

225
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,151
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,088
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,103
mod-notesfolio-org0.1.341 of 1See more

mod-notes folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-notes:latest998ac4782e0d
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

156
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

271
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

962
mod-ordersfolio-org0.1.341 of 1See more

mod-orders folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-orders:latestfc4528220fb8
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

456
mod-orders-storagefolio-org0.1.351 of 1See more

mod-orders-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-orders-storage:latestceeaacc3bf16
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

442
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

808
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

665
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

394
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

827
mod-patron-blocksfolio-org0.1.341 of 1See more

mod-patron-blocks folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-patron-blocks:latestde7318069a67
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

359
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,214
mod-pubsubfolio-org0.1.341 of 1See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-pubsub:latest0a4fa4ad5d72
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,009
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

571
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,531
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-source-record-managerfolio-org0.1.371 of 1See more

mod-source-record-manager folio-org 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-source-record-manager:latesta940caf026ee
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

58
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

342
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,214
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

430
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,321
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
expat@2.7.1-2
no fix listed

Open the chart page →

2,442
okapifolio-org0.3.311 of 1See more

okapi folio-org 0.3.31

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
folioci/okapi:latestdf29ac807a45
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

48
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
expat@2.7.1-2
no fix listed

Open the chart page →

3,112
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

294
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
expat@2.7.1-2
no fix listed

Open the chart page →

8,923
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,338
panda-pulsegeneral-helm-chartsVerified publisher1.0.51 of 1See more

panda-pulse general-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latest7b14deeb416a
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

703
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

12,170
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
no fix listed

Open the chart page →

1,634
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

15,722
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
no fix listed
1
jhonbrownn/elchi:v1.5.146936e4f1caeb
expat@2.8.2-r0
2.8.4-r0
1
jlesage/firefox:v25.03.1055c28defe31
expat@2.7.0-r0
2.8.4-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
expat@2.8.2-1~deb13u1
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
expat@2.7.5-r0
2.8.4-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
expat@2.7.5-r0
2.8.4-r0
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
expat@2.7.4-r0
2.8.4-r0
1
kitware/cdash:v5.3.0d7767d9b9da4
expat@2.8.2-1~deb13u1
no fix listed
1
kixote/typemill4e9dff179519
expat@2.8.3-1~deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed
1
kubearmor/kubearmor:stablea08141311045
expat@2.8.2-r0
2.8.4-r0
1
kubearmor/kubearmor-init:stable236ade6e67b1
expat@2.8.2-r0
2.8.4-r0
1
kubeshark/front:v53.4cc7f07b99fac
expat@2.8.2-r0
2.8.4-r0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
expat@2.7.4-r0
2.8.4-r0
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
no fix listed
1
lbenicio/stremio-web:latest732f9003de33
expat@2.7.5-r0
2.8.4-r0
1
library/buildpack-deps:scmac978b783657
expat@2.8.3-1~deb13u1
no fix listed
1
library/docker:28.5.2-dind2a232a42256f
expat@2.7.3-r0
2.8.4-r0
1
library/docker:29.7.2-dind3ef33f2e220b
expat@2.8.3-r0
2.8.4-r0
1
library/docker:27-cli851f91d24121
expat@2.6.4-r0
2.8.4-r0
1
library/docker:27-dindaa3df78ecf32
expat@2.6.4-r0
2.8.4-r0
1
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
expat@2.8.1-r0
2.8.4-r0
1
library/golang:latest512690a56605
expat@2.8.3-1~deb13u1
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
no fix listed
1
library/nginx:1.291881968aff6f
expat@2.7.1-2
no fix listed
1
library/nginx:1.31.0-alpine2f07d83bf561
expat@2.7.5-r0
2.8.4-r0
1
library/nginx:1.31.3-alpine4a73073bd557
expat@2.8.2-r0
2.8.4-r0
1
library/nginx:1.29.8-alpine5616878291a2
expat@2.7.5-r0
2.8.4-r0
1
library/nginx:1.27-alpine65645c7bb6a0
expat@2.7.0-r0
2.8.4-r0
1
library/nginx:1.28-alpinea8b39bd9cf0f
expat@2.7.5-r0
2.8.4-r0
1
library/nginx:1.29.3-alpineb3c656d55d7a
expat@2.7.3-r0
2.8.4-r0
1
library/node:latestf5d1cc40abc1
expat@2.8.3-1~deb13u1
no fix listed
1
library/python:3.1070c9cc675605
expat@2.8.3-1~deb13u1
no fix listed
1
library/python:3.9da5aee29682d
expat@2.7.1-2
no fix listed
1
library/redmine:6.1.204ac44a2595b
expat@2.7.1-2
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
expat@2.7.1-2
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
expat@2.7.1-2
no fix listed
1
library/znc:1.10.1c731c6a9b8b6
expat@2.7.5-r0
2.8.4-r0
1
librenms/librenms:26.8.28194a4a9ff49
expat@2.8.3-r0
2.8.4-r0
1
linkstackorg/linkstack:latest1c8b05399ee4
expat@2.7.4-r0
2.8.4-r0
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
expat@2.8.2-r0
2.8.4-r0
1
linuxserver/bookstack:26.05.202605282ebf97852661
expat@2.7.5-r0
2.8.4-r0
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
expat@2.7.0-r0
2.8.4-r0
1
linuxserver/deluge:2.2.09505c64720af
expat@2.8.3-r0
2.8.4-r0
1
linuxserver/qbittorrent:latesta00b6a597a38
expat@2.8.3-r0
2.8.4-r0
1
linuxserver/qbittorrent:5.2.2dd24a5f3db32
expat@2.8.2-r0
2.8.4-r0
1
loeken/jellyfin:10.11.87efbc24e47b0
expat@2.7.5-r0
2.8.4-r0
1
m11s/decap-cms:0.2.11-s30cd6810c9885
expat@2.7.5-r0
2.8.4-r0
1
machines/filestash:latest0b8fc005e52e
expat@2.8.3-1~deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.