StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
expat@2.7.1-2
no fix listed

Open the chart page →

5,558
ansible-playbook-operatoransible-playbook-operatorVerified publisher0.1.71 of 1See more

ansible-playbook-operator ansible-playbook-operator 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,339
antigenic-docuseal-helm-chartantigenic-docuseal-helm-chartVerified publisher0.2.01 of 1See more

antigenic-docuseal-helm-chart antigenic-docuseal-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
docuseal/docuseal:2.4.17493fd7f6728
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,766
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
no fix listed

Open the chart page →

3,239
cluster-uiappscodeVerified publisher2026.9.111 of 1See more

cluster-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/appscode/cluster-ui:2.4.0f527d10769ac
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

840
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
expat@2.7.1-2
no fix listed

Open the chart page →

37,268
websiteappscodeVerified publisher2026.9.111 of 1See more

website appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/appscode/website:v2026.9.1170d9d1b78d39
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

9,847
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
expat@2.7.1-2
no fix listed

Open the chart page →

7,489
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,923
aias-servicesarlas-stackVerified publisher28.8.04 of 5See more

aias-services arlas-stack 28.8.0

4 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
expat@2.8.3-r0
2.8.4-r0
gisaia/airs:0.18.15abfe00317bf
expat@2.8.3-r0
2.8.4-r0
gisaia/aproc-service:0.18.1ac6564921994
expat@2.8.3-r0
2.8.4-r0
gisaia/fam:0.18.1ae525930b4b6
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,001
arlas-aiasarlas-stackVerified publisher28.8.04 of 22See more

arlas-aias arlas-stack 28.8.0

4 of the 22 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
expat@2.8.3-r0
2.8.4-r0
gisaia/airs:0.18.15abfe00317bf
expat@2.8.3-r0
2.8.4-r0
gisaia/aproc-service:0.18.1ac6564921994
expat@2.8.3-r0
2.8.4-r0
gisaia/fam:0.18.1ae525930b4b6
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

40,238
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,445
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

13,913
nas-appsawesomeVerified publisher2.0.03 of 8See more

nas-apps awesome 2.0.0

3 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
linuxserver/qbittorrent:latesta00b6a597a38
expat@2.8.3-r0
2.8.4-r0
wettyoss/wetty:latest7423b3d40ba2
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

7,152
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,009
axosyslogaxosyslogVerified publisher0.21.01 of 1See more

axosyslog axosyslog 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.27.00379598e9ad2
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

394
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,722
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,028
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,170
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

9,521
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
qbittorrentbrandan-schmitz-helm-chartsVerified publisher2.2.01 of 1See more

qbittorrent brandan-schmitz-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
linuxserver/qbittorrent:5.2.2dd24a5f3db32
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

956
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
casepack-apibysamioVerified publisher0.31.01 of 1See more

casepack-api bysamio 0.31.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-api:0.31.00eb3ad229c2c
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

339
casepack-docsbysamioVerified publisher0.8.01 of 1See more

casepack-docs bysamio 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-docs:0.8.0443d9850a688
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
casepack-spabysamioVerified publisher0.30.01 of 1See more

casepack-spa bysamio 0.30.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-spa:0.30.0129212faf248
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

8,978
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

2,398
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine1b766f17b840
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

901
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.8.4-r0

Open the chart page →

15,027
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:trixie05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

15,371
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
expat@2.7.1-2
no fix listed

Open the chart page →

4,396
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
expat@2.7.1-2
no fix listed

Open the chart page →

7,405
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

4,083
kitchenowlchart-kitchenowl0.1.122 of 2See more

kitchenowl chart-kitchenowl 0.1.12

2 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
expat@2.7.1-2
no fix listed
tombursch/kitchenowl-web:v0.7.8517f808eee66
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

4,803
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,722
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.31 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,346
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,626
radicalecharts-derwitt-devVerified publisher0.1.0-1.0.01 of 1See more

radicale charts-derwitt-dev 0.1.0-1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

426
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,722
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,986
prometheus-pve-exporterchristianhuthVerified publisher2.10.01 of 1See more

prometheus-pve-exporter christianhuth 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

348
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

840
cinnycinnyVerified publisher0.2.241 of 1See more

cinny cinny 0.2.24

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

804

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
mauricenino/dashdot:5.9.2236997816917
expat@2.7.0-r0
2.8.4-r0
1
mavrick1/kubestellar-b:latest45ca0429a1d4
expat@2.7.0-r0
2.8.4-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
expat@2.7.0-r0
2.8.4-r0
1
metabase/metabase:v0.63.1.124f150effd484
expat@2.8.2-r0
2.8.4-r0
1
metabase/metabase:v0.53.4.17807bc5cad17
expat@2.6.4-r0
2.8.4-r0
1
mindsdb/mindsdb:latest163011c09299
expat@2.7.1-2
no fix listed
1
moby/buildkit:v0.31.0a095b3d11ce1
expat@2.7.5-r0
2.8.4-r0
1
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
no fix listed
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
expat@2.7.3-r0
2.8.4-r0
1
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
expat@2.8.2-r0
2.8.4-r0
1
n8nio/n8n:2.25.7761374d4eb84
expat@2.7.5-r0
2.8.4-r0
1
n8nio/n8n:2.36.8cfe2704ff858
expat@2.8.2-r0
2.8.4-r0
1
netbirdio/dashboard:v2.91.0aae926912ca4
expat@2.8.2-r0
2.8.4-r0
1
netdata/netdata:v2.11.0c45c71eb23ff
expat@2.8.2-1~deb13u1
no fix listed
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
expat@2.7.3-r0
2.8.4-r0
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
expat@2.7.1-2
no fix listed
1
nginxdemos/hello:plain-text751bf8933179
expat@2.7.1-r0
2.8.4-r0
1
nginxdemos/hello:0.4b28d1e16c676
expat@2.7.1-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:latest4210a3296e7c
expat@2.8.3-1~deb13u1
no fix listed
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
expat@2.7.0-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
expat@2.8.2-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
expat@2.7.1-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
expat@2.8.3-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
no fix listed
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
expat@2.7.4-r0
2.8.4-r0
1
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
expat@2.8.2-r0
2.8.4-r0
1
nginx/nginx-ingress:edge520d439f9a9a
expat@2.8.3-1~deb13u1
no fix listed
1
nginx/nginx-ingress:5.6.18ca7b42ae702
expat@2.8.3-1~deb13u1
no fix listed
1
nodered/node-red:5.0.410f40d0a83e7
expat@2.8.2-r0
2.8.4-r0
1
nodered/node-red:4.1.2216e7403aab9
expat@2.7.3-r0
2.8.4-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
expat@2.7.5-r0
2.8.4-r0
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
no fix listed
1
novosga/novosga:latest34b9acbe6e51
expat@2.7.5-r0
2.8.4-r0
1
octoboxio/octobox:latestd909041c46eb
expat@2.7.3-r0
2.8.4-r0
1
oneuptime/runner:release4accc516d800
expat@2.8.3-1~deb13u1
no fix listed
1
onyxdotapp/onyx-backend:latest473fdffe4e67
expat@2.8.3-1~deb13u1
no fix listed
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
expat@2.8.3-r0
2.8.4-r0
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
expat@2.8.2-1~deb13u1
no fix listed
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
expat@2.7.0-r0
2.8.4-r0
1
opencsghq/label-studio:v2.5.047e22aa71870
expat@2.8.3-1~deb13u1
no fix listed
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
expat@2.8.2-1~deb13u1
no fix listed
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
expat@2.8.3-1~deb13u1
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
no fix listed
1
opennode/waldur-homeport:8.1.2a8b5b4777027
expat@2.8.2-r0
2.8.4-r0
1
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
no fix listed
1
openproject/openproject:17.8.0-slim48952034215d
expat@2.8.3-1~deb13u1
no fix listed
1
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
expat@2.7.5-r0
2.8.4-r0
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
expat@2.7.0-r0
2.8.4-r0
1
owncloud/ocis:8.0.1b38fd8fdd58f
expat@2.7.4-r0
2.8.4-r0
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
expat@2.7.1-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.