StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

13,521
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

859
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
no fix listed

Open the chart page →

5,852
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
no fix listed

Open the chart page →

9,770
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

4,243
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,811
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,491
buildkitdwiremindVerified publisher0.33.01 of 1See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,152
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
expat@2.8.2-1~deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

19,691
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

322
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
no fix listed

Open the chart page →

12,037
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,880
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.8.4-r0

Open the chart page →

14,917
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,657
btrfs-nfs-csibtrfs-nfs-csi0.4.01 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

3,183
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

933
pgcagriekinVerified publisher2.1.01 of 2See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,280
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,004
carbone-eecarboneOfficialVerified publisher1.0.61 of 1See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.11.0518172cbad49
expat@2.7.1-2
no fix listed

Open the chart page →

1,619
home-assistant-matter-servercharts-derwitt-devVerified publisher4.2.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,360
shlink-webchristianhuthVerified publisher1.13.11 of 1See more

shlink-web christianhuth 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

370
kafkacloudpirates-kafkaVerified publisher0.1.61 of 1See more

kafka cloudpirates-kafka 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

549
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

3,951
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
expat@2.7.1-2
no fix listed

Open the chart page →

11,205
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,028
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
epam/ai-dial-core:latest00fab0cf9c78
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,521
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest1942d0feb4d5
expat@2.8.3-r0
2.8.4-r0
phpipam/phpipam-www:lateste7640697a075
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

444
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

3,539
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,967
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,423
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

4,341
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jhonbrownn/elchi:v1.5.146936e4f1caeb
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

15,383
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-eureka:latest05002092c621
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
expat@2.7.5-r0
2.8.4-r0
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

15,860
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
expat@2.7.1-2
no fix listed

Open the chart page →

5,584
eoapieoapiOfficialVerified publisher0.16.23 of 7See more

eoapi eoapi 0.16.2

3 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
expat@2.7.0-r0
2.8.4-r0
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
expat@2.7.1-2
no fix listed

Open the chart page →

6,250
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,685
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,605
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,675
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
expat@2.7.0-r0
2.8.4-r0
featurehub/edge:1.9.198ad426737f6
expat@2.7.0-r0
2.8.4-r0
featurehub/mr:1.9.1477d8bf771a9
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

8,240
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,133
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

4,629
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
no fix listed

Open the chart page →

4,879
geo-checkergeo-checkerVerified publisher5.0.01 of 1See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ymuski/geo-checker:5.0.05ba7fd8c7bdc
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,455
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,000
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

840
kafkahelmforgeVerified publisher1.3.141 of 1See more

kafka helmforge 1.3.14

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

549

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
106
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed
23
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed
13
jellyfin/jellyfin:10.11:10.11.11:latestaefb67e6a7ff
expat@2.7.1-2
no fix listed
7
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed
7
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed
7
library/wordpress:7.1.0-apache:latest5a93c470ae82
expat@2.8.3-1~deb13u1
no fix listed
6
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.4-r0
6
library/httpd:2.4:2.4.68:latest979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed
5
library/httpd:2.4-alpine:alpine1b766f17b840
expat@2.8.1-r0
2.8.4-r0
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
expat@2.7.3-r0
2.8.4-r0
4
pihole/pihole:2026.07.2:latestf7d1be836e3b
expat@2.8.2-r0
2.8.4-r0
4
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
expat@2.8.2-r0
2.8.4-r0
4
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0
3
alpine/git:latest:v2.54.06f3b5029566d
expat@2.8.3-r0
2.8.4-r0
3
decisionrules/client:latest92e459f2c673
expat@2.8.3-r0
2.8.4-r0
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0
3
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
expat@2.8.1-r0
2.8.4-r0
3
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
expat@2.8.1-r0
2.8.4-r0
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
expat@2.8.2-r0
2.8.4-r0
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
expat@2.8.2-r0
2.8.4-r0
3
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
expat@2.8.2-r0
2.8.4-r0
3
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.8.4-r0
2
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0
2
alpine/k8s:1.32.12048f8d9c8cc7
expat@2.7.4-r0
2.8.4-r0
2
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
no fix listed
2
epam/ai-dial-core:0.47.0:latest00fab0cf9c78
expat@2.8.3-r0
2.8.4-r0
2
excalidraw/excalidraw:latestf7ee194addd6
expat@2.7.0-r0
2.8.4-r0
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
expat@2.7.1-2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
expat@2.7.1-2
no fix listed
2
gisaia/agate:0.18.198213fa403ae
expat@2.8.3-r0
2.8.4-r0
2
gisaia/airs:0.18.15abfe00317bf
expat@2.8.3-r0
2.8.4-r0
2
gisaia/aproc-service:0.18.1ac6564921994
expat@2.8.3-r0
2.8.4-r0
2
gisaia/fam:0.18.1ae525930b4b6
expat@2.8.3-r0
2.8.4-r0
2
gotenberg/gotenberg:8.36.087c16b9f3642
expat@2.8.2-1~deb13u1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
expat@2.8.3-1~deb13u1
no fix listed
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
expat@2.8.3-1~deb13u1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
expat@2.8.3-1~deb13u1
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
no fix listed
2
kubeshop/testkube-api-server:2.13.18ffed0d2d494
expat@2.8.2-r0
2.8.4-r0
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
expat@2.8.3-1~deb13u1
no fix listed
2
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed
2
library/nginx:1.29.49dd288848f44
expat@2.7.1-2
no fix listed
2
library/redmine:6.1.3-trixief474a901faec
expat@2.8.3-1~deb13u1
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
expat@2.7.1-2
no fix listed
2
metabase/metabase:v0.61.1.x9491ed11c901
expat@2.7.5-r0
2.8.4-r0
2
moby/buildkit:v0.32.2-rootless504731e577c2
expat@2.8.2-r0
2.8.4-r0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.