StackRadar

CVE-2026-76956

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
769
of 17,781 indexed, latest versions
Container images
606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 769 of 17,781 indexed charts deploy, on 606 images.

Affected packageAffected versionsFixed inImages
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatdeb2.7.1-2, 2.7.1-2+dhi4, 2.7.5-1, 2.8.2-1+e1+2 more2.8.4-1195
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76956DEBIAN-CVE-2026-76956AZL-96848ECHO-8a36-8d53-bf0c

Charts affected

769 by stars
ChartLatestAffected imagesRadar Score
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

31,844
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,476
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,133
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,240
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
reportportal/service-ui:5.15.5aea8747cb639
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

11,869
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

6,639
immichsecustorVerified publisher2.0.41 of 1See more

immich secustor 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,059
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
expat@2.7.5-r0
2.8.4-r0
ghcr.io/getsentry/snuba:26.7.210f8d164109b
expat@2.7.1-2
no fix listed

Open the chart page →

16,449
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,792
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
expat@2.7.1-2
no fix listed

Open the chart page →

7,126
silverbulletstone0.10.01 of 1See more

silverbullet stone 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

422
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
supabase/storage-api:v1.60.4c8eb9858eafe
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

18,075
syncerdsyncerdVerified publisher0.2.21 of 1See more

syncerd syncerd 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

48
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed

Open the chart page →

3,240
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
expat@2.7.1-2+dhi4
no fix listed

Open the chart page →

2,522
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
expat@2.8.3-1~deb13u1
no fix listed
kixote/typemilldigest-pinned628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,338
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,085
waldurwaldur-chartsVerified publisher8.1.22 of 3See more

waldur waldur-charts 8.1.2

2 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.2a8b5b4777027
expat@2.8.2-r0
2.8.4-r0
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

4,839
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,833
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
expat@2.7.1-2
no fix listed

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
no fix listed

Open the chart page →

8,217
discord-botxxczakiVerified publisher0.27.51 of 2See more

discord-bot xxczaki 0.27.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e9f46b6aebac02e7b96ed41a3f62b26e871cf009bb919aac45dc
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

474
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,697
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,835
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,170
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

10,323
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

723
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,476
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,582
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

2,092
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

453
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

13,613
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

4,777
akto-k8s-ebpfakto0.1.31 of 1See more

akto-k8s-ebpf akto 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

838
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,276
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

6,397
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.8.4-r0

Open the chart page →

4,880
esphomealekcVerified publisher2.8.11 of 1See more

esphome alekc 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
esphome/esphome:2026.8.285abea33854b
expat@2.7.1-2
no fix listed

Open the chart page →

3,112
excalidashalekcVerified publisher1.4.01 of 2See more

excalidash alekc 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
zimengxiong/excalidash-frontend:0.6.04ec5b20c0303
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

904
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,919
sambaalekcVerified publisher1.1.01 of 1See more

samba alekc 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,141
alertigatealertigate0.5.11 of 1See more

alertigate alertigate 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:1.2.1628d49e0e01b
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,538
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,870
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,827
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

1,273
buildkit-serviceandrcunsVerified publisher1.8.01 of 1See more

buildkit-service andrcuns 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-76956.

Container imageDigestPackageFixed in
moby/buildkit:v0.31.0a095b3d11ce1
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,285

Container images carrying it

606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
106
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed
23
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed
13
jellyfin/jellyfin:10.11:10.11.11:latestaefb67e6a7ff
expat@2.7.1-2
no fix listed
7
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed
7
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed
7
library/wordpress:7.1.0-apache:latest5a93c470ae82
expat@2.8.3-1~deb13u1
no fix listed
6
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.4-r0
6
library/httpd:2.4:2.4.68:latest979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed
5
library/httpd:2.4-alpine:alpine1b766f17b840
expat@2.8.1-r0
2.8.4-r0
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
expat@2.7.3-r0
2.8.4-r0
4
pihole/pihole:2026.07.2:latestf7d1be836e3b
expat@2.8.2-r0
2.8.4-r0
4
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
expat@2.8.2-r0
2.8.4-r0
4
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
expat@2.8.2-r0
2.8.4-r0
3
alpine/git:latest:v2.54.06f3b5029566d
expat@2.8.3-r0
2.8.4-r0
3
decisionrules/client:latest92e459f2c673
expat@2.8.3-r0
2.8.4-r0
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0
3
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
expat@2.8.1-r0
2.8.4-r0
3
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
expat@2.8.1-r0
2.8.4-r0
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
expat@2.8.2-r0
2.8.4-r0
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
expat@2.8.2-r0
2.8.4-r0
3
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
expat@2.8.2-r0
2.8.4-r0
3
alpine/git:2.47.2062a01ad7a0e
expat@2.7.0-r0
2.8.4-r0
2
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0
2
alpine/k8s:1.32.12048f8d9c8cc7
expat@2.7.4-r0
2.8.4-r0
2
apache/kafka:4.3.177e3df905404
expat@2.7.5-r0
2.8.4-r0
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
no fix listed
2
epam/ai-dial-core:0.47.0:latest00fab0cf9c78
expat@2.8.3-r0
2.8.4-r0
2
excalidraw/excalidraw:latestf7ee194addd6
expat@2.7.0-r0
2.8.4-r0
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
expat@2.7.1-2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
expat@2.7.1-2
no fix listed
2
gisaia/agate:0.18.198213fa403ae
expat@2.8.3-r0
2.8.4-r0
2
gisaia/airs:0.18.15abfe00317bf
expat@2.8.3-r0
2.8.4-r0
2
gisaia/aproc-service:0.18.1ac6564921994
expat@2.8.3-r0
2.8.4-r0
2
gisaia/fam:0.18.1ae525930b4b6
expat@2.8.3-r0
2.8.4-r0
2
gotenberg/gotenberg:8.36.087c16b9f3642
expat@2.8.2-1~deb13u1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
expat@2.8.3-1~deb13u1
no fix listed
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
expat@2.8.3-1~deb13u1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
expat@2.8.3-1~deb13u1
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
no fix listed
2
kubeshop/testkube-api-server:2.13.18ffed0d2d494
expat@2.8.2-r0
2.8.4-r0
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
expat@2.8.3-1~deb13u1
no fix listed
2
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed
2
library/nginx:1.29.49dd288848f44
expat@2.7.1-2
no fix listed
2
library/redmine:6.1.3-trixief474a901faec
expat@2.8.3-1~deb13u1
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
expat@2.7.1-2
no fix listed
2
metabase/metabase:v0.61.1.x9491ed11c901
expat@2.7.5-r0
2.8.4-r0
2
moby/buildkit:v0.32.2-rootless504731e577c2
expat@2.8.2-r0
2.8.4-r0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.