StackRadar

CVE-2026-76957

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,779
of 17,790 indexed, latest versions
Container images
1,642
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,779 of 17,790 indexed charts deploy, on 1,642 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+35 more2.5.0-1+deb12u3, 2.8.4-11,231
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76957DEBIAN-CVE-2026-76957UBUNTU-CVE-2026-76957AZL-96851ECHO-7a51-5ef2-da43

Charts affected

1,779 by stars
ChartLatestAffected imagesRadar Score
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:postgres9fd5faf1fe80
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:apacheb2f8c6d52623
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

11,180
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
expat@2.4.7-1
no fix listed

Open the chart page →

7,211
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
expat@2.4.7-1
no fix listed

Open the chart page →

7,938
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,986
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

57,759
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
no fix listed

Open the chart page →

12,628
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

25,196
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

19,306
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,007
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,822
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

9,038
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
expat@2.4.7-1ubuntu0.2
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

37,874
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

11,885
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

10,502
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

16,230
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,363
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,042
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,080
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,554
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

3,157
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,716
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

18,155
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,716
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,125
intelowlintelowl-helm6.6.1-01-06-20262 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

2 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
2.5.0-1+deb12u3
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

17,966
inventreeinventreeOfficialVerified publisher0.4.282 of 2See more

inventree inventree 0.4.28

2 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
expat@2.8.3-1~deb13u1
no fix listed
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,849
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,818
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

777
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,199
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

6,188
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

45,472
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,864
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,210
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
expat@2.7.1-2
no fix listed

Open the chart page →

2,581
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,103
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,961
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

4,511
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
no fix listed

Open the chart page →

3,022
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,498
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,259
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,215
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

7,838
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,655

Container images carrying it

1,642 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gitea/act_runner:0.3.1c2a169c5e998
expat@2.7.5-r0
2.8.4-r0
1
gitea/gitea:1.27.3-rootless1c17ecaead42
expat@2.8.3-r0
2.8.4-r0
1
gitea/gitea:1.27.134e3f6b75f5c
expat@2.8.2-r0
2.8.4-r0
1
gitea/gitea:1.26.27d13848af126
expat@2.7.5-r0
2.8.4-r0
1
gitea/gitea:1.27.387a67ee09d3a
expat@2.8.3-r0
2.8.4-r0
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
expat@2.2.9-1ubuntu0.4
no fix listed
1
glarad/mcp-management-portal-clr:0.6.8807e453354a7
expat@2.8.2-r0
2.8.4-r0
1
glarad/mc-service-registry:latest7b02b9e7f1ef
expat@2.8.1-r0
2.8.4-r0
1
glasskube/operator:0.12.2be5133100d63
expat@2.4.7-1ubuntu0.2
no fix listed
1
glpi/glpi:latest4b681082a79e
expat@2.8.3-1~deb13u1
no fix listed
1
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
expat@2.8.3-r0
2.8.4-r0
1
gomods/athens:v0.17.10f61d1e62359
expat@2.7.5-r0
2.8.4-r0
1
gomods/athens:v0.18.197cc113b34b0
expat@2.8.2-r0
2.8.4-r0
1
gotenberg/gotenberg:8.30206a6c708fc6
expat@2.7.1-2
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
expat@2.7.1-2
no fix listed
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
expat@2.8.2-1~deb13u1
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
expat@2.2.5-3ubuntu0.2
no fix listed
1
grafana/oncall:v1.16.5499851658393
expat@2.7.0-r0
2.8.4-r0
1
graviteeio/ae-engine:3.0.24140932887e0
expat@2.8.2-r0
2.8.4-r0
1
graylog/graylog:6.1.1019de1aff48c2
expat@2.4.7-1ubuntu0.5
no fix listed
1
graylog/graylog:7.1.9598bd41fefd5
expat@2.6.1-2ubuntu0.4
no fix listed
1
graylog/graylog:7.2.0-beta.3-1bf3e1e7b7352
expat@2.6.1-2ubuntu0.4
no fix listed
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
expat@2.6.1-2ubuntu0.4
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
expat@2.6.1-2build1
no fix listed
1
guacamole/guacamole:1.5.50f62f6d17ab3
expat@2.4.7-1ubuntu0.2
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
gulacedia/web-dvwa-new:v367b467d961ca
expat@2.5.0-1
2.5.0-1+deb12u3
1
hamidyousefi93/saam-test:latestc34f071f6ed0
expat@2.5.0-1
2.5.0-1+deb12u3
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
expat@2.4.7-1ubuntu0.2
no fix listed
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
expat@2.4.7-1ubuntu0.6
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
expat@2.2.9-1build1
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
expat@2.2.9-1ubuntu0.4
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
expat@2.2.9-1build1
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
expat@2.2.9-1ubuntu0.6
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
hazegoodlife/haaze:milksite8d4c63169e14
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
headwindmdm/hmdm:0.1.93550b4840840
expat@2.4.7-1ubuntu0.7
no fix listed
1
heartexlabs/label-studio:latestaa461572e8f9
expat@2.7.4-r0
2.8.4-r0
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
expat@2.5.0-1
2.5.0-1+deb12u3
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
expat@2.2.9-1ubuntu0.7
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
expat@2.5.0-1
2.5.0-1+deb12u3
1
helmforge/fastmcp-server:0.2.061f759a1421f
expat@2.7.1-2
no fix listed
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
expat@2.7.1-2
no fix listed
1
helmforge/openreel-video:v0.5.07ba0d47b943f
expat@2.7.5-r0
2.8.4-r0
1
helmforge/strapi-base:5.52.270e9143d6d92
expat@2.8.3-r0
2.8.4-r0
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
expat@2.7.1-2
no fix listed
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
expat@2.5.0-1
2.5.0-1+deb12u3
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
hivemq/hivemq-edge:2026.14d8250a233cea
expat@2.6.1-2ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.