StackRadar

CVE-2026-76957

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,782
of 17,787 indexed, latest versions
Container images
1,643
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,782 of 17,787 indexed charts deploy, on 1,643 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+35 more2.5.0-1+deb12u3, 2.8.4-11,229
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0412
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76957DEBIAN-CVE-2026-76957UBUNTU-CVE-2026-76957AZL-96851ECHO-7a51-5ef2-da43

Charts affected

1,782 by stars
ChartLatestAffected imagesRadar Score
sentry-k8ssentry-k8sVerified publisher1.4.14 of 11See more

sentry-k8s sentry-k8s 1.4.1

4 of the 11 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
expat@2.7.5-r0
2.8.4-r0
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
ghcr.io/getsentry/snuba:26.7.210f8d164109b
expat@2.7.1-2
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

16,194
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
dserio83/velero-watchdog:0.1.8d5deae589229
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

11,545
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,792
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

6,864
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
expat@2.2.9-1ubuntu0.4
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

46,028
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
expat@2.7.1-2
no fix listed

Open the chart page →

7,157
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

5,688
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

10,405
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

2,622
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

13,532
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
expat@2.2.9-1build1
no fix listed

Open the chart page →

24,984
silverbulletstone0.10.01 of 1See more

silverbullet stone 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

422
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,874
supabasesupabse0.8.03 of 11See more

supabase supabse 0.8.0

3 of the 11 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
supabase/storage-api:v1.60.4c8eb9858eafe
expat@2.7.5-r0
2.8.4-r0
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

18,213
syncerdsyncerdVerified publisher0.2.21 of 1See more

syncerd syncerd 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

48
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed

Open the chart page →

3,253
mumblesyntaxerror404Verified publisher1.0.41 of 1See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,138
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,839
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
expat@2.7.1-2+dhi4
no fix listed

Open the chart page →

2,553
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

9,108
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

9,108
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
expat@2.8.3-1~deb13u1
no fix listed
kixote/typemilldigest-pinned628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,402
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

12,137
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

4,022
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

4,058
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
expat@2.2.9-1ubuntu0.6
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

26,843
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,086
waldurwaldur-chartsVerified publisher8.1.22 of 3See more

waldur waldur-charts 8.1.2

2 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.2a8b5b4777027
expat@2.8.2-r0
2.8.4-r0
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

4,870
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

15,984
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,834
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
no fix listed

Open the chart page →

41,455
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

7,883
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
expat@2.7.1-2
no fix listed

Open the chart page →

7,728
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
no fix listed

Open the chart page →

8,139
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.91 of 1See more

workflows-aggregator workflows-aggregator 0.16.9

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
expat@2.7.4-1
no fix listed

Open the chart page →

1,329
discord-botxxczakiVerified publisher0.27.71 of 2See more

discord-bot xxczaki 0.27.7

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
xxczaki/discord-bot:d088700d98c2e83381d034e584aed9412518933c4271dc43f117
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

475
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,698
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

9,832
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.0f10fd24b2290
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,947
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,866
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,170
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

10,408
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

12,022
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

723
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

3,226
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
no fix listed

Open the chart page →

25,507
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,487
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,491
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

2,092

Container images carrying it

1,643 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
expat@2.2.5-3ubuntu0.2
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
expat@2.7.4-1
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
expat@2.6.1-2ubuntu0.4
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
expat@2.6.1-2ubuntu0.4
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
expat@2.7.1-2
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
expat@2.2.5-3ubuntu0.7
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
jakowenko/double-take:1.6.0b858bac9e32a
expat@2.2.9-1build1
no fix listed
1
jeboehm/mailserver-filter:5.0.92e756949e537d
expat@2.7.0-r0
2.8.4-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
expat@2.7.1-r0
2.8.4-r0
1
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
2.5.0-1+deb12u3
1
jellyfin/jellyfin:10.10.77ae36aab93ef
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
2.5.0-1+deb12u3
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
expat@2.5.0-1
2.5.0-1+deb12u3
1
jhipster/jhipster-registry:latest7184525acd4d
expat@2.2.9-1ubuntu0.8
no fix listed
1
jhonbrownn/elchi:v1.5.146936e4f1caeb
expat@2.8.2-r0
2.8.4-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
2.5.0-1+deb12u3
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
expat@2.2.9-1ubuntu0.6
no fix listed
1
jlesage/firefox:v25.03.1055c28defe31
expat@2.7.0-r0
2.8.4-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
expat@2.1.0-7ubuntu0.16.04.5
no fix listed
1
jodogne/orthanc-plugins:latest6ff510aa29c2
expat@2.8.2-1~deb13u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
josh5/unmanic:0.2.64d49c4816260
expat@2.4.7-1ubuntu0.2
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
jupyterhub/jupyterhub:5.4.63974ba945e65
expat@2.6.1-2ubuntu0.4
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
expat@2.2.9-1build1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
expat@2.2.9-1build1
no fix listed
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
expat@2.6.1-2ubuntu0.1
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
expat@2.7.5-r0
2.8.4-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
expat@2.7.5-r0
2.8.4-r0
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
expat@2.7.4-r0
2.8.4-r0
1
kennethreitz/httpbin:latest599fe5e50731
expat@2.2.5-3
no fix listed
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
expat@2.2.9-1ubuntu0.6
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
kinseii/wazuh-agent:4.14.17160eb143728
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.