StackRadar

CVE-2026-76957

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,769
of 17,803 indexed, latest versions
Container images
1,624
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,769 of 17,803 indexed charts deploy, on 1,624 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+35 more2.5.0-1+deb12u3, 2.8.4-11,219
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0403
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76957DEBIAN-CVE-2026-76957UBUNTU-CVE-2026-76957AZL-96851ECHO-7a51-5ef2-da43

Charts affected

1,769 by stars
ChartLatestAffected imagesRadar Score
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,981
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,861
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

9,062
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
expat@2.4.7-1ubuntu0.2
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

37,983
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

11,888
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

10,558
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

16,253
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,373
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,055
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,100
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,575
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

3,153
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,774
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

18,199
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,774
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,148
intelowlintelowl-helm6.6.1-01-06-20262 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

2 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
2.5.0-1+deb12u3
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

17,978
inventreeinventreeOfficialVerified publisher0.4.282 of 2See more

inventree inventree 0.4.28

2 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
expat@2.8.3-1~deb13u1
no fix listed
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,881
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,828
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

770
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,199
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

6,176
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

45,540
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

10,877
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,234
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
expat@2.7.1-2
no fix listed

Open the chart page →

2,595
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,131
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,956
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

4,529
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
no fix listed

Open the chart page →

3,035
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,498
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,279
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,276
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

7,857
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,627
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

6,609
proxmox-exporterjhofer-cloud1.4.01 of 1See more

proxmox-exporter jhofer-cloud 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

349
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,861
image-storage-servicejtektVerified publisher0.4.33 of 4See more

image-storage-service jtekt 0.4.3

3 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

22,761
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
moreillon/group-manager:latest3caa8f710ee0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
2.5.0-1+deb12u3
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
expat@2.5.0-1
2.5.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

63,890
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

16,686
docker-hub-rssjuniorjpdj0.1.311 of 1See more

docker-hub-rss juniorjpdj 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
expat@2.7.3-r0
2.8.4-r0

Open the chart page →

1,964

Container images carrying it

1,624 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubelauncher/cassandrab66aba320083
expat@2.7.4-1
no fix listed
1
ghcr.io/kubelauncher/kubectl7280594a2f18
expat@2.7.4-1
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/libretime/icecast:latest3c98b92e9535
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.8.4-r0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/duplicati:latesta792931146b4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
no fix listed
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
expat@2.7.4-1
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
no fix listed
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
expat@2.7.1-2
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
expat@2.7.1-2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/netbox-community/netbox:v4.7.13f6ab3c93e4e
expat@2.7.4-1
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/observal/observal-web:1.13.1738acf65cba7
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.