StackRadar

CVE-2026-76957

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,779
of 17,790 indexed, latest versions
Container images
1,642
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,779 of 17,790 indexed charts deploy, on 1,642 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+35 more2.5.0-1+deb12u3, 2.8.4-11,231
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76957DEBIAN-CVE-2026-76957UBUNTU-CVE-2026-76957AZL-96851ECHO-7a51-5ef2-da43

Charts affected

1,779 by stars
ChartLatestAffected imagesRadar Score
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,492
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,438
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,438
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

10,718
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
no fix listed

Open the chart page →

2,626
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
alpine/git:latest6f3b5029566d
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

3,423
chronoreaperjfwenischVerified publisher1.1.101 of 1See more

chronoreaper jfwenisch 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,022
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

7,404
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

2,619
ejabberdjuniorjpdj0.1.471 of 1See more

ejabberd juniorjpdj 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

277
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,271
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.321 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

1 of the 17 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

15,535
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

14,328
kangalkangal2.3.11 of 2See more

kangal kangal 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:latest9ae209e3791e
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

371
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,534
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,815
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,849
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.91.0aae926912ca4
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,342
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,929
powerdns-recursorklicktippVerified publisher0.4.101 of 1See more

powerdns-recursor klicktipp 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

1,906
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.2fe71c5214fdc
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,081
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

1,840
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
2.5.0-1+deb12u3
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

20,461
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

9,983
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

4,112
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

7,753
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

12,473
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed

Open the chart page →

114,050
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

3,534
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
expat@2.7.1-r0
2.8.4-r0

Open the chart page →

5,669
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

3,571
api-docslabs64io-helm-chartsVerified publisher0.7.21 of 1See more

api-docs labs64io-helm-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.32.143d9316996884
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

371
auditflowlabs64io-helm-chartsVerified publisher0.12.11 of 3See more

auditflow labs64io-helm-charts 0.12.1

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinnedc7b26d3ca11c
expat@2.7.4-1
no fix listed

Open the chart page →

1,492
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
expat@2.7.4-1
no fix listed

Open the chart page →

2,725
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

2,122
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,031
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

35,092
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

7,252
home-assistantloeken-at-homeVerified publisher2026.5.11 of 1See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.5.14ce6abc553b3
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

3,013
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,147
prometheus-pve-exporterm0nsterrr-prometheus-pve-exporterVerified publisher2.7.01 of 1See more

prometheus-pve-exporter m0nsterrr-prometheus-pve-exporter 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

349
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

5,752
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

13,643
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

3,017
mcpmcp-chartsVerified publisher0.0.233 of 7See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
expat@2.8.1-r0
2.8.4-r0
glarad/mcp-management-portal-clr:0.6.8807e453354a7
expat@2.8.2-r0
2.8.4-r0
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
expat@2.7.4-1
no fix listed

Open the chart page →

7,025
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,775
metrics-server-exportermetrics-server-exporterVerified publisher2.4.01 of 1See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,273
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

4,197
mockservermockserverOfficialVerified publisher8.0.01 of 1See more

mockserver mockserver 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-8.0.0b8426e0b3c80
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

1,037

Container images carrying it

1,642 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
expat@2.4.7-1
no fix listed
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
no fix listed
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
expat@2.7.1-r0
2.8.4-r0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
expat@2.7.1-r0
2.8.4-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed
1
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
expat@2.2.9-1ubuntu0.8
no fix listed
1
ghcr.io/kubelauncher/cassandrab66aba320083
expat@2.7.4-1
no fix listed
1
ghcr.io/kubelauncher/kubectl7280594a2f18
expat@2.7.4-1
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/libretime/icecast:latest3c98b92e9535
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
expat@2.2.5-3ubuntu0.2
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
expat@2.6.4-r0
2.8.4-r0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/duplicati:latesta792931146b4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
expat@2.7.1-2
no fix listed
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
expat@2.7.4-r0
2.8.4-r0
1
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
expat@2.7.5-r0
2.8.4-r0
1
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
expat@2.7.4-1
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
expat@2.6.1-2ubuntu0.2
no fix listed
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
expat@2.8.1-r0
2.8.4-r0
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.