StackRadar

CVE-2026-76957

High

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,779
of 17,790 indexed, latest versions
Container images
1,642
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

Carried by container images the latest versions of 1,779 of 17,790 indexed charts deploy, on 1,642 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+35 more2.5.0-1+deb12u3, 2.8.4-11,231
expatapk2.6.4-r0, 2.7.0-r0, 2.7.1-r0, 2.7.2-r0+7 more2.8.4-r0409
expatrpm2.8.2-1.azl32.8.3-22
OSV records
ALPINE-CVE-2026-76957DEBIAN-CVE-2026-76957UBUNTU-CVE-2026-76957AZL-96851ECHO-7a51-5ef2-da43

Charts affected

1,779 by stars
ChartLatestAffected imagesRadar Score
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

12,359
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,172
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
expat@2.6.1-2ubuntu0.4
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

9,557
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

3,664
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

14,181
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

6,350
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
no fix listed
library/python:3.7eedf63967cdb
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

97,217
testkubekubeshop2.13.22 of 5See more

testkube kubeshop 2.13.2

2 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
expat@2.6.1-2ubuntu0.4
no fix listed
kubeshop/testkube-api-server:2.13.244166c28422f
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

5,151
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,070
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

7,997
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

8,777
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

10,563
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

481
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

2,374
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

19,434
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

1,495
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,047
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

3,002
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

9,775
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

8,254
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
expat@2.7.4-1
no fix listed

Open the chart page →

1,234
limesurveyarea-42Verified publisher0.3.951 of 2See more

limesurvey area-42 0.3.95

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.1fdb06d62c22e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,775
athens-proxyathens-chartsOfficialVerified publisher0.17.11 of 1See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
gomods/athens:v0.18.197cc113b34b0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,306
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

1,896
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

8,026
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
expat@2.7.4-1
no fix listed
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
expat@2.7.4-1
no fix listed

Open the chart page →

10,861
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

5,256
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
expat@2.5.0-1
2.5.0-1+deb12u3

Open the chart page →

4,194
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
expat@2.7.5-r0
2.8.4-r0

Open the chart page →

2,132
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
timescale/timescaledb:latest-pg16289d55704b1b
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

17,569
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3

Open the chart page →

29,070
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
expat@2.7.1-2
no fix listed

Open the chart page →

9,395
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
expat@2.6.1-2ubuntu0.1
no fix listed

Open the chart page →

4,200
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

4,723
flyte-coreflyte2.0.481 of 3See more

flyte-core flyte 2.0.48

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latestdb4362ec0d3b
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

1,179
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
expat@2.7.0-r0
2.8.4-r0

Open the chart page →

2,285
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,739
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

22,792
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,647
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

10,221
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,671
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

11,900
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
expat@2.8.2-r0
2.8.4-r0

Open the chart page →

1,381
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
expat@2.8.3-1~deb13u1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,852
giteagroundhog2k0.16.31 of 1See more

gitea groundhog2k 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
gitea/gitea:1.27.387a67ee09d3a
expat@2.8.3-r0
2.8.4-r0

Open the chart page →

543
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
expat@2.7.4-1
no fix listed

Open the chart page →

1,827
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3

Open the chart page →

4,190
headscaleheadscaleVerified publisher1.0.191 of 3See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

3,439
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
expat@2.8.1-r0
2.8.4-r0

Open the chart page →

2,338
coreinstill-aiOfficialVerified publisher0.1.754 of 15See more

core instill-ai 0.1.75

4 of the 15 container images this version deploys carry CVE-2026-76957.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
no fix listed
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
no fix listed
temporalio/admin-tools:1.28cfde8170c92f
expat@2.7.4-r0
2.8.4-r0

Open the chart page →

31,122

Container images carrying it

1,642 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
expat@2.8.2-1+e1
2.8.4-1
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
expat@2.4.7-1ubuntu0.2
no fix listed
1
ghcr.io/processone/ejabberd:latest5aeb0faa39cf
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
expat@2.7.1-2
no fix listed
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
expat@2.7.4-1
no fix listed
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
expat@2.7.0-r0
2.8.4-r0
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
expat@2.5.0-1+deb12u2
2.5.0-1+deb12u3
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
2.5.0-1+deb12u3
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/shesselink81/wordpress-alpine:7.1.0.032ace450bcd9
expat@2.8.3-r0
2.8.4-r0
1
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
expat@2.7.1-2
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
expat@2.5.0-1
2.5.0-1+deb12u3
1
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
expat@2.8.2-r0
2.8.4-r0
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
expat@2.7.3-r0
2.8.4-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
expat@2.7.0-r0
2.8.4-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.