StackRadar

CVE-2026-77214

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,497
of 18,053 indexed, latest versions
Container images
1,316
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,497 of 18,053 indexed charts deploy, on 1,316 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 moreno fix listed1,316
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,497 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,316 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openelevation/open-elevation:latest82fb21612e86
expat@2.2.9-1build1
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
expat@2.2.9-1ubuntu0.4
no fix listed
1
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
expat@2.5.0-1+deb12u1
no fix listed
1
openproject/openproject:17.9.1-slim2beeecac788d
expat@2.8.3-1~deb13u1
no fix listed
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
expat@2.2.9-1ubuntu0.6
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
expat@2.2.9-1ubuntu0.6
no fix listed
1
openthread/otbr:latest49b352ce39dd
expat@2.2.5-3ubuntu0.9
no fix listed
1
openvino/model_server:2025.2.11e7cd1d70cc1
expat@2.6.1-2ubuntu0.3
no fix listed
1
openvpn/openvpn-as:latest2253c10ec652
expat@2.6.1-2ubuntu0.4
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
expat@2.2.5-3ubuntu0.2
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
expat@2.1.0-4ubuntu1.4
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
expat@2.2.9-1ubuntu0.6
no fix listed
1
owncloud/server:10.16.274c53d341076
expat@2.4.7-1ubuntu0.7
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
expat@2.4.7-1ubuntu0.7
no fix listed
1
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
expat@2.2.5-3ubuntu0.2
no fix listed
1
passbolt/passbolt:5.16.0-1-ce1768916a04b1
expat@2.8.3-1~deb13u1
no fix listed
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
expat@2.4.7-1ubuntu0.7
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
expat@2.4.7-1ubuntu0.4
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
expat@2.4.7-1
no fix listed
1
penpotapp/exporter:2.18.3418232d6ca31
expat@2.8.3-1~deb13u1+dhi2
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
expat@2.4.7-1ubuntu0.4
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
expat@2.4.7-1
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
expat@2.5.0-1+deb12u1
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
expat@2.5.0-1+deb12u1
no fix listed
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
expat@2.4.7-1ubuntu0.2
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
expat@2.4.7-1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
expat@2.7.4-1
no fix listed
1
photoprism/photoprism:260728958642220223
expat@2.7.4-1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
expat@2.6.1-2build1
no fix listed
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
expat@2.7.1-2
no fix listed
1
pk910/powfaucet:v2-stable3dcae6a62896
expat@2.5.0-1+deb12u1
no fix listed
1
pockost/matomo:5.14.0134c35415788
expat@2.8.3-1~deb13u1
no fix listed
1
posit/package-manager:2026.09.0-ubuntu-24.0468d47a7a8166
expat@2.6.1-2ubuntu0.4
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
expat@2.8.3-1~deb13u1
no fix listed
1
powerdns/pdns-recursor-54:5.4.7ec0ad7d67b63
expat@2.8.3-1~deb13u1
no fix listed
1
praravind1801/helmimages:3.0.0f29d637b9ce1
expat@2.5.0-1
no fix listed
1
prefecthq/prefect:3.8.8-python3.1119463f92420b
expat@2.8.3-1~deb13u1
no fix listed
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
expat@2.5.0-1
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
no fix listed
1
project2team4/react:latest3ff031a08887
expat@2.2.9-1ubuntu0.4
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
expat@2.6.1-2build1
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
expat@2.5.0-1+deb12u2
no fix listed
1
pschichtel/mindustry-server:v145.1b543e9c2d371
expat@2.4.7-1ubuntu0.4
no fix listed
1
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
expat@2.2.9-1ubuntu0.4
no fix listed
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
expat@2.2.5-3ubuntu0.7
no fix listed
1
qjoly/kubernetes-coffee-image:simple9f0c5ce8b5d7
expat@2.8.3-1~deb13u1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
expat@2.6.1-2ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.