CVE-2026-77214
MediumAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,533
- of 18,035 indexed, latest versions
- Container images
- 1,359
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 1,533 of 18,035 indexed charts deploy, on 1,359 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| expatdeb | 2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 more | no fix listed | 1,359 |
- OSV records
- DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
- Trending
- Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →
Charts affected
1,533 by stars
Container images carrying it
1,359 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| selenium/ | 02f251d48d5f | expat | no fix listed | 3 |
| ghcr.io/ | 6a5594b7b32c | expat | no fix listed | 3 |
| ghcr.io/ | aa810a36942c | expat | no fix listed | 3 |
| quay.io/ | 6545dac92173 | expat | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | expat | no fix listed | 3 |
| quay.io/ | 9795f3f9f031 | expat | no fix listed | 3 |
| quay.io/ | 709c7da19c5a | expat | no fix listed | 3 |
| alexandreroman/ | 4b79473442be | expat | no fix listed | 2 |
| apache/ | 0116fb802786 | expat | no fix listed | 2 |
| apache/ | afa47bf1692a | expat | no fix listed | 2 |
| apache/ | 7cdfd8deec92 | expat | no fix listed | 2 |
| apache/ | 319cd8a81ed1 | expat | no fix listed | 2 |
| apache/ | 92d055a84e9e | expat | no fix listed | 2 |
| apache/ | ae0b86d3c4d0 | expat | no fix listed | 2 |
| cagriekin/ | 111ccc617ce7 | expat | no fix listed | 2 |
| cfssl/ | c9018c2ddf0b | expat | no fix listed | 2 |
| chromedp/ | 313ed7255ae1 | expat | no fix listed | 2 |
| cribl/ | b3c6faf8340c | expat | no fix listed | 2 |
| dbeaver/ | 0c0985098263 | expat | no fix listed | 2 |
| dzikoysk/ | 90de4c8e6c0e | expat | no fix listed | 2 |
| fireflyiii/ | fe4ecec4c2ba | expat | no fix listed | 2 |
| fireflyiii/ | ab52bf932546 | expat | no fix listed | 2 |
| flashcatcloud/ | 42e6ab16472e | expat | no fix listed | 2 |
| freeradius/ | 21c8bfa904d8 | expat | no fix listed | 2 |
| freikin/ | e58334ca5697 | expat | no fix listed | 2 |
| frinx/ | 9cd0147a09bd | expat | no fix listed | 2 |
| frinx/ | 7832e3589dba | expat | no fix listed | 2 |
| geoservercloud/ | 756559ee788a | expat | no fix listed | 2 |
| geoservercloud/ | 99540eef78ad | expat | no fix listed | 2 |
| geoservercloud/ | 5c254c53a357 | expat | no fix listed | 2 |
| geoservercloud/ | c687b1cbc891 | expat | no fix listed | 2 |
| geoservercloud/ | 5288f320cf36 | expat | no fix listed | 2 |
| geoservercloud/ | a30a60ac6cd0 | expat | no fix listed | 2 |
| gjeanmart/ | 926264c8f2d1 | expat | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | expat | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | expat | no fix listed | 2 |
| gradiant/ | 9061b1bf0f36 | expat | no fix listed | 2 |
| graviteeio/ | c7564f313dda | expat | no fix listed | 2 |
| graviteeio/ | 3caf0b09f8b5 | expat | no fix listed | 2 |
| hjacobs/ | 4b2147f47425 | expat | no fix listed | 2 |
| homebridge/ | 22cdfca31934 | expat | no fix listed | 2 |
| hookiesolutions/ | 0629694246ba | expat | no fix listed | 2 |
| hyperledger/ | a674d35eec9a | expat | no fix listed | 2 |
| istio/ | 294ca55bd1cc | expat | no fix listed | 2 |
| istio/ | 87a9db561d2e | expat | no fix listed | 2 |
| istio/ | 88c6c693e67a | expat | no fix listed | 2 |
| istio/ | a78b7a165744 | expat | no fix listed | 2 |
| jenkins/ | b470bcdc4ecd | expat | no fix listed | 2 |
| jenkins/ | c4098086090c | expat | no fix listed | 2 |
| juicedata/ | f918e7331c05 | expat | no fix listed | 2 |