StackRadar

CVE-2026-77214

High

Advisory

Published 6 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,528
of 18,053 indexed, latest versions
Container images
1,347
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,528 of 18,053 indexed charts deploy, on 1,347 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 more2.8.4-2+e31,347
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 1 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,528 by stars
ChartLatestAffected imagesRadar Score
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

77,052
juicefs-csi-driverwener0.33.01 of 5See more

juicefs-csi-driver wener 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

11,201
kubernetes-dashboardwener7.14.01 of 5See more

kubernetes-dashboard wener 7.14.0

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.992035d16d7ff
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

4,177
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
expat@2.2.9-1build1
no fix listed

Open the chart page →

16,973
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

77,052
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

11,201
kubernetes-dashboardwenerme7.14.01 of 5See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.992035d16d7ff
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

4,177
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
expat@2.2.9-1build1
no fix listed

Open the chart page →

16,973
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

11,886
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kibana:8.19.2235544f1ff28a
expat@2.6.1-2ubuntu0.5
no fix listed

Open the chart page →

1,737
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
expat@2.5.0-1
no fix listed

Open the chart page →

5,872
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,426
wordpresswordpress-ng1.0.111 of 2See more

wordpress wordpress-ng 1.0.11

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
cloudtooling/wordpress:7.1.3fb4863035a05
expat@2.5.0-1+deb12u4
no fix listed

Open the chart page →

4,392
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

15,715
am-pattern-1wso22.6.0-71 of 6See more

am-pattern-1 wso2 2.6.0-7

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
expat@2.2.9-1build1
no fix listed

Open the chart page →

33,085
am-pattern-2wso22.6.0-71 of 6See more

am-pattern-2 wso2 2.6.0-7

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
expat@2.2.9-1build1
no fix listed

Open the chart page →

33,085
ei-pattern-1wso26.6.0-33 of 6See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
expat@2.2.5-3ubuntu0.2
no fix listed
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
expat@2.2.5-3ubuntu0.2
no fix listed
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

52,075
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

8,558
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

15,119
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

11,864
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,660
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,859
ceph-exporterygqygq2Verified publisher1.0.01 of 1See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
digitalocean/ceph_exporter:latest3ba058e9a48d
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

6,706
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,185
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,936
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,660
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

5,060
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
expat@2.4.7-1ubuntu0.9
no fix listed

Open the chart page →

6,821

Container images carrying it

1,347 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
expat@2.2.9-1ubuntu0.4
no fix listed
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.2a1ce3f58f354
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.332740e34b30a
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
expat@2.6.1-2ubuntu0.3
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
expat@2.2.9-1ubuntu0.7
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
expat@2.6.1-2ubuntu0.4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
expat@2.5.0-1
no fix listed
1
ghcr.io/thm-mni-ii/fbs-core:v2.0.734fd2032724c
expat@2.7.4-1ubuntu0.2
no fix listed
1
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.711b619dcd155
expat@2.7.4-1ubuntu0.2
no fix listed
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
expat@2.4.7-1ubuntu0.7
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
expat@2.4.7-1ubuntu0.7
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
expat@2.4.7-1ubuntu0.4
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
expat@2.4.7-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
expat@2.4.7-1ubuntu0.5
no fix listed
1
ghcr.io/wgbh-mla/chowda:maina63dadf119be
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.2953aa0935251
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
expat@2.5.0-1
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/yourls/yourls:1.10.62f2879125903
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/zalando/postgres-operator-ui:v2.0.355077d32f7e4
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/zammad/zammad:7.2.1-000061834e26e0f6
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
expat@2.6.1-2ubuntu0.6
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
no fix listed
1
mcr.microsoft.com/mssql/server:latest2b5b58162112
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
expat@2.4.7-1ubuntu0.7
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
expat@2.2.9-1ubuntu0.4
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
expat@2.6.1-2ubuntu0.4
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
expat@2.5.0-1+deb12u2
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.366b0ec8b3de3
expat@2.6.1-2ubuntu0.6
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
expat@2.7.4-1ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 8 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.