StackRadar

CVE-2026-77214

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,499
of 18,053 indexed, latest versions
Container images
1,321
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,499 of 18,053 indexed charts deploy, on 1,321 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 moreno fix listed1,321
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,499 by stars
ChartLatestAffected imagesRadar Score
jupyterhub-chartk8s-jupyterhub0.1.01 of 1See more

jupyterhub-chart k8s-jupyterhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
truebyteinnovationllp/jupyterhub-k8s:5.5.06bf978b96279
expat@2.7.1-2
no fix listed

Open the chart page →

1,897
librephotosk8sonlabVerified publisher1.1.72 of 7See more

librephotos k8sonlab 1.1.7

2 of the 7 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
reallibrephotos/librephotos:1.2.1ecd7052f2b5f
expat@2.6.1-2ubuntu0.6
no fix listed
reallibrephotos/librephotos-proxy:1.2.1111203b9551a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

17,480
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
no fix listed

Open the chart page →

8,267
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

4,007
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

7,748
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,147
kannikakannika0.19.01 of 3See more

kannika kannika 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
quay.io/kannika/kannika-api:0.19.05e5a3b3a911e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

997
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,183
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

84,743
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
expat@2.7.1-2
no fix listed

Open the chart page →

37,817
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
no fix listed

Open the chart page →

10,003
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

69,386
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

11,077
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

13,265
klagklagVerified publisher0.3.171 of 1See more

klag klag 0.3.17

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
themoah/klag:0.2.187178531ebe86
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

609
kollectkollectVerified publisher0.21.01 of 1See more

kollect kollect 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
expat@2.5.0-1+deb12u4
no fix listed

Open the chart page →

1,936
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
kovi-appkovi-charts0.9.01 of 1See more

kovi-app kovi-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
expat@2.2.5-3
no fix listed

Open the chart page →

85,811
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
expat@2.5.0-1
no fix listed

Open the chart page →

10,273
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
expat@2.5.0-1
no fix listed

Open the chart page →

13,357
finops-notebookskrateo0.1.11 of 1See more

finops-notebooks krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,718
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
expat@2.5.0-1
no fix listed

Open the chart page →

13,564
nginxkrateo0.1.01 of 1See more

nginx krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.28146adea4768b
expat@2.7.1-2
no fix listed

Open the chart page →

3,853
oasgen-providerkrateo0.11.11 of 1See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
expat@2.7.1-2
no fix listed

Open the chart page →

5,250
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
expat@2.5.0-1
no fix listed

Open the chart page →

7,335
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
expat@2.5.0-1
no fix listed

Open the chart page →

7,274
kubeflowkromanow94-kubeflow0.5.13 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

3 of the 30 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
library/python:3.7eedf63967cdb
expat@2.5.0-1
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
expat@2.5.0-1
no fix listed

Open the chart page →

82,552
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

9,300
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

5,162
cloudbeaverkronkltdVerified publisher0.6.01 of 1See more

cloudbeaver kronkltd 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
expat@2.2.9-1build1
no fix listed

Open the chart page →

9,356
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
expat@2.7.1-2
no fix listed

Open the chart page →

11,283
aapm-servicekron-pam-aapm-helmcharts1.2.91 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.2.3b964408930a5
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

3,008
kron-aapm-agentkron-pam-aapm-helmcharts1.2.61 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.508e04ea66dfd
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

3,112
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

17,194
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/eclipse-temurin:213e3c176ffed1
expat@2.7.4-1ubuntu0.2
no fix listed

Open the chart page →

694
istiokubeflow1.0.02 of 2See more

istio kubeflow 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
istio/pilot:1.9.652f25f91d702
expat@2.2.5-3ubuntu0.2
no fix listed
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

151,023
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
expat@2.5.0-1
no fix listed

Open the chart page →

4,645
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

5,928
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
expat@2.7.1-2
no fix listed

Open the chart page →

5,142
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

38,382
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,667
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

33,434
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

41,321
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,202

Container images carrying it

1,321 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/go-skynet/local-ai:latestf1bc435659b9
expat@2.6.1-2ubuntu0.6
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
expat@2.5.0-1+deb12u3
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
expat@2.5.0-1+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
expat@2.5.0-1+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
expat@2.5.0-1+deb12u3
no fix listed
1
quay.io/kannika/kannika-api:0.19.05e5a3b3a911e
expat@2.8.3-1~deb13u1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
expat@2.6.1-2ubuntu0.3
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
expat@2.7.4-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
expat@2.5.0-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
expat@2.6.1-2ubuntu0.4
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
expat@2.7.4-1ubuntu0.2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
expat@2.5.0-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
expat@2.5.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.