StackRadar

CVE-2026-77214

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,497
of 18,053 indexed, latest versions
Container images
1,316
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,497 of 18,053 indexed charts deploy, on 1,316 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 moreno fix listed1,316
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,497 by stars
ChartLatestAffected imagesRadar Score
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

62,611
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
expat@2.2.9-1build1
no fix listed

Open the chart page →

94,266
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
expat@2.7.1-2
no fix listed

Open the chart page →

10,480
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
expat@2.4.7-1ubuntu0.4
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

19,105
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
no fix listed
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

24,544
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

66,979
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

3,500
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
expat@2.6.1-2build1
no fix listed

Open the chart page →

3,728
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

18,244
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

8,876
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

28,900
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

21,166
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

21,166
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
homebridge/homebridge:latest22cdfca31934
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

37,091
kubernetes-dashboardlbenicio-communityVerified publisher7.14.101 of 5See more

kubernetes-dashboard lbenicio-community 7.14.10

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.912972ce1ab63
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,440
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

38,950
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,787
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
no fix listed

Open the chart page →

4,338
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
expat@2.5.0-1
no fix listed

Open the chart page →

4,893
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

42,948
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

12,012
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

21,166
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,970
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
expat@2.5.0-1
no fix listed

Open the chart page →

8,891
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

38,950
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

11,066
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

7,062
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
expat@2.5.0-1
no fix listed

Open the chart page →

7,189
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

21,144
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

65,421
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

6,295
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,569
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

92,681
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
expat@2.2.5-3ubuntu0.2
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

60,449
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

10,328
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,970
joalm0nsterrr-joalVerified publisher2.2.01 of 2See more

joal m0nsterrr-joal 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
anthonyraymond/joal:2.1.37fc942567c564
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,727
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,829
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

31,469
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

13,837
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,667
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
no fix listed

Open the chart page →

8,533
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
expat@2.7.1-2
no fix listed

Open the chart page →

3,935
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,674
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
expat@2.2.9-1ubuntu0.4
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

34,172
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,684

Container images carrying it

1,316 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/kannika/kannika-api:0.19.05e5a3b3a911e
expat@2.8.3-1~deb13u1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
expat@2.6.1-2ubuntu0.3
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
expat@2.7.4-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
expat@2.5.0-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
expat@2.6.1-2ubuntu0.4
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
expat@2.7.4-1ubuntu0.2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
expat@2.5.0-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
expat@2.5.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.