StackRadar

CVE-2026-77214

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,497
of 18,053 indexed, latest versions
Container images
1,316
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,497 of 18,053 indexed charts deploy, on 1,316 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 moreno fix listed1,316
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,497 by stars
ChartLatestAffected imagesRadar Score
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

11,401
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,473
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,933
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,657
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

12,258
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
no fix listed
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,865
cleanuparrmedia-servarrVerified publisher0.20.01 of 1See more

cleanuparr media-servarr 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.8ec444338a67e
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

1,773
flaresolverrmedia-servarrVerified publisher0.19.01 of 1See more

flaresolverr media-servarr 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

10,328
tinymediamanagermedia-servarrVerified publisher1.7.11 of 2See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.448c15784a127
expat@2.7.1-2
no fix listed

Open the chart page →

10,021
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
expat@2.2.9-1ubuntu0.4
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

20,345
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
expat@2.2.9-1ubuntu0.4
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

20,345
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
expat@2.2.9-1ubuntu0.4
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

20,345
mediawikimediawiki0.4.11 of 1See more

mediawiki mediawiki 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/mediawiki:1.43.08b19e819f2e1
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,747
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,456
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed

Open the chart page →

6,148
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
expat@2.2.9-1build1
no fix listed

Open the chart page →

13,381
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed

Open the chart page →

8,864
testmesosphere0.1.01 of 1See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
dexmesosphere-stable2.14.21 of 5See more

dex mesosphere-stable 2.14.2

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed

Open the chart page →

21,911
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed

Open the chart page →

6,148
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
expat@2.2.9-1build1
no fix listed

Open the chart page →

88,962
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed

Open the chart page →

13,069
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

18,649
apimicroslacVerified publisher0.1.01 of 2See more

api microslac 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,985
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.10.783c86003b781
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

12,277
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
expat@2.5.0-1
no fix listed
microslac/conversations:latest1b24afcd71ff
expat@2.5.0-1
no fix listed
microslac/teams:latest0f75997fcbe5
expat@2.5.0-1
no fix listed
microslac/users:latest216ea6832a56
expat@2.5.0-1
no fix listed

Open the chart page →

34,121
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
expat@2.2.5-3ubuntu0.7
no fix listed

Open the chart page →

72,640
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

11,938
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

13,929
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

116,464
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

12,751
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

12,751
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

13,172
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

12,272
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

20,657
moodlemoodle2.0.01 of 2See more

moodle moodle 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.3.0.2d3e3607acf56
expat@2.5.0-1+deb12u4
no fix listed

Open the chart page →

4,418
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/camera-viewer:lateste418cc694bd5
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

13,736
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
no fix listed

Open the chart page →

10,860
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

14,079
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
expat@2.5.0-1
no fix listed

Open the chart page →

28,048
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
expat@2.5.0-1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
expat@2.5.0-1
no fix listed

Open the chart page →

32,944
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
expat@2.5.0-1
no fix listed

Open the chart page →

7,230
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
no fix listed

Open the chart page →

105,014
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
no fix listed

Open the chart page →

16,666
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2799a49be18d7
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

5,690
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
machines/filestash:latestaff504cd28a8
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,422
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
expat@2.7.1-2
no fix listed

Open the chart page →

13,584
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856

Container images carrying it

1,316 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/kannika/kannika-api:0.19.05e5a3b3a911e
expat@2.8.3-1~deb13u1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
expat@2.5.0-1+deb12u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
expat@2.6.1-2ubuntu0.3
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
expat@2.7.4-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
expat@2.5.0-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
expat@2.6.1-2ubuntu0.4
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
expat@2.7.4-1ubuntu0.2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
expat@2.7.1-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
expat@2.7.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
expat@2.5.0-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
expat@2.5.0-1+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
expat@2.5.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.