StackRadar

CVE-2026-77214

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,499
of 18,053 indexed, latest versions
Container images
1,321
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,499 of 18,053 indexed charts deploy, on 1,321 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+45 moreno fix listed1,321
OSV records
DEBIAN-CVE-2026-77214ECHO-c50c-9d1f-aedbUBUNTU-CVE-2026-77214
Trending
Rank 3 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

1,499 by stars
ChartLatestAffected imagesRadar Score
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,896
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
infisical/infisical:latest3f014f284cb9
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,699
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,520
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

12,171
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

76,899
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

90,435
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

76,899
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

83,351
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
no fix listed

Open the chart page →

20,417
inventreeinventreeOfficialVerified publisher0.4.302 of 2See more

inventree inventree 0.4.30

2 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
inventree/inventree:1.5.6b61e6a7534bf
expat@2.8.3-1~deb13u1
no fix listed
library/nginx:stableb972f831f200
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,978
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

4,510
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/buildpack-deps:scmec9476a31fe1
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,815
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/cassandra:4.03a4876cc7f18
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

7,146
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
expat@2.6.1-2build1
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
expat@2.5.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

48,071
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

12,095
jasperjasperVerified publisher1.0.2101 of 2See more

jasper jasper 1.0.210

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,258
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
expat@2.7.1-2
no fix listed

Open the chart page →

3,031
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,546
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
no fix listed

Open the chart page →

4,816
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
no fix listed

Open the chart page →

3,398
jenkinsjenkins-automation-tool0.1.01 of 1See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,147
jenkinsjenkins-automation-tool-by-helm0.1.01 of 1See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,147
jenkinsjenkins-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,802
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,802
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,824
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
homebridge/homebridge:latest22cdfca31934
expat@2.6.1-2ubuntu0.6
no fix listed

Open the chart page →

37,091
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,657
james-mailserverjondos2.1.21 of 1See more

james-mailserver jondos 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apache/james:distributed-3.7.2660c0fa12ec2
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

8,348
jondos-genericjondos2.0.11 of 1See more

jondos-generic jondos 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,856
api-key-managerjtektVerified publisher0.3.01 of 4See more

api-key-manager jtekt 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

7,478
image-storage-servicejtektVerified publisher0.5.13 of 4See more

image-storage-service jtekt 0.5.1

3 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
expat@2.5.0-1+deb12u1
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

24,921
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
expat@2.5.0-1+deb12u1
no fix listed
moreillon/group-manager:latest3caa8f710ee0
expat@2.5.0-1+deb12u2
no fix listed
moreillon/group-manager-front:latest5f0a38498271
expat@2.7.1-2
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
expat@2.5.0-1
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
expat@2.5.0-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
expat@2.5.0-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
expat@2.5.0-1
no fix listed

Open the chart page →

68,829
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
expat@2.5.0-1
no fix listed

Open the chart page →

18,503
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.181 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.18

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
expat@2.7.1-2
no fix listed

Open the chart page →

3,738
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
expat@2.7.1-2
no fix listed

Open the chart page →

4,001
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,867
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

11,765
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
expat@2.7.1-2
no fix listed

Open the chart page →

6,608
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,432
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
expat@2.7.1-2
no fix listed

Open the chart page →

3,985
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

65,304
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

73,453
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

31,727
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
expat@2.7.1-2
no fix listed

Open the chart page →

10,519
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,819

Container images carrying it

1,321 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

No deployed image carries CVE-2026-77214.

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.