StackRadar

CVE-2026-77214

Unscored

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
779
of 18,026 indexed, latest versions
Container images
648
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 779 of 18,026 indexed charts deploy, on 648 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3+7 moreno fix listed648
OSV records
DEBIAN-CVE-2026-77214
Trending
Rank 36 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

779 by stars
ChartLatestAffected imagesRadar Score
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/phpmyadmin:latest9e915766488a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

6,438
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

31,289
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
expat@2.5.0-1
no fix listed

Open the chart page →

10,686
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest3e0fbd0274eb
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,125
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
expat@2.7.1-2
no fix listed

Open the chart page →

2,618
forgejoforgejo-captnbp-helm1.2.61 of 2See more

forgejo forgejo-captnbp-helm 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,248
frinx-machinefrinx-helm-charts11.0.02 of 26See more

frinx-machine frinx-helm-charts 11.0.0

2 of the 26 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
expat@2.5.0-1
no fix listed
frinx/topology-discovery:7.0.37832e3589dba
expat@2.5.0-1
no fix listed

Open the chart page →

49,865
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
expat@2.5.0-1
no fix listed

Open the chart page →

10,262
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
expat@2.5.0-1
no fix listed

Open the chart page →

6,442
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest34df3680db1c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,932
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
expat@2.7.1-2
no fix listed

Open the chart page →

3,555
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
expat@2.5.0-1
no fix listed

Open the chart page →

14,549
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,641
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

14,391
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
expat@2.7.1-2
no fix listed

Open the chart page →

10,718
genieacsgenieacsVerified publisher0.5.21 of 2See more

genieacs genieacs 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.6ffbf8bd1340d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,332
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/phpmyadmin:latest9e915766488a
expat@2.8.3-1~deb13u1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
no fix listed

Open the chart page →

12,969
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
expat@2.7.1-2
no fix listed

Open the chart page →

1,962
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
expat@2.5.0-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

56,631
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

16,363
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latest6f2ea2aae300
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,675
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest7e2ef5261764
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

8,454
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
expat@2.5.0-1
no fix listed

Open the chart page →

79,700
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,286
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
expat@2.5.0-1
no fix listed

Open the chart page →

6,213
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/httpd:latest454942557d44
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,448
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,800
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,465
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
expat@2.5.0-1
no fix listed

Open the chart page →

4,643
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/httpd:latest454942557d44
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,448
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
expat@2.5.0-1
no fix listed

Open the chart page →

10,494
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/httpd:2.4.6803f858efb82c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,448
appwritehelmforgeVerified publisher2.0.21 of 5See more

appwrite helmforge 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
appwrite/new:1.1.159-self-hosted1811ce1d8154
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,228
archiveboxhelmforgeVerified publisher1.1.131 of 1See more

archivebox helmforge 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.708c21bb233130
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,806
castopodhelmforgeVerified publisher1.2.91 of 3See more

castopod helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
expat@2.7.1-2
no fix listed

Open the chart page →

10,479
changedetectionhelmforgeVerified publisher1.1.181 of 1See more

changedetection helmforge 1.1.18

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,932
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,103
dawarichhelmforgeVerified publisher1.0.22 of 4See more

dawarich helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
expat@2.8.3-1~deb13u1
no fix listed
postgis/postgis:18-3.67e00e8c3539f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

12,097
discount-bandithelmforgeVerified publisher2.0.91 of 3See more

discount-bandit helmforge 2.0.9

1 of the 3 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
expat@2.7.1-2
no fix listed

Open the chart page →

33,556
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,594
drupalhelmforgeVerified publisher1.2.151 of 2See more

drupal helmforge 1.2.15

1 of the 2 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/drupal:11.4.7-php8.5-apache-bookworm6d5a1c0837a1
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

4,274
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

4,713
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
expat@2.7.1-2
no fix listed

Open the chart page →

3,809
generichelmforgeVerified publisher3.1.61 of 1See more

generic helmforge 3.1.6

1 of the 1 container images this version deploys carry CVE-2026-77214.

Container imageDigestPackageFixed in
library/nginx:1.31.6908dc23e643a
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,855

Container images carrying it

648 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
no fix listed
1
jodogne/orthanc-plugins:latest6ff510aa29c2
expat@2.8.2-1~deb13u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
expat@2.5.0-1+deb12u2
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
expat@2.5.0-1+deb12u2
no fix listed
1
kitware/cdash:v5.4.0da5abe941506
expat@2.8.3-1~deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed
1
kixote/typemill7dfb517d24f0
expat@2.8.3-1~deb13u1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
no fix listed
1
lib42/jackett:latesta55596cda383
expat@2.5.0-1
no fix listed
1
library/buildpack-deps:scmd4850751e438
expat@2.8.3-1~deb13u1
no fix listed
1
library/cassandra:4.03a4876cc7f18
expat@2.5.0-1+deb12u3
no fix listed
1
library/drupal:11.4.7-php8.5-apache-bookworm6d5a1c0837a1
expat@2.5.0-1+deb12u3
no fix listed
1
library/golang:lateste0174e51e812
expat@2.8.3-1~deb13u1
no fix listed
1
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
no fix listed
1
library/matomo:5.14.0-apache0b4d0c328722
expat@2.8.3-1~deb13u1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
no fix listed
1
library/mediawiki:1.43.08b19e819f2e1
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:35.0.1-apache276547e033df
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
no fix listed
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
1
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
no fix listed
1
library/nginx:1.28146adea4768b
expat@2.7.1-2
no fix listed
1
library/nginx:1.291881968aff6f
expat@2.7.1-2
no fix listed
1
library/nginx:1.276784fb0834aa
expat@2.5.0-1+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
expat@2.5.0-1
no fix listed
1
library/nginx:1.31.6908dc23e643a
expat@2.8.3-1~deb13u1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
expat@2.5.0-1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
expat@2.5.0-1+deb12u1
no fix listed
1
library/node:208f693eaa7e0a
expat@2.5.0-1+deb12u2
no fix listed
1
library/node:latestfa271c47a5d8
expat@2.8.3-1~deb13u1
no fix listed
1
library/phpmyadmin:5.2.3-apache0b38dba8580a
expat@2.8.3-1~deb13u1
no fix listed
1
library/python:3.104379c343a93c
expat@2.8.3-1~deb13u1
no fix listed
1
library/python:3.8d41127070014
expat@2.5.0-1+deb12u1
no fix listed
1
library/python:3.9da5aee29682d
expat@2.7.1-2
no fix listed
1
library/redmine:6.1.204ac44a2595b
expat@2.7.1-2
no fix listed
1
library/varnish:7.5.04d0bb287d87b
expat@2.5.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.