StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
738
of 17,821 indexed, latest versions
Container images
617
deployed by those charts
Fix available
None
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 738 of 17,821 indexed charts deploy, on 617 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3+6 moreno fix listed615
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 10 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

738 by stars
ChartLatestAffected imagesRadar Score
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
expat@2.7.1-2
no fix listed

Open the chart page →

7,529
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,931
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
expat@2.7.1-2
no fix listed

Open the chart page →

4,918
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,997
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.41 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,356
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,703
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
expat@2.5.0-1
no fix listed

Open the chart page →

4,061
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,056
kamaji-etcdclastixVerified publisher0.18.01 of 4See more

kamaji-etcd clastix 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
expat@2.5.0-1
no fix listed

Open the chart page →

12,027
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

23,785
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheadc486045303
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,241
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,569
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,234
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,894
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
expat@2.5.0-1
no fix listed

Open the chart page →

8,215
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,388
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
no fix listed

Open the chart page →

7,262
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
expat@2.7.1-2
no fix listed

Open the chart page →

7,051
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:latest4fc116f5e879
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,757
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latest7629e746a5b3
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,757
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
expat@2.7.1-2
no fix listed

Open the chart page →

3,854
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,445
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

8,514
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

14,677
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

3,866
csghubcsghubVerified publisher2.5.03 of 34See more

csghub csghub 2.5.0

3 of the 34 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
expat@2.5.0-1+deb12u3
no fix listed
opencsghq/csgbot:v0.6.9-ee7d0271e26521
expat@2.8.3-1~deb13u1
no fix listed
opencsghq/label-studio:v2.5.047e22aa71870
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

49,856
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

6,941
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
no fix listed

Open the chart page →

15,510
cspconsolecspconsole1.3.112 of 5See more

cspconsole cspconsole 1.3.11

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
no fix listed
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

12,596
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,658
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
no fix listed

Open the chart page →

16,726
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
no fix listed

Open the chart page →

14,925
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,248
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,143
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,957
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
no fix listed

Open the chart page →

6,226
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,887
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,797
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

69,789
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,797
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

69,789
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed

Open the chart page →

33,425

Container images carrying it

617 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/flanksource/facet:0.1.7237237038be15
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
expat@2.7.1-2
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
expat@2.5.0-1
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
expat@2.5.0-1
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
expat@2.7.1-2
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
expat@2.7.1-2
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
expat@2.7.1-2
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
expat@2.5.0-1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/libretime/icecast:latest4bee94ce480c
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
expat@2.7.1-2
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
expat@2.5.0-1
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
expat@2.7.1-2
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
expat@2.7.1-2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
expat@2.5.0-1
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
expat@2.7.1-2
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
expat@2.5.0-1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.