StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,473
of 17,832 indexed, latest versions
Container images
1,310
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 1,473 of 17,832 indexed charts deploy, on 1,310 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+38 more2.8.4-1+e21,308
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990UBUNTU-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 3 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

1,473 by stars
ChartLatestAffected imagesRadar Score
Practica_4_helmpr04helm0.1.02 of 7See more

Practica_4_helm pr04helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

27,918
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
slagattollas/weatherservice-practica:latest68e7f56393fc
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

28,796
pagesprasanthi1.0.02 of 3See more

pages prasanthi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
expat@2.5.0-1
no fix listed

Open the chart page →

5,625
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

3,383
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
expat@2.5.0-1
no fix listed

Open the chart page →

8,309
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/wordpress:latest8746e7e072e3
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,583
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,511
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
apppvillaverdeVerified publisher0.2.61 of 1See more

app pvillaverde 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:1.31a53fc6c27208
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,902
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

4,359
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
expat@2.5.0-1
no fix listed

Open the chart page →

14,827
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
no fix listed

Open the chart page →

12,840
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
expat@2.5.0-1
no fix listed

Open the chart page →

12,840
open-terminalqaoruVerified publisher0.2.41 of 1See more

open-terminal qaoru 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,114
wyoming-openwakewordqaoruVerified publisher0.1.01 of 1See more

wyoming-openwakeword qaoru 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rhasspy/wyoming-openwakeword:2.1.052cb1168731a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,866
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
expat@2.7.1-2
no fix listed

Open the chart page →

4,569
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

8,096
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,575
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

21,487
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,145
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,526
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,128
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
expat@2.7.4-1
no fix listed

Open the chart page →

3,296
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,418
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,964
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,603
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

3,128
radar-upload-connect-backendradar-baseVerified publisher0.9.11 of 1See more

radar-upload-connect-backend radar-base 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,642
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
no fix listed

Open the chart page →

2,847
pagesranjinigogga1.0.02 of 3See more

pages ranjinigogga 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
rawfile-localpvrawfile0.15.31 of 6See more

rawfile-localpv rawfile 0.15.3

1 of the 6 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.396fd7987ea79
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,855
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

15,686
pagesrebecca-pages1.0.02 of 3See more

pages rebecca-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

4,375
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,999
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,455
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
expat@2.5.0-1
no fix listed

Open the chart page →

7,550
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,002
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,284
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
expat@2.5.0-1
no fix listed

Open the chart page →

6,024
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
expat@2.1.0-7ubuntu0.16.04.2
no fix listed

Open the chart page →

11,504
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
expat@2.5.0-1
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
expat@2.5.0-1
no fix listed

Open the chart page →

9,588
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
expat@2.5.0-1
no fix listed

Open the chart page →

4,995
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

15,978
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest7e2ef5261764
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

6,576
pagesroccohiggins-pages1.0.02 of 3See more

pages roccohiggins-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
reviewboardrock8sVerified publisher0.0.12 of 3See more

reviewboard rock8s 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
expat@2.4.7-1ubuntu0.7
no fix listed
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,879

Container images carrying it

1,310 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kixote/typemill628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
expat@2.6.1-2ubuntu0.3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed
1
kong/httpbin:latesta6ac46531193
expat@2.4.7-1ubuntu0.5
no fix listed
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
expat@2.4.7-1ubuntu0.7
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
expat@2.2.9-1ubuntu0.6
no fix listed
1
krontechnology/aapm-service:1.1.39dd602db8baa
expat@2.4.7-1ubuntu0.7
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
expat@2.6.1-2ubuntu0.3
no fix listed
1
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
expat@2.6.1-2ubuntu0.4
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
expat@2.4.7-1ubuntu0.5
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
no fix listed
1
labs64/auditflowc7b26d3ca11c
expat@2.7.4-1
no fix listed
1
labs64/payment-gateway:0.0.10c66feefca17
expat@2.7.4-1
no fix listed
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
no fix listed
1
lancachenet/monolithic:latest37f28b362c93
expat@2.6.1-2ubuntu0.4
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
expat@2.6.1-2ubuntu0.4
no fix listed
1
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
expat@2.6.1-2ubuntu0.5
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
expat@2.6.1-2ubuntu0.3
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
no fix listed
1
lib42/jackett:latesta55596cda383
expat@2.5.0-1
no fix listed
1
library/buildpack-deps:scmd4850751e438
expat@2.8.3-1~deb13u1
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
no fix listed
1
library/cassandra:3.11.10b095ff3248c6
expat@2.2.9-1build1
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
expat@2.5.0-1+deb12u2
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
expat@2.4.7-1
no fix listed
1
library/golang:latest3680233e3204
expat@2.8.3-1~deb13u1
no fix listed
1
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
no fix listed
1
library/httpd:2.4:2.4.68:latest979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed
1
library/kibana:7.17.150172f1c538e7
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:8.18.004c0fc150f3a
expat@2.2.9-1ubuntu0.8
no fix listed
1
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
no fix listed
1
library/kong:3.9:latest2a8cf3b110cd
expat@2.6.1-2ubuntu0.4
no fix listed
1
library/kong:3.8.0fd78090e9e77
expat@2.4.7-1ubuntu0.7
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
no fix listed
1
library/matomo:5.13.0-apache369723bd31cd
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
expat@2.8.3-1~deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.