StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,473
of 17,832 indexed, latest versions
Container images
1,310
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 1,473 of 17,832 indexed charts deploy, on 1,310 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+38 more2.8.4-1+e21,308
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990UBUNTU-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 3 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

1,473 by stars
ChartLatestAffected imagesRadar Score
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,840
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,825
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

13,259
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
expat@2.6.1-2ubuntu0.4
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

70,037
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed

Open the chart page →

33,562
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
no fix listed

Open the chart page →

12,045
pagesronan-pages1.0.02 of 3See more

pages ronan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

7,916
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
expat@2.7.1-2
no fix listed

Open the chart page →

10,897
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

28,413
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,727
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simple9f0c5ce8b5d7
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,033
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

6,452
suwayomirubxkubeVerified publisher0.1.21 of 1See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,755
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

31,398
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,866
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
expat@2.4.7-1ubuntu0.5
no fix listed

Open the chart page →

8,929
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
expat@2.7.1-2
no fix listed

Open the chart page →

9,933
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

7,547
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
expat@2.5.0-1
no fix listed

Open the chart page →

3,991
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
no fix listed

Open the chart page →

20,025
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
expat@2.5.0-1
no fix listed

Open the chart page →

16,999
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed

Open the chart page →

16,356
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
expat@2.4.7-1
no fix listed

Open the chart page →

8,209
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
expat@2.5.0-1
no fix listed
santisbon/evworker:lateste807283f8d69
expat@2.5.0-1
no fix listed

Open the chart page →

14,609
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
expat@2.5.0-1
no fix listed

Open the chart page →

12,982
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
no fix listed

Open the chart page →

10,344
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,234
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
expat@2.7.1-2
no fix listed

Open the chart page →

10,056
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,491
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,789
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
expat@2.5.0-1
no fix listed

Open the chart page →

13,860
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
expat@2.4.7-1ubuntu0.4
no fix listed

Open the chart page →

3,332
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

2,950
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
expat@2.7.1-2
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
expat@2.7.1-2
no fix listed

Open the chart page →

8,625
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
redimp/otterwiki:2d87a26b98d1a
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,086
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

62,244
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
no fix listed

Open the chart page →

3,123
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
expat@2.7.4-1
no fix listed

Open the chart page →

52,821
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,082
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
expat@2.5.0-1
no fix listed

Open the chart page →

3,196
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,358
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

1,931
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

77,135
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

5,574
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,999
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372

Container images carrying it

1,310 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kixote/typemill628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
expat@2.6.1-2ubuntu0.3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed
1
kong/httpbin:latesta6ac46531193
expat@2.4.7-1ubuntu0.5
no fix listed
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
expat@2.4.7-1ubuntu0.7
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
expat@2.2.9-1ubuntu0.6
no fix listed
1
krontechnology/aapm-service:1.1.39dd602db8baa
expat@2.4.7-1ubuntu0.7
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
expat@2.2.5-3ubuntu0.2
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
expat@2.6.1-2ubuntu0.3
no fix listed
1
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
expat@2.6.1-2ubuntu0.4
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
expat@2.4.7-1ubuntu0.5
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
expat@2.4.7-1ubuntu0.3
no fix listed
1
labs64/auditflowc7b26d3ca11c
expat@2.7.4-1
no fix listed
1
labs64/payment-gateway:0.0.10c66feefca17
expat@2.7.4-1
no fix listed
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
no fix listed
1
lancachenet/monolithic:latest37f28b362c93
expat@2.6.1-2ubuntu0.4
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
expat@2.5.0-1+deb12u2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
expat@2.6.1-2ubuntu0.4
no fix listed
1
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
expat@2.6.1-2ubuntu0.5
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
expat@2.6.1-2ubuntu0.3
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
expat@2.7.5-1
no fix listed
1
lib42/jackett:latesta55596cda383
expat@2.5.0-1
no fix listed
1
library/buildpack-deps:scmd4850751e438
expat@2.8.3-1~deb13u1
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
expat@2.5.0-1+deb12u2
no fix listed
1
library/cassandra:3.11.10b095ff3248c6
expat@2.2.9-1build1
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
expat@2.5.0-1+deb12u2
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
expat@2.4.7-1
no fix listed
1
library/golang:latest3680233e3204
expat@2.8.3-1~deb13u1
no fix listed
1
library/httpd:2.4.631ae8051591a5
expat@2.5.0-1+deb12u1
no fix listed
1
library/httpd:2.4:2.4.68:latest979c38c2228d
expat@2.8.3-1~deb13u1
no fix listed
1
library/kibana:7.17.150172f1c538e7
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:8.18.004c0fc150f3a
expat@2.2.9-1ubuntu0.8
no fix listed
1
library/kibana:7.17.8c5781ba340ef
expat@2.2.9-1ubuntu0.6
no fix listed
1
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
no fix listed
1
library/kong:3.9:latest2a8cf3b110cd
expat@2.6.1-2ubuntu0.4
no fix listed
1
library/kong:3.8.0fd78090e9e77
expat@2.4.7-1ubuntu0.7
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
expat@2.5.0-1+deb12u1
no fix listed
1
library/matomo:5.13.0-apache369723bd31cd
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
expat@2.8.3-1~deb13u1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
expat@2.5.0-1+deb12u1
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
expat@2.8.3-1~deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.