StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
738
of 17,821 indexed, latest versions
Container images
617
deployed by those charts
Fix available
None
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 738 of 17,821 indexed charts deploy, on 617 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3+6 moreno fix listed615
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 10 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

738 by stars
ChartLatestAffected imagesRadar Score
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,052
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
expat@2.5.0-1
no fix listed

Open the chart page →

14,865
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.02 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.0

2 of the 34 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

20,109
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
expat@2.7.1-2
no fix listed

Open the chart page →

3,702
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,593
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

6,904
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
expat@2.7.1-2
no fix listed

Open the chart page →

7,153
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
pockost/matomo:5.13.07f5d293cbe4e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,247
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

32,232
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,451
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,340
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,298
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,777
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,635
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,796
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,323
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

30,550
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

38,725
immichsecustorVerified publisher2.0.61 of 1See more

immich secustor 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,151
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/getsentry/snuba:26.7.210f8d164109b
expat@2.7.1-2
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

17,006
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
expat@2.5.0-1+deb12u1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

11,518
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
expat@2.7.1-2
no fix listed

Open the chart page →

7,365
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
expat@2.5.0-1
no fix listed

Open the chart page →

5,689
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

10,239
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
expat@2.5.0-1+deb12u2
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

17,986
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
expat@2.7.1-2
no fix listed

Open the chart page →

3,304
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
expat@2.7.1-2+dhi4
no fix listed

Open the chart page →

2,411
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed

Open the chart page →

9,069
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
expat@2.5.0-1
no fix listed

Open the chart page →

9,069
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
expat@2.8.3-1~deb13u1
no fix listed
kixote/typemilldigest-pinned628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,416
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
expat@2.5.0-1
no fix listed

Open the chart page →

15,342
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

12,819
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

4,459
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

4,599
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
expat@2.7.1-2
no fix listed

Open the chart page →

7,847
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
expat@2.7.1-2
no fix listed

Open the chart page →

8,524
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,874
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,451
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

6,300
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,913
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,728
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,021
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

12,189
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
expat@2.7.1-2
no fix listed

Open the chart page →

3,245
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,869
alertigatealertigate0.6.01 of 1See more

alertigate alertigate 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,365

Container images carrying it

617 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
expat@2.7.1-2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
expat@2.7.1-2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
expat@2.5.0-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
expat@2.7.1-2
no fix listed
1
ghcr.io/platformrelay/kollect:v0.20.0c95fa31ead03
expat@2.5.0-1+deb12u3
no fix listed
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
expat@2.8.2-1+e1
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
expat@2.7.1-2
no fix listed
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
expat@2.5.0-1
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
expat@2.8.2-1~deb13u1
no fix listed
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
expat@2.5.0-1
no fix listed
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
expat@2.5.0-1
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
expat@2.5.0-1
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/yourls/yourls:1.10.67550ff86b15f
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
expat@2.5.0-1+deb12u2
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0014ce435c77651e
expat@2.8.3-1~deb13u1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
expat@2.5.0-1+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
expat@2.5.0-1+deb12u1
no fix listed
1
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
expat@2.8.2-1.azl3
no fix listed
1
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
expat@2.8.2-1.azl3
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
expat@2.5.0-1+deb12u2
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
expat@2.5.0-1
no fix listed
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
expat@2.8.2-1+e1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
expat@2.5.0-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
expat@2.5.0-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
expat@2.5.0-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
expat@2.5.0-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
expat@2.5.0-1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
expat@2.5.0-1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.