StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,466
of 17,828 indexed, latest versions
Container images
1,306
deployed by those charts
Fix available
None
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 1,466 of 17,828 indexed charts deploy, on 1,306 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+37 moreno fix listed1,304
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990UBUNTU-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 3 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

1,466 by stars
ChartLatestAffected imagesRadar Score
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
expat@2.6.1-2ubuntu0.2
no fix listed

Open the chart page →

13,222
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

77,529
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
expat@2.2.9-1ubuntu0.2
no fix listed

Open the chart page →

17,632
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

23,096
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
expat@2.2.9-1build1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
expat@2.2.9-1build1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
expat@2.2.9-1build1
no fix listed

Open the chart page →

109,149
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

84,448
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

11,769
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

11,662
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

8,095
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

11,832
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
no fix listed

Open the chart page →

10,345
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
expat@2.4.7-1
no fix listed

Open the chart page →

13,378
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
expat@2.2.9-1build1
no fix listed

Open the chart page →

15,958
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
expat@2.2.9-1ubuntu0.4
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
expat@2.2.9-1build1
no fix listed

Open the chart page →

101,443
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestc885aa902faf
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,667
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

4,260
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,089
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,569
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

13,784
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,762
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

8,672
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,826
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

30,720
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,589
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
expat@2.5.0-1
no fix listed
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
expat@2.5.0-1
no fix listed
sirrend/helmup-notifications-service:0.1.3997866417011
expat@2.5.0-1
no fix listed

Open the chart page →

16,732
hivemq-platform-operatorhivemqOfficialVerified publisher0.2.261 of 1See more

hivemq-platform-operator hivemq 0.2.26

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hivemq/hivemq-platform-operator:2.2.2a919f990141b
expat@2.7.4-1
no fix listed

Open the chart page →

992
hivemq-swarmhivemqOfficialVerified publisher0.2.701 of 1See more

hivemq-swarm hivemq 0.2.70

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,450
holoinsightholoinsight0.2.51 of 6See more

holoinsight holoinsight 0.2.5

1 of the 6 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

27,944
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

62,311
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

3,572
immichimmich-helm0.3.02 of 4See more

immich immich-helm 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
expat@2.5.0-1+deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
expat@2.7.1-2
no fix listed

Open the chart page →

15,883
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
expat@2.2.9-1ubuntu0.4
no fix listed

Open the chart page →

17,521
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
expat@2.7.1-2
no fix listed

Open the chart page →

11,855
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

71,989
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

72,063
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

72,009
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

72,009
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

72,290
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
expat@2.7.1-2
no fix listed

Open the chart page →

2,681
jenkinsjenkins-cicd-tool0.1.01 of 1See more

jenkins jenkins-cicd-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,545
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
no fix listed

Open the chart page →

7,442
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

14,622
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,589
kdiffkdiff-snapshotsVerified publisher0.0.2032 of 2See more

kdiff kdiff-snapshots 0.0.203

2 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
filegator/filegator:latest34bf565a11a4
expat@2.8.3-1~deb13u1
no fix listed
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

8,212
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,864
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,589
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
glpi/glpi:latest7b50172cdb7d
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,787
powerdns-recursorklicktippVerified publisher0.4.101 of 1See more

powerdns-recursor klicktipp 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

1,943
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.24ad2e1894b78
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,816
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
expat@2.5.0-1
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed

Open the chart page →

20,522

Container images carrying it

1,306 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
resouer/redis-slave:v2e2f198b49ba7
expat@2.1.0-4ubuntu1
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
expat@2.4.7-1ubuntu0.5
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
expat@2.2.9-1ubuntu0.6
no fix listed
1
rhasspy/wyoming-openwakeword:2.1.052cb1168731a
expat@2.5.0-1+deb12u2
no fix listed
1
rhasspy/wyoming-piper:2.3.169b7f797ae3a
expat@2.5.0-1+deb12u2
no fix listed
1
rhasspy/wyoming-piper:2.5.27d39aafac409
expat@2.8.3-1~deb13u1
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
expat@2.5.0-1+deb12u2
no fix listed
1
rhasspy/wyoming-whisper:3.5.0308b7959a925
expat@2.5.0-1+deb12u2
no fix listed
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
expat@2.2.9-1build1
no fix listed
1
rocketadmin/rocketadmin:1.17.710955ef540b9
expat@2.5.0-1+deb12u2
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
expat@2.5.0-1+deb12u1
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
expat@2.7.1-2
no fix listed
1
rraahul/test:latestbfe2c1183bc0
expat@2.4.7-1ubuntu0.2
no fix listed
1
rrobetti/ojp:0.1.0-beta1141bd88232b
expat@2.6.1-2ubuntu0.1
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
expat@2.6.1-2ubuntu0.3
no fix listed
1
rundeck/rundeck:3.2.74d64fe56f767
expat@2.1.0-7ubuntu0.16.04.5
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
expat@2.5.0-1+deb12u2
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
expat@2.4.7-1ubuntu0.5
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
expat@2.5.0-1
no fix listed
1
santisbon/evworker:lateste807283f8d69
expat@2.5.0-1
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
expat@2.5.0-1
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
expat@2.5.0-1+deb12u1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
expat@2.5.0-1
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
expat@2.4.7-1ubuntu0.4
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
expat@2.4.7-1ubuntu0.4
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
expat@2.4.7-1ubuntu0.4
no fix listed
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
expat@2.6.1-2ubuntu0.3
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
expat@2.6.1-2ubuntu0.3
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
expat@2.6.1-2ubuntu0.3
no fix listed
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
expat@2.7.4-1
no fix listed
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
expat@2.7.4-1
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
expat@2.2.5-3ubuntu0.2
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
expat@2.2.9-1ubuntu0.6
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
expat@2.2.9-1ubuntu0.4
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
expat@2.4.7-1ubuntu0.3
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
expat@2.2.9-1build1
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
1
selenium/hub:4.48.0-20260905d47c27474cb4
expat@2.6.1-2ubuntu0.4
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
expat@2.6.1-2ubuntu0.4
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
expat@2.6.1-2ubuntu0.4
no fix listed
1
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
expat@2.8.3-1~deb13u1
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
expat@2.5.0-1
no fix listed
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
expat@2.4.7-1ubuntu0.7
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
expat@2.4.7-1ubuntu0.6
no fix listed
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
expat@2.2.5-3ubuntu0.2
no fix listed
1
signalen/backend:2.50.14760256000738
expat@2.5.0-1+deb12u2
no fix listed
1
sigp/siren:v3.0.42c219b04758e
expat@2.5.0-1+deb12u1
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
expat@2.5.0-1
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.