StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
738
of 17,821 indexed, latest versions
Container images
617
deployed by those charts
Fix available
None
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 738 of 17,821 indexed charts deploy, on 617 images.

Affected packageAffected versionsFixed inImages
expatdeb2.5.0-1, 2.5.0-1+deb12u1, 2.5.0-1+deb12u2, 2.5.0-1+deb12u3+6 moreno fix listed615
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 10 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

738 by stars
ChartLatestAffected imagesRadar Score
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,146
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,449
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,603
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

57,014
gitops-promotergitops-promoterOfficialVerified publisher0.19.01 of 2See more

gitops-promoter gitops-promoter 0.19.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.40.1daf2e7650d61
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,971
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/phpmyadmin:latest9e915766488a
expat@2.8.3-1~deb13u1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
expat@2.5.0-1
no fix listed

Open the chart page →

11,385
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,177
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,587
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

3,695
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,451
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
expat@2.5.0-1
no fix listed

Open the chart page →

161,824
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

8,067
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
expat@2.5.0-1
no fix listed

Open the chart page →

19,390
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
expat@2.5.0-1
no fix listed

Open the chart page →

9,666
changedetectionalekcVerified publisher0.14.51 of 1See more

changedetection alekc 0.14.5

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

2,710
limesurveyarea-42Verified publisher0.3.961 of 2See more

limesurvey area-42 0.3.96

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.2b642712ce9a6
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,470
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,289
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
expat@2.5.0-1
no fix listed

Open the chart page →

4,154
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

17,018
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

29,756
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
expat@2.7.1-2
no fix listed

Open the chart page →

9,571
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,434
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
expat@2.8.3-1~deb13u1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,026
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

4,191
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
no fix listed
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
no fix listed

Open the chart page →

30,858
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/httpd:2.4454942557d44
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,251
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

17,839
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.13.1153b8b893232
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

6,146
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestfd68338829ed
expat@2.5.0-1+deb12u3
no fix listed

Open the chart page →

3,431
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,649
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,537
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
expat@2.7.1-2
no fix listed

Open the chart page →

5,919
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,593
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

7,079
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
expat@2.7.1-2
no fix listed

Open the chart page →

9,959
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

8,558
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

6,893
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,703
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
expat@2.8.2-1~deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

20,468
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestd3c209a5d531
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

14,255
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
expat@2.7.1-2
no fix listed

Open the chart page →

2,603
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
expat@2.7.1-2
no fix listed

Open the chart page →

12,265
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

5,943
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
expat@2.5.0-1
no fix listed
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
expat@2.5.0-1
no fix listed

Open the chart page →

22,522
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,712
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

3,751
pgcagriekinVerified publisher2.1.01 of 2See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,408
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

4,124
carbone-eecarboneOfficialVerified publisher1.0.61 of 1See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.11.0518172cbad49
expat@2.7.1-2
no fix listed

Open the chart page →

1,679
home-assistant-matter-servercharts-derwitt-devVerified publisher4.2.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
expat@2.8.2-1~deb13u1
no fix listed

Open the chart page →

2,353

Container images carrying it

617 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hamidyousefi93/saam-test:latestc34f071f6ed0
expat@2.5.0-1
no fix listed
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
expat@2.5.0-1+deb12u1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
expat@2.5.0-1+deb12u1
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
expat@2.5.0-1
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
expat@2.5.0-1
no fix listed
1
helmforge/fastmcp-server:0.2.061f759a1421f
expat@2.7.1-2
no fix listed
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
expat@2.7.1-2
no fix listed
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
expat@2.7.1-2
no fix listed
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
expat@2.5.0-1
no fix listed
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
expat@2.5.0-1+deb12u2
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
expat@2.5.0-1
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
expat@2.5.0-1
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
expat@2.5.0-1
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
expat@2.7.1-2
no fix listed
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
expat@2.7.1-2
no fix listed
1
instill/model-backend:611f0f2e980125e5ba5
expat@2.7.1-2
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
expat@2.5.0-1
no fix listed
1
inventree/inventree:1.5.55dc64d7ceee3
expat@2.8.3-1~deb13u1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
expat@2.5.0-1
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
expat@2.5.0-1
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
expat@2.7.1-2
no fix listed
1
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
no fix listed
1
jbtronics/part-db1:latestfd68338829ed
expat@2.5.0-1+deb12u3
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
no fix listed
1
jellyfin/jellyfin:latest78d3ea1207d1
expat@2.8.3-1~deb13u1
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
expat@2.5.0-1
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
no fix listed
1
jodogne/orthanc-plugins:latest6ff510aa29c2
expat@2.8.2-1~deb13u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
expat@2.5.0-1+deb12u2
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
expat@2.5.0-1+deb12u2
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
expat@2.8.2-1~deb13u1
no fix listed
1
kixote/typemill4e9dff179519
expat@2.8.3-1~deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
expat@2.8.2-1~deb13u1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
expat@2.5.0-1
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
expat@2.5.0-1
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
expat@2.5.0-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
expat@2.5.0-1+deb12u1
no fix listed
1
laly9999/node-app:1dd0e503913e1
expat@2.5.0-1+deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
expat@2.5.0-1+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.