StackRadar

CVE-2026-93990

High

Advisory

Published 19 Sept 2026In the index since 21 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,473
of 17,832 indexed, latest versions
Container images
1,310
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-93990 affecting package expat 2.8.3-2

Carried by container images the latest versions of 1,473 of 17,832 indexed charts deploy, on 1,310 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+38 more2.8.4-1+e21,308
expatrpm2.8.2-1.azl3no fix listed2
OSV records
DEBIAN-CVE-2026-93990UBUNTU-CVE-2026-93990AZL-103316ECHO-41d9-8113-ce4d
Trending
Rank 3 in indexed charts, since 21 Sept 2026. See the ranking →

Charts affected

1,473 by stars
ChartLatestAffected imagesRadar Score
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
expat@2.7.4-1
no fix listed

Open the chart page →

4,561
nextcloudhelmforgeVerified publisher1.1.01 of 3See more

nextcloud helmforge 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apacheb13a87affb7e
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

5,919
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
expat@2.7.1-2
no fix listed

Open the chart page →

4,937
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-nobledbde329dcbfa
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,042
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

3,031
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/httpd:latest454942557d44
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,272
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
expat@2.5.0-1
no fix listed

Open the chart page →

12,881
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest78d3ea1207d1
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,621
openaevhelm-openbasVerified publisher2.0.71 of 7See more

openaev helm-openbas 2.0.7

1 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
openaev/platform:3.260921.04d2cd9cce457
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

7,358
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
expat@2.5.0-1+deb12u1
no fix listed
openbas/platform:2.0.5d986d80b0a75
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

25,726
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed

Open the chart page →

20,372
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
expat@2.4.7-1ubuntu0.6
no fix listed

Open the chart page →

6,194
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,999
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
expat@2.5.0-1
no fix listed

Open the chart page →

6,092
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

14,583
hivemq-edgehivemqOfficialVerified publisher0.1.361 of 1See more

hivemq-edge hivemq 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.14d8250a233cea
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

1,305
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
expat@2.4.7-1ubuntu0.2
no fix listed
hmediade/printserver-init:latest7f005eb6c718
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

11,124
cloudbeaverhomeenterpriseinc0.6.01 of 1See more

cloudbeaver homeenterpriseinc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
expat@2.2.9-1build1
no fix listed

Open the chart page →

9,134
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
expat@2.5.0-1
no fix listed

Open the chart page →

16,698
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
expat@2.7.1-2
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

28,286
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
expat@2.2.9-1ubuntu0.6
no fix listed

Open the chart page →

73,709
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

32,733
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
no fix listed

Open the chart page →

16,665
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
no fix listed

Open the chart page →

20,884
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

9,231
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

7,879
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
hyperglance-helmhyperglance-helmVerified publisher10.0.93 of 6See more

hyperglance-helm hyperglance-helm 10.0.9

3 of the 6 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:postgres9fd5faf1fe80
expat@2.4.7-1ubuntu0.7
no fix listed
hyperglance/init:apacheb2f8c6d52623
expat@2.4.7-1ubuntu0.7
no fix listed

Open the chart page →

11,398
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
expat@2.4.7-1
no fix listed

Open the chart page →

7,367
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
expat@2.4.7-1
no fix listed

Open the chart page →

8,126
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

6,139
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
jenkins/jenkins:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

114,774
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
expat@2.2.5-3
no fix listed

Open the chart page →

12,716
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

81,134
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
expat@2.1.0-7ubuntu0.16.04.3
no fix listed

Open the chart page →

19,381
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
expat@2.6.1-2ubuntu0.4
no fix listed

Open the chart page →

2,065
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

28,081
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
expat@2.6.1-2ubuntu0.3
no fix listed

Open the chart page →

9,278
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
expat@2.4.7-1ubuntu0.2
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

111,140
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

12,079
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,965
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,623
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
expat@2.2.5-3ubuntu0.9
no fix listed

Open the chart page →

16,470
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
no fix listed

Open the chart page →

5,466
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

2,524
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

5,196
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed

Open the chart page →

1,999
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-93990.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
expat@2.4.7-1ubuntu0.2
no fix listed

Open the chart page →

10,654

Container images carrying it

1,310 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
no fix listed
80
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
no fix listed
80
library/nginx:1.31:latest:trixieabe47724e466
expat@2.8.3-1~deb13u1
no fix listed
77
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
expat@2.8.3-1~deb13u1
no fix listed
28
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
expat@2.8.3-1~deb13u1
no fix listed
17
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
expat@2.2.5-3ubuntu0.9
no fix listed
13
library/nginx:stable0aa2d81d65bc
expat@2.8.3-1~deb13u1
no fix listed
13
oomk8s/readiness-check:2.0.2875814cc853d
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
11
library/nginx:stabled5792f71a949
expat@2.8.3-1~deb13u1
no fix listed
10
library/rabbitmq:3.9-management8a279e9396a8
expat@2.4.7-1ubuntu0.2
no fix listed
10
library/kong:3.6a42d2b4503e7
expat@2.4.7-1ubuntu0.6
no fix listed
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
no fix listed
8
jellyfin/jellyfin:10.11:10.11.11:latestaefb67e6a7ff
expat@2.7.1-2
no fix listed
6
library/httpd:2.4:2.4.68:latest454942557d44
expat@2.8.3-1~deb13u1
no fix listed
6
library/kong:3.912972ce1ab63
expat@2.6.1-2ubuntu0.4
no fix listed
6
library/phpmyadmin:5.2.3-apache:latest9e915766488a
expat@2.8.3-1~deb13u1
no fix listed
6
oomk8s/readiness-check:2.0.07daa08b81954
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
6
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
expat@2.8.3-1~deb13u1
no fix listed
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
expat@2.5.0-1
no fix listed
5
solsson/kafka:latest41e5d8f6f290
expat@2.2.9-1ubuntu0.4
no fix listed
5
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
expat@2.5.0-1+deb12u2
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
expat@2.4.7-1ubuntu0.2
no fix listed
4
library/nginx:1.27.1287ff321f9e3
expat@2.5.0-1+deb12u1
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
expat@2.4.7-1ubuntu0.2
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
expat@2.4.7-1ubuntu0.2
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
expat@2.5.0-1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
expat@2.2.5-3ubuntu0.2
no fix listed
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
expat@2.5.0-1+deb12u3
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
expat@2.4.7-1ubuntu0.7
no fix listed
4
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
expat@2.7.4-1
no fix listed
4
bitnamilegacy/kubectl:latestcd354d5b2556
expat@2.5.0-1+deb12u1
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
expat@2.2.9-1ubuntu0.4
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
expat@2.2.9-1ubuntu0.4
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
expat@2.2.9-1build1
no fix listed
3
codeurjc/planner:v1.0800cf520c245
expat@2.4.7-1ubuntu0.2
no fix listed
3
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
expat@2.5.0-1+deb12u1
no fix listed
3
gchq/hdfs:3.3.35ec58edbb2db
expat@2.6.1-2ubuntu0.2
no fix listed
3
guacamole/guacamole:1.6.0f344085e618b
expat@2.6.1-2ubuntu0.3
no fix listed
3
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
expat@2.2.9-1ubuntu0.8
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
expat@2.5.0-1
no fix listed
3
library/node:lts64af3819f927
expat@2.5.0-1+deb12u3
no fix listed
3
library/zookeeper:3.9.57d0f24ebb67b
expat@2.4.7-1ubuntu0.7
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
expat@2.1.0-7ubuntu0.16.04.3
no fix listed
3
selenium/hub:3.141.5902f251d48d5f
expat@2.2.9-1build1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
expat@2.5.0-1
no fix listed
3

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.