StackRadar

DLA-2904-1

Unscored

Advisory

Published 30 Jan 2022In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.048
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
213
of 17,781 indexed, latest versions
Container images
119
deployed by those charts
Fix available
1 of 1
affected package

expat - security update

Carried by container images the latest versions of 213 of 17,781 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
expatdeb2.2.0-2+deb9u1, 2.2.0-2+deb9u2, 2.2.0-2+deb9u32.2.0-2+deb9u4119
OSV records
DLA-2904-1

Charts affected

213 by stars
ChartLatestAffected imagesRadar Score
celebrimborcelebrimbor0.1.01 of 1See more

celebrimbor celebrimbor 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/cassandra:3.11.598531a31f213
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

12,018
chart-release-samplechart-release-sample2.1.171 of 1See more

chart-release-sample chart-release-sample 2.1.17

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
checkin-componentcheckin-component0.1.02 of 4See more

checkin-component checkin-component 0.1.0

2 of the 4 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/checkin-component-nginx:dev583d2cd8476c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
conduction/checkin-component-varnish:devef3a3fb0ad47
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

8,408
aerospikecloudnativeapp0.2.71 of 1See more

aerospike cloudnativeapp 0.2.7

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
aerospike/aerospike-server:4.5.0.55bec98d46c8a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

657
cerebrocloudnativeapp1.0.11 of 2See more

cerebro cloudnativeapp 1.0.1

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.36684131caf5f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

2,842
couchdbcloudnativeapp1.1.31 of 3See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/couchdb:2.3.0ee75c9a737e7
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

2,110
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

29,901
grafanacloudnativeapp3.3.81 of 1See more

grafana cloudnativeapp 3.3.8

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
grafana/grafana:6.1.6d66b41cf7e05
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

1,102
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

4,790
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

7,226
prometheus-operatorcloudnativeapp6.4.02 of 7See more

prometheus-operator cloudnativeapp 6.4.0

2 of the 7 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

2,954
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

6,497
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

5,060
openldapcloud-native-toolkit0.1.91 of 3See more

openldap cloud-native-toolkit 0.1.9

1 of the 3 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.058cce1b08592
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

2,782
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
robotshop/rs-catalogue:latestd545747c1b97
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
robotshop/rs-user:latestea509182c180
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

29,555
setup-jobcloud-native-toolkit0.3.01 of 2See more

setup-job cloud-native-toolkit 0.3.0

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

2,792
mychartcodebee-charts0.1.01 of 1See more

mychart codebee-charts 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
cgrccommongroundregistratiecomponent0.1.02 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

2 of the 3 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/cgrc-nginx:devd8e23f10e882
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
conduction/cgrc-varnish:deve154d5781c8a
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

7,572
conduction-uiconduction-ui0.1.02 of 6See more

conduction-ui conduction-ui 0.1.0

2 of the 6 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/conduction-ui-nginx:devd9b38e234de9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
conduction/conduction-ui-varnish:dev5f5add2c12e0
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/betaalservice-nginx:latestd3577ddd5c67
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.02 of 4See more

contactmoment-component contactmoment-component 0.1.0

2 of the 4 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/contactmoment-component-nginx:dev353dc46303ac
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
conduction/contactmoment-component-varnish:deve3546b97faea
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

8,408
cp-helm-chartscp-helm-charts0.6.11 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

1 of the 8 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
solsson/kafka-prometheus-jmx-exporterdigest-pinned6f82e2b0464f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

58,857
app01create-databases0.1.01 of 1See more

app01 create-databases 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
node-web-appcustom-charts0.1.01 of 1See more

node-web-app custom-charts 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

8,245
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

3,553
demodemo0.1.21 of 1See more

demo demo 0.1.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:11.3ef035ac10498
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

6,237
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

27,550
docparserdocparser0.1.02 of 4See more

docparser docparser 0.1.0

2 of the 4 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
conduction/docparser-nginx:dev08524d8327b8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
conduction/docparser-varnish:dev45f20c4cd2fa
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

8,408
test-chartdossif0.1.51 of 1See more

test-chart dossif 0.1.5

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
douz/helpdesk-frontend:latestfa6a57de2b72
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

4,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

4,223
nginxdoubanVerified publisher0.4.11 of 1See more

nginx douban 0.4.1

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
nonebotdoubanVerified publisher0.1.31 of 1See more

nonebot douban 0.1.3

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
probotdoubanVerified publisher0.1.21 of 1See more

probot douban 0.1.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

24,656
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

20,205
myappeoc-chartsVerified publisher0.1.01 of 1See more

myapp eoc-charts 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

27,256
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

3,260
example-helm-chartexample-mycharts0.1.01 of 1See more

example-helm-chart example-mycharts 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
dega-serverfactlyVerified publisher0.1.01 of 1See more

dega-server factly 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
my-chartfleet-web-app0.1.02 of 6See more

my-chart fleet-web-app 0.1.0

2 of the 6 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

24,296
floritestfloriapp0.1.01 of 1See more

floritest floriapp 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
examplefnzv0.1.01 of 1See more

example fnzv 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
functions2functions2-hoanganht1k270.1.01 of 1See more

functions2 functions2-hoanganht1k27 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702

Container images carrying it

119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pachyderm/grpc-proxy:0.4.92b27f41d4d02
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4
1
paulczar/spring-helloworld:latestc7140cecd5f7
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4
1
pedrocesarti/jmeter-docker:3.314851f144f57
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
pihole/pihole:v4.48c172c4cf344
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
rakii8585/angular-node-webapp:latest026082a515ac
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
raykrueger/riemann:0.2.14c8baf3de57bb
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
robotshop/rs-cart:latest388349d5cb3c
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
robotshop/rs-catalogue:latestd545747c1b97
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
robotshop/rs-user:latestea509182c180
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4
1
slagattollas/server-practica:latest6dd8ead8e2b1
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
slagattollas/toposervice-practica:latestdc63973dae0d
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
vromero/activemq-artemis:2.16.0408d6a46b153
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
ghcr.io/leoquote/mergeable:latest451706815103
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.