StackRadar

DLA-2904-1

Unscored

Advisory

Published 30 Jan 2022In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.048
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
213
of 17,781 indexed, latest versions
Container images
119
deployed by those charts
Fix available
1 of 1
affected package

expat - security update

Carried by container images the latest versions of 213 of 17,781 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
expatdeb2.2.0-2+deb9u1, 2.2.0-2+deb9u2, 2.2.0-2+deb9u32.2.0-2+deb9u4119
OSV records
DLA-2904-1

Charts affected

213 by stars
ChartLatestAffected imagesRadar Score
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

3,329
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4

Open the chart page →

2,559
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4

Open the chart page →

22,665
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry DLA-2904-1.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4

Open the chart page →

702

Container images carrying it

119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.16.03e373fd5b8d4
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4
86
library/cassandra:3.11.3ce85468c5bad
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
7
grafana/grafana:6.2.5ab415470454b
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
4
kodekloud/examplevotingapp_worker:v1741e3aaaa812
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
4
oscarsotosanchez/server:v1.06e2e1279126b
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
4
osixia/phpldapadmin:0.7.11ab629698ae0
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
4
quay.io/devtron/postgres:11.3ef035ac10498
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
3
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
2
grafana/grafana:6.1.6d66b41cf7e05
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
library/nginx:1.13.12b1d09e971889
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
library/postgres:11.5b3770d9c4ef1
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
neilpeterson/azure-vote-front:v384062718347c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
osixia/openldap:1.2.4d212a12aa728
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
rodolpheche/wiremock:2.26.03be08a386092
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
2
solsson/kafka-prometheus-jmx-exporter6f82e2b0464f
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
statsd/statsd:v0.8.6dab129e74c25
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
2
aerospike/aerospike-server:4.5.0.55bec98d46c8a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
alphayax/phpmemcachedadmin:latestc284977f027a
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
amancevice/superset:0.28.1c8c04bfe3d66
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
apache/couchdb:2.39f895c8ae371
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
argoproj/argocd:v1.2.1b0230853357d
expat@2.2.0-2+deb9u2
2.2.0-2+deb9u4
1
bivas/presto:0.19605545994f806
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
bryanalves/smart_exporter:0.2af47dfbb9413
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
camptocamp/pghoard:10bff736b15623
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/agendaservice-nginx:lateste1c176458aaf
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/balance-registration-nginx:dev9e24264ea8f3
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/balance-registration-varnish:dev07c44005da9d
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/betaalservice-nginx:latestd3577ddd5c67
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/cgrc-nginx:devd8e23f10e882
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/cgrc-varnish:deve154d5781c8a
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/checkin-component-nginx:dev583d2cd8476c
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/checkin-component-varnish:devef3a3fb0ad47
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/conduction-ui-nginx:devd9b38e234de9
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/conduction-ui-varnish:dev5f5add2c12e0
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/contactmoment-component-nginx:dev353dc46303ac
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/contactmoment-component-varnish:deve3546b97faea
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/docparser-nginx:dev08524d8327b8
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/docparser-varnish:dev45f20c4cd2fa
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/kvk-nginx:devcf163d2b95b5
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1
conduction/kvk-varnish:dev8722700f1768
expat@2.2.0-2+deb9u3
2.2.0-2+deb9u4
1
conduction/pan-nginx:devaf3e9f551ad1
expat@2.2.0-2+deb9u1
2.2.0-2+deb9u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.