DLA-2935-1
UnscoredAdvisory
Published 7 Mar 2022In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.359
- 98th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 213
- of 17,781 indexed, latest versions
- Container images
- 119
- deployed by those charts
- Fix available
- 1 of 1
- affected package
expat - security update
Carried by container images the latest versions of 213 of 17,781 indexed charts deploy, on 119 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| expatdeb | 2.2.0-2+deb9u1, 2.2.0-2+deb9u2, 2.2.0-2+deb9u3 | 2.2.0-2+deb9u5 | 119 |
- OSV records
- DLA-2935-1
Charts affected
213 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| helmexampletomsuehelmexample | 0.1.0 | 1 of 1See more | 702 |
| voteappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
| workerappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 1See more | 3,329 |
| voteappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
| workerappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 1See more | 3,329 |
| nginx-file-browserwarjiang | 0.1.2 | 1 of 1See more | 702 |
| queryservice-gatewaywbstack | 0.2.0 | 1 of 1See more | 2,559 |
| cadencewenerme | 0.23.0 | 1 of 5See more | 10,127 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| upsourcexykongVerified publisher | 0.1.1 | 1 of 1See more | 702 |
| helmexampleycztest | 0.1.0 | 1 of 1See more | 702 |
| mychartyi-test-chart | 0.1.0 | 1 of 1See more | 702 |
| helmexampleyunpeng-helmexample | 0.1.0 | 1 of 1See more | 702 |
Container images carrying it
119 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | c3e5737ae68f | expat | 2.2.0-2+deb9u5 | 1 |
| daskdev/ | 4ecd7bc35500 | expat | 2.2.0-2+deb9u5 | 1 |
| davidvmar/ | 2a68e9ac7f09 | expat | 2.2.0-2+deb9u5 | 1 |
| davidvmar/ | 5663f5b24615 | expat | 2.2.0-2+deb9u5 | 1 |
| douz/ | fa6a57de2b72 | expat | 2.2.0-2+deb9u5 | 1 |
| drgrove/ | 361721759a2b | expat | 2.2.0-2+deb9u5 | 1 |
| duplicati/ | 8660f0eda7c9 | expat | 2.2.0-2+deb9u5 | 1 |
| egdsandaru/ | 681baa1926f4 | expat | 2.2.0-2+deb9u5 | 1 |
| enketo/ | dcad9c2273f6 | expat | 2.2.0-2+deb9u5 | 1 |
| ethersphere/ | 7624f11a72ad | expat | 2.2.0-2+deb9u5 | 1 |
| getsentry/ | 6ac37974fd2a | expat | 2.2.0-2+deb9u5 | 1 |
| grafana/ | 104f434d47c8 | expat | 2.2.0-2+deb9u5 | 1 |
| grafana/ | 9e7fe9c7903a | expat | 2.2.0-2+deb9u5 | 1 |
| grafana/ | a6b37f9afdd9 | expat | 2.2.0-2+deb9u5 | 1 |
| grafana/ | b5591419cfa3 | expat | 2.2.0-2+deb9u5 | 1 |
| guacamole/ | 333a7f40c145 | expat | 2.2.0-2+deb9u5 | 1 |
| halkeye/ | 53eb2b3cd4cb | expat | 2.2.0-2+deb9u5 | 1 |
| halkeye/ | 77b05e95fdb5 | expat | 2.2.0-2+deb9u5 | 1 |
| i4trust/ | 3e77858e1219 | expat | 2.2.0-2+deb9u5 | 1 |
| ibmcom/ | 9a766604a73b | expat | 2.2.0-2+deb9u5 | 1 |
| jenkinsci/ | a1f33f004659 | expat | 2.2.0-2+deb9u5 | 1 |
| kiwigrid/ | 6eb52513d59e | expat | 2.2.0-2+deb9u5 | 1 |
| kiwigrid/ | 899ccd0b1f54 | expat | 2.2.0-2+deb9u5 | 1 |
| koumoul/ | 7108d47be3b2 | expat | 2.2.0-2+deb9u5 | 1 |
| leeyoongti/ | 21d66cb76352 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | 98531a31f213 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | cb079c0d7a57 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | ee75c9a737e7 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | 41ed3a1a16b6 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | f7988fb6c02e | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | 9625c2fb3498 | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | 05bd722c6b0c | expat | 2.2.0-2+deb9u5 | 1 |
| library/ | 0ae5169e3d0f | expat | 2.2.0-2+deb9u5 | 1 |
| lmenezes/ | 6684131caf5f | expat | 2.2.0-2+deb9u5 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | expat | 2.2.0-2+deb9u5 | 1 |
| mirrorgitlabcontainers/ | 06b19a4bc805 | expat | 2.2.0-2+deb9u5 | 1 |
| mirrorgitlabcontainers/ | 9f3654f1eafc | expat | 2.2.0-2+deb9u5 | 1 |
| mvitale1989/ | 1504ccda06df | expat | 2.2.0-2+deb9u5 | 1 |
| ncsapolyglot/ | c44b22eb58bb | expat | 2.2.0-2+deb9u5 | 1 |
| neilpeterson/ | fb47732ef36b | expat | 2.2.0-2+deb9u5 | 1 |
| neilpeterson/ | 3a8877032972 | expat | 2.2.0-2+deb9u5 | 1 |
| neilpeterson/ | 64fd8dab075f | expat | 2.2.0-2+deb9u5 | 1 |
| neilpeterson/ | 39ce9f92e899 | expat | 2.2.0-2+deb9u5 | 1 |
| nodered/ | 070643219ea2 | expat | 2.2.0-2+deb9u5 | 1 |
| ondrejsika/ | b1fd497416c8 | expat | 2.2.0-2+deb9u5 | 1 |
| opencord/ | 1d9ee8ce7fab | expat | 2.2.0-2+deb9u5 | 1 |
| openwhisk/ | b695a6ceb406 | expat | 2.2.0-2+deb9u5 | 1 |
| osixia/ | 58cce1b08592 | expat | 2.2.0-2+deb9u5 | 1 |
| osrm/ | c5c86a5b15ce | expat | 2.2.0-2+deb9u5 | 1 |
| pachyderm/ | 94e9a281e5a4 | expat | 2.2.0-2+deb9u5 | 1 |