StackRadar

DSA-5085-1

Unscored

Advisory

Published 22 Feb 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.359
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
253
of 17,781 indexed, latest versions
Container images
206
deployed by those charts
Fix available
1 of 1
affected package

expat - security update

Carried by container images the latest versions of 253 of 17,781 indexed charts deploy, on 206 images.

Affected packageAffected versionsFixed inImages
expatdeb2.2.6-2, 2.2.6-2+deb10u1, 2.2.10-22.2.6-2+deb10u3, 2.2.10-2+deb11u2206
OSV records
DSA-5085-1

Charts affected

253 by stars
ChartLatestAffected imagesRadar Score
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

1,138
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

1,636

Container images carrying it

206 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vikunja/frontend:0.17.0863a426a8e49
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
weblate/weblate:3.11.3-182848df56ecd
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
wiremind/pghoard:12-2019-11-264dea42c8166c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
xtrendence/cryptofolio:V.2.2.0e6e6612bb94c
expat@2.2.10-2
2.2.10-2+deb11u2
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/adresservice-nginx:latest849af80ab017
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/logicservice-nginx:latest7c8ee08c591c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/memo-component-nginx:latestfd28182f7ecf
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/notification-component-nginx:latestd53bda41ee3b
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/orderregistratiecomponent-nginx:latest42acee4ab31c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/procestypecatalogus-nginx:latestca6fc575a3ba
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/productenendienstencatalogus-nginx:latest4095e7207822
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/proto-component-commonground-nginx:latest5b1384e29b7d
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/review-component-nginx:latest5df5f92870a5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-balie-nginx:latest2eb073ab8b83
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/conductionnl/waardepapieren-register-nginx:latest3fba727a3cc1
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/k8s-at-home/leaf2mqtt:v0.1fc9f5aca6cf4
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
expat@2.2.10-2
2.2.10-2+deb11u2
1
ghcr.io/wbstack/cradle:2.0.11c7a78c54f77
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/wbstack/quickstatements:1.3.588423e422ea8
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
ghcr.io/wbstack/widar:1.31702fc9df79f
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.