StackRadar

DSA-5085-1

Unscored

Advisory

Published 22 Feb 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.359
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
253
of 17,781 indexed, latest versions
Container images
206
deployed by those charts
Fix available
1 of 1
affected package

expat - security update

Carried by container images the latest versions of 253 of 17,781 indexed charts deploy, on 206 images.

Affected packageAffected versionsFixed inImages
expatdeb2.2.6-2, 2.2.6-2+deb10u1, 2.2.10-22.2.6-2+deb10u3, 2.2.10-2+deb11u2206
OSV records
DSA-5085-1

Charts affected

253 by stars
ChartLatestAffected imagesRadar Score
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

1,138
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry DSA-5085-1.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3

Open the chart page →

1,636

Container images carrying it

206 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
33
osixia/openldap:1.5.018742e9c449c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
7
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
5
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u3
5
ghcr.io/stacksimplify/kubenginx:0.1.0:1.0.0205961b09a80
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
5
argoproj/argocd:v1.8.1830e86cacefd
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
3
conduction/openwebconcept:4.8ee2121b569ac
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
3
ghcr.io/stacksimplify/kubenginx:0.4.0:4.0.0279eb855e6c7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
3
amancevice/superset:0.35.212a0a9e66550
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
larribas/mlflow:1.9.105ccb0b46bfb
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
library/nginx:1.176fff55753e3b
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
lncm/specter-desktop:v1.10.536eaa06f99f4
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
ncsa/checks:1.0.0abf6300b57b7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
openmf/community-app:latest496b60a51f28
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
osixia/openldap:1.4.0ccd95cc6e61e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
expat@2.2.10-2
2.2.10-2+deb11u2
2
pecan/bety:5.4.1f825d480cd62
expat@2.2.10-2
2.2.10-2+deb11u2
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
expat@2.2.10-2
2.2.10-2+deb11u2
2
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
expat@2.2.6-2
2.2.6-2+deb10u3
2
weblate/weblate:4.2.2-169c160d37a3c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
2
afrank/mozalert-controller:latestd463c37b08d7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
alerta/alerta-web:8.5.04786b9eaa606
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
amundsendev/amundsen-search:2.4.099dda9502c3e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
apachepulsar/pulsar:2.6.14db6ff0b4045
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
assistiot/authorization_svr:latestdb9361dad79b
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
assistiot/fl_repository:latest0fce3ea719a5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
assistiot/fl_training_collector:latest792715dd3084
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
atomix/atomix:3.1.127738ff4f5c63
expat@2.2.10-2
2.2.10-2+deb11u2
1
azhar008/flaskapplication:latesta1e827b0adea
expat@2.2.10-2
2.2.10-2+deb11u2
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
camptocamp/bucket-cloner:latestacfafc308d88
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
camptocamp/ekorre:0.1.035c91d5fda04
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
cdignam/kodiak:v0.54.05a6a55b39cee
expat@2.2.6-2
2.2.6-2+deb10u3
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
expat@2.2.6-2
2.2.6-2+deb10u3
1
ceticasbl/tsimulus-saas:0.1.18bc34ce180d0c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
chubaofs/cfs-client:3.2.015ff74209ce7
expat@2.2.10-2
2.2.10-2+deb11u2
1
chubaofs/cfs-server:3.2.0205030e045f2
expat@2.2.10-2
2.2.10-2+deb11u2
1
ckulka/baikal:0.8.0aedb1f4f3fa0
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
codercom/code-server:3.10.247605610ad8d
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
deconzcommunity/deconz:2.12.066541bbb78952
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1
deltaio/delta-sharing-server:0.2.08b75118187c5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.