DSA-5085-2
UnscoredAdvisory
Published 13 Mar 2022In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 256
- of 17,781 indexed, latest versions
- Container images
- 209
- deployed by those charts
- Fix available
- 1 of 1
- affected package
expat - regression update
Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 209 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| expatdeb | 2.2.6-2, 2.2.6-2+deb10u1, 2.2.10-2, 2.2.10-2+deb11u2 | 2.2.6-2+deb10u4, 2.2.10-2+deb11u3 | 209 |
- OSV records
- DSA-5085-2
Charts affected
256 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| weather-chartweather-web-app | 0.1.0 | 1 of 1See more | 2,670 |
| sonarqubewebencryptor | 6.7.3 | 1 of 3See more | 5,460 |
| myfirstchartww-helm-charts-repo | 0.1.0 | 1 of 1See more | 1,138 |
| myfirstchartzikilabVerified publisher | 0.2.0 | 1 of 1See more | 1,138 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
| grafana-matrix-forwarderzloi-space | 1.0.0 | 1 of 2See more | 1,636 |
Container images carrying it
209 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moreillon/ | bacb2ddd8394 | expat | 2.2.10-2+deb11u3 | 1 |
| mozilla/ | 1da6ff5c4895 | expat | 2.2.6-2+deb10u4 | 1 |
| namshi/ | aa63b8de68ce | expat | 2.2.6-2+deb10u4 | 1 |
| nginx/ | eb5b4fd73325 | expat | 2.2.6-2+deb10u4 | 1 |
| nmalhotr/ | 3419361fb0dd | expat | 2.2.6-2+deb10u4 | 1 |
| noojee/ | 2b3148574f68 | expat | 2.2.6-2+deb10u4 | 1 |
| norskel/ | 45fd6798558d | expat | 2.2.6-2+deb10u4 | 1 |
| ntakashi/ | 4171ec641120 | expat | 2.2.10-2+deb11u3 | 1 |
| octoprint/ | 106c26efcd8a | expat | 2.2.6-2+deb10u4 | 1 |
| octoprint/ | ea3bffae2470 | expat | 2.2.6-2+deb10u4 | 1 |
| openhab/ | d0aa4af452c1 | expat | 2.2.10-2+deb11u3 | 1 |
| openproject/ | 734743d11094 | expat | 2.2.6-2+deb10u4 | 1 |
| openwhisk/ | 63dc3d2a0904 | expat | 2.2.6-2+deb10u4 | 1 |
| pecan/ | eaa878d57ef2 | expat | 2.2.6-2+deb10u4 | 1 |
| pecan/ | 73b2074f3fec | expat | 2.2.6-2+deb10u4 | 1 |
| pecan/ | 814d678c5550 | expat | 2.2.10-2+deb11u3 | 1 |
| phntom/ | 85a2dfb83b11 | expat | 2.2.6-2+deb10u4 | 1 |
| phntom/ | 49ce665acb59 | expat | 2.2.6-2+deb10u4 | 1 |
| phntom/ | c318dc90a4bf | expat | 2.2.10-2+deb11u3 | 1 |
| plumdog/ | 0c2fa2db0357 | expat | 2.2.6-2+deb10u4 | 1 |
| proxysql/ | 8d710e80c77b | expat | 2.2.10-2+deb11u3 | 1 |
| redash/ | 9392753c0376 | expat | 2.2.6-2+deb10u4 | 1 |
| roadiehq/ | ef355bf5b639 | expat | 2.2.6-2+deb10u4 | 1 |
| robmarkcole/ | 410275726459 | expat | 2.2.10-2+deb11u3 | 1 |
| robotshop/ | de81f1d07b02 | expat | 2.2.10-2+deb11u3 | 1 |
| robotshop/ | 774b52c6180d | expat | 2.2.10-2+deb11u3 | 1 |
| robotshop/ | 4899c686c249 | expat | 2.2.10-2+deb11u3 | 1 |
| robotshop/ | 89753ab48919 | expat | 2.2.10-2+deb11u3 | 1 |
| robotshop/ | b3c20d4a22f2 | expat | 2.2.6-2+deb10u4 | 1 |
| rodolpheche/ | 2328a9fce2bf | expat | 2.2.6-2+deb10u4 | 1 |
| samueldg/ | 3987195edbe6 | expat | 2.2.6-2+deb10u4 | 1 |
| shadow228/ | 8fcea5b71906 | expat | 2.2.6-2+deb10u4 | 1 |
| shinobisystems/ | 3ca746937856 | expat | 2.2.6-2+deb10u4 | 1 |
| shinobisystems/ | c2f5ce2e1067 | expat | 2.2.6-2+deb10u4 | 1 |
| simpleidserver/ | 367218ae760f | expat | 2.2.10-2+deb11u3 | 1 |
| sinusbot/ | c7a4f3cc4393 | expat | 2.2.6-2+deb10u4 | 1 |
| sirfragalot/ | 34577843cb7b | expat | 2.2.6-2+deb10u4 | 1 |
| slagattollas/ | cecd95e31486 | expat | 2.2.6-2+deb10u4 | 1 |
| solidnerd/ | 762ffd5c51d3 | expat | 2.2.6-2+deb10u4 | 1 |
| someblackmagic/ | 0d63ba37a560 | expat | 2.2.6-2+deb10u4 | 1 |
| sorintlab/ | 36b45c0f97fc | expat | 2.2.6-2+deb10u4 | 1 |
| stacksimplify/ | ead648280067 | expat | 2.2.6-2+deb10u4 | 1 |
| stacksimplify/ | ce2b15139aca | expat | 2.2.6-2+deb10u4 | 1 |
| stakewiselabs/ | 2afd0c0b34cb | expat | 2.2.6-2+deb10u4 | 1 |
| svtechnmaa/ | b9d7ecf8de24 | expat | 2.2.6-2+deb10u4 | 1 |
| svtechnmaa/ | e19aba397c1f | expat | 2.2.6-2+deb10u4 | 1 |
| svtechnmaa/ | 674fad30a51f | expat | 2.2.6-2+deb10u4 | 1 |
| taigaio/ | 9f97323cc150 | expat | 2.2.10-2+deb11u3 | 1 |
| taigaio/ | 36318831b3e7 | expat | 2.2.6-2+deb10u4 | 1 |
| tautulli/ | c4da15f058ea | expat | 2.2.10-2+deb11u3 | 1 |