StackRadar

DSA-5085-2

Unscored

Advisory

Published 13 Mar 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
209
deployed by those charts
Fix available
1 of 1
affected package

expat - regression update

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 209 images.

Affected packageAffected versionsFixed inImages
expatdeb2.2.6-2, 2.2.6-2+deb10u1, 2.2.10-2, 2.2.10-2+deb11u22.2.6-2+deb10u4, 2.2.10-2+deb11u3209
OSV records
DSA-5085-2

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u4

Open the chart page →

5,919
openldaphelm-openldapVerified publisher2.0.42 of 3See more

openldap helm-openldap 2.0.4

2 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
osixia/phpldapadmin:0.9.0d112b82be133
expat@2.2.6-2
2.2.6-2+deb10u4

Open the chart page →

6,219
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

5,851
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

4,577
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
namshi/smtp:latestaa63b8de68ce
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

30,326
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

3,543
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
ceticasbl/pg-ldap-sync:latest6c0aa7567145
expat@2.2.6-2
2.2.6-2+deb10u4

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.152 of 2See more

backstage deliveryhero 0.1.15

2 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

8,213
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
guacamole/guacd:1.1.02288530a4d1c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

4,839
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,746
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

1,841
taigarc-helm-charts0.1.02 of 7See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
expat@2.2.10-2
2.2.10-2+deb11u3
taigaio/taiga-protected:6.4.036318831b3e7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

7,255
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,235
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,717
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

6,868
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

989
laravelrenoki-co1.0.01 of 2See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

6,931
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

7,830
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

10,817
cubefscubefs3.2.02 of 10See more

cubefs cubefs 3.2.0

2 of the 10 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
chubaofs/cfs-client:3.2.015ff74209ce7
expat@2.2.10-2
2.2.10-2+deb11u3
chubaofs/cfs-server:3.2.0205030e045f2
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

15,891
prometheus-sentry-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-sentry-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
expat@2.2.6-2
2.2.6-2+deb10u4

Open the chart page →

2,474
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

7,984
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

3,558
mailtrapdev-goodies0.1.01 of 1See more

mailtrap dev-goodies 0.1.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
eaudeweb/mailtrap:2.3b8ad9b7e19bb
expat@2.2.6-2
2.2.6-2+deb10u4

Open the chart page →

2,508
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

6,110
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

7,779
openldapfluktuid0.1.11 of 2See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,313
baikalgeek-cookbookVerified publisher5.2.01 of 1See more

baikal geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ckulka/baikal:0.8.0aedb1f4f3fa0
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,683
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

5,305
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

2,076
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

4,629
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,848
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

4,405
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,153
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
expat@2.2.10-2
2.2.10-2+deb11u3

Open the chart page →

3,646
ldap-self-servicehalkeye0.1.01 of 1See more

ldap-self-service halkeye 0.1.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
halkeye/self-service-password:latest3c734dde4052
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,461
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,608
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

6,810
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
gethue/nginx:latest07f00f7c7903
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

12,397
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
expat@2.2.10-2+deb11u2
2.2.10-2+deb11u3

Open the chart page →

7,129
laravelkubmeta4.2.71 of 2See more

laravel kubmeta 4.2.7

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,244
linstorkvaps1.14.03 of 11See more

linstor kvaps 1.14.0

3 of the 11 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

15,547
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

7,510
sni-routerriotkit-org1.0.61 of 1See more

sni-router riotkit-org 1.0.6

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,244
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

6,587
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,534
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

3,162
mychart1stacksimplifyVerified publisher0.1.01 of 1See more

mychart1 stacksimplify 0.1.0

1 of the 1 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:1.0.0205961b09a80
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

1,138
hlf-k8ssubstraVerified publisher10.2.41 of 7See more

hlf-k8s substra 10.2.4

1 of the 7 container images this version deploys carry DSA-5085-2.

Container imageDigestPackageFixed in
library/nginx:1.17.6b2d89d0a2103
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4

Open the chart page →

12,006

Container images carrying it

209 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wbstack/widar:1.31702fc9df79f
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
expat@2.2.10-2
2.2.10-2+deb11u3
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
expat@2.2.6-2+deb10u1
2.2.6-2+deb10u4
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
expat@2.2.10-2
2.2.10-2+deb11u3
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
expat@2.2.10-2
2.2.10-2+deb11u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.