DSA-5770-1

Unscored

Advisory

Published 17 Sept 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.017; 76th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 151; of 17,781 indexed, latest versions
Container images: 156; deployed by those charts
Fix available: 1 of 1; affected package

expat - security update

Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 156 images.

Affected package	Affected versions	Fixed in	Images
expatdeb	2.5.0-1	2.5.0-1+deb12u1	156

OSV records: DSA-5770-1

Charts affected

151 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

7,673

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	expat@2.5.0-1	2.5.0-1+deb12u1	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	expat@2.5.0-1	2.5.0-1+deb12u1	5
opea/llm-tgi :1.0	0c25aab3f106	expat@2.5.0-1	2.5.0-1+deb12u1	4
library/nginx :1.25 :1.25.5	a484819eb602	expat@2.5.0-1	2.5.0-1+deb12u1	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	expat@2.5.0-1	2.5.0-1+deb12u1	3
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	expat@2.5.0-1	2.5.0-1+deb12u1	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	expat@2.5.0-1	2.5.0-1+deb12u1	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	expat@2.5.0-1	2.5.0-1+deb12u1	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	expat@2.5.0-1	2.5.0-1+deb12u1	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	expat@2.5.0-1	2.5.0-1+deb12u1	2
library/nginx :1.27.0	98f8ec75657d	expat@2.5.0-1	2.5.0-1+deb12u1	2
library/python :3.7	eedf63967cdb	expat@2.5.0-1	2.5.0-1+deb12u1	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	expat@2.5.0-1	2.5.0-1+deb12u1	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	expat@2.5.0-1	2.5.0-1+deb12u1	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	expat@2.5.0-1	2.5.0-1+deb12u1	2
opea/embedding-tei :1.0	5c9639de61c1	expat@2.5.0-1	2.5.0-1+deb12u1	2
opea/reranking-tei :1.0	e48613afb191	expat@2.5.0-1	2.5.0-1+deb12u1	2
opea/retriever-redis :1.0	eb746b263705	expat@2.5.0-1	2.5.0-1+deb12u1	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	expat@2.5.0-1	2.5.0-1+deb12u1	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	expat@2.5.0-1	2.5.0-1+deb12u1	2
uffizzi/controller :latest	0344805f267b	expat@2.5.0-1	2.5.0-1+deb12u1	2
vdiogov/glpi-conteiner :latest	6945f84f0058	expat@2.5.0-1	2.5.0-1+deb12u1	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	expat@2.5.0-1	2.5.0-1+deb12u1	2
aboogie/login_test_backend :new	9c41a4483ac8	expat@2.5.0-1	2.5.0-1+deb12u1	1
akaunting/akaunting :3.0.15	52811b36ec3a	expat@2.5.0-1	2.5.0-1+deb12u1	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	expat@2.5.0-1	2.5.0-1+deb12u1	1
apache/airflow :2.8.1	e5560ad0b86e	expat@2.5.0-1	2.5.0-1+deb12u1	1
apache/druid :29.0.1	0cef139b6bf1	expat@2.5.0-1	2.5.0-1+deb12u1	1
apache/superset :4.0.1	ab9467fd712c	expat@2.5.0-1	2.5.0-1+deb12u1	1
aristidetm/basic-notebook :3.6.5	469dbc951224	expat@2.5.0-1	2.5.0-1+deb12u1	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	expat@2.5.0-1	2.5.0-1+deb12u1	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	expat@2.5.0-1	2.5.0-1+deb12u1	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	expat@2.5.0-1	2.5.0-1+deb12u1	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	expat@2.5.0-1	2.5.0-1+deb12u1	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	expat@2.5.0-1	2.5.0-1+deb12u1	1
avinash263/pyredis263 :latest	aa2b8727f1a6	expat@2.5.0-1	2.5.0-1+deb12u1	1
avzini/web-app :latest	f40b30210ed0	expat@2.5.0-1	2.5.0-1+deb12u1	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	expat@2.5.0-1	2.5.0-1+deb12u1	1
collabora/code :23.05.10.1.1	05299b452f7f	expat@2.5.0-1	2.5.0-1+deb12u1	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	expat@2.5.0-1	2.5.0-1+deb12u1	1
dannielkil/book-frontend :latest	937993927694	expat@2.5.0-1	2.5.0-1+deb12u1	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	expat@2.5.0-1	2.5.0-1+deb12u1	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	expat@2.5.0-1	2.5.0-1+deb12u1	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	expat@2.5.0-1	2.5.0-1+deb12u1	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	expat@2.5.0-1	2.5.0-1+deb12u1	1
domainmod/domainmod :4.23.0	4017bfe4c597	expat@2.5.0-1	2.5.0-1+deb12u1	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	expat@2.5.0-1	2.5.0-1+deb12u1	1
esphome/esphome :2024.3.0	9ab8cc88b28c	expat@2.5.0-1	2.5.0-1+deb12u1	1
firefart/requesttracker :5.0.4	0d6249906d8c	expat@2.5.0-1	2.5.0-1+deb12u1	1
gulacedia/web-dvwa-new :v3	67b467d961ca	expat@2.5.0-1	2.5.0-1+deb12u1	1