StackRadar

CVE-2019-11068

Critical

Advisory

Published 10 Apr 2019In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.052
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
38
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
3 of 3
affected packages

Nokogiri vulnerable to libxslt protection mechanism bypass

Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.28-2+deb8u3, 1.1.28-2ubuntu0.11.1.28-2+deb8u4, 1.1.28-2ubuntu0.215
libxsltapk1.1.31-r0, 1.1.32-r01.1.31-r1, 1.1.33-r110
nokogirigem1.8.21.10.31
OSV records
ALPINE-CVE-2019-11068GHSA-qxcg-xjjg-66mjUBUNTU-CVE-2019-11068DLA-1756-1
Also known as
USN-3947-1

Charts affected

38 by stars
ChartLatestAffected imagesRadar Score
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.11-alpine83bc87df343f
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

8,636
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

1,896
kubeboxcowboysysopVerified publisher6.0.01 of 1See more

kubebox cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
astefanutti/kubebox:0.9.0-server4ccf515e61eb
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

865
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

6,761
flask-appmarcinkujawski1.0.01 of 3See more

flask-app marcinkujawski 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

2,912
confluence-servermoxVerified publisher3.7.31 of 3See more

confluence-server mox 3.7.3

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.11-alpine83bc87df343f
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

493
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

1,896
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

11,833
test-chartbipeendemoVerified publisher0.1.01 of 1See more

test-chart bipeendemo 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-helm-demo:v1.0.0197f07fd1057
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

644
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
nokogiri@1.8.2
1.10.3

Open the chart page →

5,437
postgresqlcamptocamp30.7.11 of 1See more

postgresql camptocamp3 0.7.1

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

1,123
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

4,086
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-ui:latestf07f843f82e8
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

12,457
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
libxslt@1.1.28-2ubuntu0.1
1.1.28-2ubuntu0.2
pcm32/galaxy-postgres:9.6.5_for_18.01301fb89914ef
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

70,895
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
igrantio/bb-consent-admin-dashboard:2023.11.6852574120a1e
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

3,181
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

3,871
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,186
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

24,296
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,245
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

1,896
giteajenkins-x1.3.121 of 3See more

gitea jenkins-x 1.3.12

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

2,407
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

9,854
jx-app-giteajenkins-x0.0.21 of 3See more

jx-app-gitea jenkins-x 0.0.2

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

2,407
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.52f2b1f4d9d83
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

14,801
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.11-alpine83bc87df343f
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

5,663
xos-coreopencord4.0.21 of 6See more

xos-core opencord 4.0.2

1 of the 6 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:10.3-alpineb06cdddba62f
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

480
xos-dbopencord1.0.41 of 1See more

xos-db opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:10.3-alpineb06cdddba62f
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

480
oauth2-proxypresto-loadbalancer4.3.181 of 2See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/nginx:1.15.9-alpine55390addbb1a
libxslt@1.1.32-r0
1.1.33-r1

Open the chart page →

3,958
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,533
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

10,967
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libxslt@1.1.31-r0
1.1.31-r1

Open the chart page →

1,896
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2019-11068.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4

Open the chart page →

11,841

Container images carrying it

26 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:9.6.25284ba74a106
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
7
cachethq/docker:2.3.15a61ff0f67ea7
libxslt@1.1.31-r0
1.1.31-r1
4
library/postgres:9.6.11-alpine83bc87df343f
libxslt@1.1.32-r0
1.1.33-r1
3
library/postgres:10.3-alpineb06cdddba62f
libxslt@1.1.31-r0
1.1.31-r1
2
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
2
astefanutti/kubebox:0.9.0-server4ccf515e61eb
libxslt@1.1.31-r0
1.1.31-r1
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
nokogiri@1.8.2
1.10.3
1
cloudve/cloudlaunch-ui:latestf07f843f82e8
libxslt@1.1.31-r0
1.1.31-r1
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
galaxy/galaxy-stable:v18.018e577a626dfd
libxslt@1.1.28-2ubuntu0.1
1.1.28-2ubuntu0.2
1
hickey/puppet_forge:1.10.0c1148a09ef20
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
igrantio/bb-consent-admin-dashboard:2023.11.6852574120a1e
libxslt@1.1.32-r0
1.1.33-r1
1
library/nginx:1.15.9-alpine55390addbb1a
libxslt@1.1.32-r0
1.1.33-r1
1
library/postgres:9.6.52f2b1f4d9d83
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
libxslt@1.1.32-r0
1.1.33-r1
1
neilpeterson/get-tweet:v28b645ac1a23e
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
neilpeterson/osba-storage-demo:latest29d229ab446e
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
pcm32/galaxy-postgres:9.6.5_for_18.01301fb89914ef
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1
richardchesterwood/k8s-fleetman-helm-demo:v1.0.0197f07fd1057
libxslt@1.1.31-r0
1.1.31-r1
1
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
libxslt@1.1.31-r0
1.1.31-r1
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
libxslt@1.1.28-2+deb8u3
1.1.28-2+deb8u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.