StackRadar

CVE-2022-2309

High

Advisory

Published 5 Jul 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
247
deployed by those charts
Fix available
4 of 5
affected packages

lxml NULL Pointer Dereference allows attackers to cause a denial of service

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 247 images.

Affected packageAffected versionsFixed inImages
libxml2apk2.9.10-r6, 2.9.10-r7, 2.9.12-r0, 2.9.12-r1+3 more2.9.14-r199
libxml2deb2.9.10+dfsg-5, 2.9.10+dfsg-5ubuntu0.20.04.1, 2.9.10+dfsg-5ubuntu0.20.04.2, 2.9.10+dfsg-5ubuntu0.20.04.3+4 more2.9.10+dfsg-5ubuntu0.20.04.5, 2.9.13+dfsg-1ubuntu0.2, 2.9.14+dfsg-1.3~deb12u190
lxmlpypi3.2.1, 3.6.4, 4.1.0, 4.2.1+16 more4.9.162
lxmldeb4.8.0-1build1no fix listed1
libxml2rpm2.9.7-lp151.5.3.12.10.1-1.12
OSV records
ALPINE-CVE-2022-2309DEBIAN-CVE-2022-2309GHSA-wrxv-2j5q-m38wUBUNTU-CVE-2022-2309openSUSE-SU-2024:12290-1
Also known as
PYSEC-2022-230, USN-5760-1

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
lxml@4.5.2
4.9.1

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
lxml@4.2.1
4.9.1

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
lxml@4.2.1
4.9.1

Open the chart page →

24,335
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v4.12.00d7088d47928
libxml2@2.9.14-r0
2.9.14-r1

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2

Open the chart page →

30,699
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
lxml@4.6.5
4.9.1

Open the chart page →

1,990
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

7,255
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
timescale/timescaledb-postgis:latest-pg127758704d4a14
libxml2@2.9.10-r6
2.9.14-r1

Open the chart page →

11,482
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
eclipseaerios/self-service-password:5.2.32f93bfa4cf0d
libxml2@2.9.14-r0
2.9.14-r1

Open the chart page →

7,534
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

7,327
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

25,122
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

20,933
degafactlyVerified publisher0.11.131 of 3See more

dega factly 0.11.13

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
factly/dega-studio:0.15.1140fbaa6d555
libxml2@2.9.12-r1
2.9.14-r1

Open the chart page →

5,747
kavachfactlyVerified publisher0.9.51 of 2See more

kavach factly 0.9.5

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
factly/kavach-web:0.22.30cf361b41798
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

3,573
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
lxml@4.6.5
4.9.1

Open the chart page →

1,958
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

18,230
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
libxml2@2.9.14-r0
2.9.14-r1

Open the chart page →

4,788
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

14,659
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
lxml@4.6.3
2.9.10+dfsg-5ubuntu0.20.04.5
4.9.1

Open the chart page →

16,123
changedetection-iogeek-cookbookVerified publisher1.5.21 of 1See more

changedetection-io geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
lxml@4.6.4
4.9.1

Open the chart page →

1,950
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

12,222
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

9,698
kanboardgeek-cookbookVerified publisher5.2.01 of 1See more

kanboard geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
kanboard/kanboard:v1.2.200b6d33dbbc16
libxml2@2.9.10-r7
2.9.14-r1

Open the chart page →

1,688
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

14,283
nginx-phpgeek-cookbookVerified publisher1.2.21 of 1See more

nginx-php geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
trafex/php-nginx:2.4.07282edfca2bf
libxml2@2.9.12-r1
2.9.14-r1

Open the chart page →

1,804
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2

Open the chart page →

12,076
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

8,392
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2

Open the chart page →

19,503
pod-gatewaygeek-cookbookVerified publisher5.6.21 of 2See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/pod-gateway:v1.6.1dcb2d814a4f7
libxml2@2.9.14-r0
2.9.14-r1

Open the chart page →

2,355
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
libxml2@2.9.12-r0
lxml@4.6.4
2.9.14-r1
4.9.1

Open the chart page →

2,643
privatebingeek-cookbookVerified publisher2.2.01 of 1See more

privatebin geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
privatebin/pdo:1.3.500466418121c
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

1,159
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
libxml2@2.9.10+dfsg-5ubuntu0.20.04.2
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2

Open the chart page →

10,379
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
libxml2@2.9.10+dfsg-5
lxml@4.6.3
2.9.10+dfsg-5ubuntu0.20.04.5
4.9.1

Open the chart page →

24,293
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
lxml@4.6.3
4.9.1

Open the chart page →

7,470
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libxml2@2.9.10+dfsg-5ubuntu0.20.04.2
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

17,929
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.19-alpine084242d8028c
libxml2@2.9.10-r6
2.9.14-r1

Open the chart page →

17,759
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
libxml2@2.9.12-r1
2.9.14-r1

Open the chart page →

3,564
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
libxml2@2.9.10-r6
2.9.14-r1

Open the chart page →

4,455
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
lxml@3.2.1
4.9.1

Open the chart page →

3,978
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.19-alpine084242d8028c
libxml2@2.9.10-r6
2.9.14-r1

Open the chart page →

12,650
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
lxml@4.5.2
4.9.1

Open the chart page →

7,984
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
library/adminer:4.7143ec8cc2f3a
libxml2@2.9.10-r6
2.9.14-r1

Open the chart page →

3,971
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
libxml2@2.9.10+dfsg-5ubuntu0.20.04.2
2.9.10+dfsg-5ubuntu0.20.04.5

Open the chart page →

18,813
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
lxml@3.2.1
4.9.1

Open the chart page →

1,449
privatebinhomelabcihelmchartstestVerified publisher2.1.71 of 1See more

privatebin homelabcihelmchartstest 2.1.7

1 of the 1 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
privatebin/pdo:1.3.500466418121c
libxml2@2.9.13-r0
2.9.14-r1

Open the chart page →

1,159
ibm-business-automation-insights-devibm-charts3.2.03 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

3 of the 6 container images this version deploys carry CVE-2022-2309.

Container imageDigestPackageFixed in
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
lxml@3.2.1
4.9.1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
lxml@3.2.1
4.9.1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
lxml@3.2.1
4.9.1

Open the chart page →

39,349

Container images carrying it

247 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ciscolabs/rtsp-client:latesta7b60ec88285
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
2.9.10+dfsg-5ubuntu0.20.04.5
3
ciscolabs/rtsp-server:latestb59fc10bb821
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
2.9.10+dfsg-5ubuntu0.20.04.5
3
nginxinc/nginx-unprivileged:1.19-alpine084242d8028c
libxml2@2.9.10-r6
2.9.14-r1
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxml2@2.9.14+dfsg-1.2
2.9.14+dfsg-1.3~deb12u1
3
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxml2@2.9.14+dfsg-1.2
2.9.14+dfsg-1.3~deb12u1
2
hookiesolutions/webhookie:latest0629694246ba
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
2
library/nginx:1.19-alpine07ab71a2c8e4
libxml2@2.9.10-r6
2.9.14-r1
2
library/postgres:9.6-alpine8342bcb43446
libxml2@2.9.12-r2
2.9.14-r1
2
nacos/nacos-server:v2.1.0dcf04549c6d7
lxml@3.2.1
4.9.1
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
libxml2@2.9.12-r0
lxml@4.6.4
2.9.14-r1
4.9.1
2
pecan/db:latest9a1cdc3a9ccb
libxml2@2.9.12-r2
2.9.14-r1
2
privatebin/pdo:1.3.500466418121c
libxml2@2.9.13-r0
2.9.14-r1
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
2.9.10+dfsg-5ubuntu0.20.04.5
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2
2
weblate/weblate:4.2.2-169c160d37a3c
lxml@4.5.2
4.9.1
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libxml2@2.9.13+dfsg-1ubuntu0.1
2.9.13+dfsg-1ubuntu0.2
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
lxml@4.6.5
4.9.1
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
lxml@4.2.3
4.9.1
2
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
libxml2@2.9.13-r0
2.9.14-r1
2
acockburn/appdaemon:4.0.83a93281d7e94
libxml2@2.9.10-r6
2.9.14-r1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.5
1
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
libxml2@2.9.14-r0
2.9.14-r1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
ajanvier/polr:2.3.091ac61b88c85
libxml2@2.9.10-r6
2.9.14-r1
1
akaunting/akaunting:3.0.1552811b36ec3a
libxml2@2.9.14+dfsg-1.2
2.9.14+dfsg-1.3~deb12u1
1
alerta/alerta-web:8.5.04786b9eaa606
lxml@4.6.3
4.9.1
1
alpine/k8s:1.22.600ac10bcb759
libxml2@2.9.13-r0
2.9.14-r1
1
amazon/dynamodb-local:1.20.01ed00881c937
lxml@3.2.1
4.9.1
1
amazon/dynamodb-local:1.12.08414d80019b0
lxml@3.2.1
4.9.1
1
anonaddy/anonaddy:0.12.3957a95565166
libxml2@2.9.14-r0
2.9.14-r1
1
apache/bookkeeper:4.14.5a7d9970c148f
lxml@3.2.1
4.9.1
1
apache/hadoop:3af361b20bec0
lxml@3.2.1
4.9.1
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
apachepulsar/pulsar:2.9.0d056c89b7131
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
apachepulsar/pulsar:2.8.2d538416d5afe
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
apache/rocketmq:4.9.35ac2a4e0f627
lxml@3.2.1
4.9.1
1
avinash263/pyredis263:latestaa2b8727f1a6
libxml2@2.9.14+dfsg-1.2
2.9.14+dfsg-1.3~deb12u1
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
blockstack/envsubst:latestd64d7430289a
libxml2@2.9.10-r6
2.9.14-r1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.5
1
bryanalves/sickrage:latest42f0a130001d
lxml@3.6.4
4.9.1
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
libxml2@2.9.7-lp151.5.3.1
2.10.1-1.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
libxml2@2.9.7-lp151.5.3.1
2.10.1-1.1
1
chaosnative/cle-frontend:2.7.007b82a82a702
libxml2@2.9.13-r0
2.9.14-r1
1
chetangautamm/repo:sipp.v3e7f7049e1544
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.5
1
cloudve/janis-terminal:latestaf56e77ca587
lxml@4.5.1
4.9.1
1
countly/countly-server:25.05.4e3c238248f99
libxml2@2.9.10+dfsg-5ubuntu0.20.04.2
2.9.10+dfsg-5ubuntu0.20.04.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.