CVE-2022-49043

High

Advisory

Published 26 Jan 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 603; of 17,787 indexed, latest versions
Container images: 662; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 662 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+26 more	2.9.1+dfsg1-3ubuntu4.13+esm7, 2.9.3+dfsg1-1ubuntu0.7+esm7, 2.9.4+dfsg1-6.1ubuntu1.9+esm2, 2.9.10+dfsg-5ubuntu0.20.04.8+3 more	439
libxml2rpm	2.9.7-5.el8, 2.9.7-7.el8, 2.9.7-8.el8, 2.9.7-9.el8+17 more	0:2.9.7-18.el8_10.2, 0:2.9.13-6.el9_5.1	223

OSV records: DEBIAN-CVE-2022-49043 UBUNTU-CVE-2022-49043 RHSA-2025:1350 RHSA-2025:1517 RLSA-2025:1517
Also known as: RHSA-2025:1516, USN-7240-1, USN-7302-1

Charts affected

603 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

7,673

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_10.2

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libxml2@2.9.7-15.el8_7.1	0:2.9.7-18.el8_10.2

Open the chart page →

3,697

Container images carrying it

662 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jaedb/iris :latest	048cfbf58d57	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jakowenko/double-take :1.6.0	b858bac9e32a	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1
jellyfin/jellyfin :10.10.3	17c3a8d9dddb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jellyfin/jellyfin :10.9.10	79fb3d73a3e9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jellyfin/jellyfin :10.10.7	7ae36aab93ef	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jellyfin/jellyfin :10.10.6	96b09723b22f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
josh5/unmanic :0.2.6	4d49c4816260	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.5	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.8	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.8	1
kennethreitz/httpbin :latest	599fe5e50731	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.8	1
knspar/phronetis-operator :0.1.6	0c4f0543ee58	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
kubeflow/model-registry :v0.2.9	5783f6db428f	libxml2@2.9.7-18.el8_10.1	0:2.9.7-18.el8_10.2	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
kuberay/operator :v1.0.0	4e6ac8a3a2c4	libxml2@2.9.7-16.el8_8.1	0:2.9.7-18.el8_10.2	1
kuzwolka/aws9 :main	1ad759b961b1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
kuzwolka/aws9 :news	3e8880fbbb96	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
kuzwolka/aws9 :blog	4a7707410bf1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
kuzwolka/aws9 :shop	84a9d9766345	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
laly9999/node-app :1	dd0e503913e1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
langgenius/dify-api :0.6.11	fca918260dd6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/matomo :5.1.2-apache	2415789e1602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/nginx :1.27.4	09369da6b103	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/nginx :1.27	6784fb0834aa	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/nginx :1.25.1	67f9a4f10d14	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/nginx :1.25.4	9ff236ed47fe	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/nginx :1.27.3	fb197595ebe7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/postgres :17.4	304ab8135187	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/postgres :16.6	557fea37a744	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/postgres :15.3	8775adb39f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/postgres :13.12	ced3ba927f4c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/python :3.8	d41127070014	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
library/wordpress :6.4.3-apache	8ae66efb09a2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1
linuxserver/deluge :18.04.1	0ac871624394	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
linuxserver/jellyfin :10.7.7	2427dde159a2	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.8	1
lis314/project-zomboid-docker :latest	aa2089c37920	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
livekit/ingress :v1.2.2	1ab01641b366	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.5	1
localstack/localstack :3.1	9d278167f2b7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
mariadb/maxscale :23.02.2	56c5e0908148	libxml2@2.9.7-16.el8	0:2.9.7-18.el8_10.2	1
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
mediagis/nominatim :3.7	c15e941485ef	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.8	1
mediagis/nominatim :4.2	d0eae7b51374	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.5	1