CVE-2022-49043

High

Advisory

Published 26 Jan 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 603; of 17,787 indexed, latest versions
Container images: 662; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 662 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+26 more	2.9.1+dfsg1-3ubuntu4.13+esm7, 2.9.3+dfsg1-1ubuntu0.7+esm7, 2.9.4+dfsg1-6.1ubuntu1.9+esm2, 2.9.10+dfsg-5ubuntu0.20.04.8+3 more	439
libxml2rpm	2.9.7-5.el8, 2.9.7-7.el8, 2.9.7-8.el8, 2.9.7-9.el8+17 more	0:2.9.7-18.el8_10.2, 0:2.9.13-6.el9_5.1	223

OSV records: DEBIAN-CVE-2022-49043 UBUNTU-CVE-2022-49043 RHSA-2025:1350 RHSA-2025:1517 RLSA-2025:1517
Also known as: RHSA-2025:1516, USN-7240-1, USN-7302-1

Charts affected

603 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

7,673

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_10.2

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-49043.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libxml2@2.9.7-15.el8_7.1	0:2.9.7-18.el8_10.2

Open the chart page →

3,697

Container images carrying it

662 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
merlos/zookeeper :3.9.3	a38fc7e09ed7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
middlewareeng/middleware :0.3.1	747d880812f1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
minio/kes :v0.22.2	55f3aef5803e	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_10.2	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	libxml2@2.9.7-8.el8	0:2.9.7-18.el8_10.2	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	libxml2@2.9.7-12.el8_5	0:2.9.7-18.el8_10.2	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	libxml2@2.9.7-15.el8_7.1	0:2.9.7-18.el8_10.2	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	libxml2@2.9.7-9.el8_4.2	0:2.9.7-18.el8_10.2	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	libxml2@2.9.7-15.el8_7.1	0:2.9.7-18.el8_10.2	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	libxml2@2.9.7-13.el8_6.1	0:2.9.7-18.el8_10.2	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_10.2	1
minio/operator :v5.0.9	170b154d2c61	libxml2@2.9.7-16.el8_8.1	0:2.9.7-18.el8_10.2	1
minio/operator :v4.1.0	2adc5be088f5	libxml2@2.9.7-9.el8	0:2.9.7-18.el8_10.2	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
mlikiowa/napcat-docker :latest	1336a777f9a4	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.5	1
moreillon/api-proxy :latest	d7d4a5463525	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
moreillon/camera-viewer :latest	e418cc694bd5	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
moreillon/food-manager :latest	e8fd856e593d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
moreillon/user-manager-front :v5.1.0	6597e6b98d21	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7	1
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7	1
nirmalnaveen/supermario :latest	8541a39162f3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
omecproject/onos-progran :1.0.0	5715e5648aa0	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7	1
omecproject/openmme :master-latest	64776cb9edb3	libxml2@2.9.3+dfsg1-1ubuntu0.7	2.9.3+dfsg1-1ubuntu0.7+esm7	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	libxml2@2.9.3+dfsg1-1ubuntu0.2	2.9.3+dfsg1-1ubuntu0.7+esm7	1
opea/chatqna :1.0	38c51b791efa	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/codegen :1.0	58f91683892d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/codegen-ui :1.0	2bee4eb66f3e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/codetrans :1.0	e2436483b73d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/codetrans-ui :1.0	3ef121f34610	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/docsum :1.0	3eaa91849512	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/docsum-ui :1.0	7f854e9bffaf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/guardrails-tgi :1.0	262c6048aab8	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/guardrails-tgi :latest	f68bec6a1271	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/speecht5 :1.0	249afad3d268	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/web-retriever-chroma :1.0	fe08165d7770	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opencsghq/kubectl :latest	b6d87e1048c2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
opendatacube/restcube :latest	91870111837c	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
opendatacube/wms :latest	1b90cdf68831	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
openelevation/open-elevation :latest	82fb21612e86	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.8	1