CVE-2025-24855
HighAdvisory
Published 14 Mar 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 252
- of 17,781 indexed, latest versions
- Container images
- 245
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: libxslt security update
Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 245 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libxsltdeb | 1.1.28-2.1ubuntu0.3, 1.1.28-2ubuntu0.1, 1.1.29-5ubuntu0.2, 1.1.34-4+5 more | 1.1.28-2.1ubuntu0.3+esm3, 1.1.28-2ubuntu0.2+esm4, 1.1.29-5ubuntu0.3+esm2, 1.1.34-4ubuntu0.20.04.3+3 more | 173 |
| libxsltapk | 1.1.38-r0, 1.1.39-r0, 1.1.39-r1, 1.1.42-r1 | 1.1.38-r1, 1.1.39-r1, 1.1.39-r2, 1.1.42-r2 | 69 |
| libxsltrpm | 1.1.34-9.el9 | 0:1.1.34-9.el9_5.1 | 3 |
- OSV records
- ALPINE-CVE-2025-24855DEBIAN-CVE-2025-24855RHSA-2025:3107UBUNTU-CVE-2025-24855
- Also known as
- RHSA-2025:3389, USN-7361-1, USN-7787-1
Charts affected
252 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,589 |
Container images carrying it
245 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | c7e70bf1d3fb | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | dcc172c6c55f | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | 92356da09704 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | 02e2f47a405e | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | 3332e81afb4f | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | 3ba6e6f11388 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | 90fda44bfa42 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | cc55da2fa366 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | cf63048c9209 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | d885ac277163 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | e6fa49bb0347 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | ea55532b6f75 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bitnamilegacy/ | fdc6979dbc53 | libxslt | 1.1.35-1+deb12u1 | 1 |
| bnjbvr/ | 37e216b182c8 | libxslt | 1.1.35-1+deb12u1 | 1 |
| carlosmz87/ | 8ffa63aa995d | libxslt | 1.1.35-1+deb12u1 | 1 |
| carlosmz87/ | 79f4b528f42a | libxslt | 1.1.39-r2 | 1 |
| chandanteekinavar/ | 6de5bd44a325 | libxslt | 1.1.42-r2 | 1 |
| codecov/ | 0475cb1c3136 | libxslt | 1.1.38-r1 | 1 |
| codecov/ | 837f546b479b | libxslt | 1.1.38-r1 | 1 |
| codetogether/ | 4348c8a38752 | libxslt | 0:1.1.34-9.el9_5.1 | 1 |
| dachichang/ | 7ccac90a935e | libxslt | 1.1.35-1+deb12u1 | 1 |
| dannielkil/ | 937993927694 | libxslt | 1.1.35-1+deb12u1 | 1 |
| davidy/ | 41b2355cc23a | libxslt | 1.1.39-r2 | 1 |
| ddosify/ | a43c5155fa1c | libxslt | 1.1.35-1+deb12u1 | 1 |
| ddosify/ | 3c11e3182652 | libxslt | 1.1.35-1+deb12u1 | 1 |
| ddosify/ | ac323d52bfb4 | libxslt | 1.1.35-1+deb12u1 | 1 |
| ddosify/ | 56dbd7cf0776 | libxslt | 1.1.38-r1 | 1 |
| ddosify/ | bf454ab99d89 | libxslt | 1.1.38-r1 | 1 |
| dgraziotin/ | 38f2de42bed0 | libxslt | 1.1.34-4ubuntu0.20.04.3 | 1 |
| dgtlmoon/ | f166a963b550 | libxslt | 1.1.38-r1 | 1 |
| djjudas21/ | 4fa898a52d97 | libxslt | 1.1.39-r2 | 1 |
| emqx/ | e33e9816f147 | libxslt | 1.1.35-1+deb12u1 | 1 |
| engrmth/ | 6d8464e6f0e8 | libxslt | 1.1.34-4ubuntu0.20.04.3 | 1 |
| felipecs8/ | 29e06c9c6385 | libxslt | 1.1.35-1+deb12u1 | 1 |
| fnzv/ | b3079b95c336 | libxslt | 1.1.34-4ubuntu0.22.04.3 | 1 |
| galaxy/ | 8e577a626dfd | libxslt | 1.1.28-2ubuntu0.2+esm4 | 1 |
| gchq/ | c460bb587d6d | libxslt | 1.1.39-0exp1ubuntu0.24.04.2 | 1 |
| gethue/ | 11b649636e68 | libxslt | 1.1.34-4ubuntu0.20.04.3 | 1 |
| gethue/ | 5702b2c37ff9 | libxslt | 1.1.29-5ubuntu0.3+esm2 | 1 |
| guacamole/ | 0f62f6d17ab3 | libxslt | 1.1.34-4ubuntu0.22.04.3 | 1 |
| hamzaarshad10/ | cd359d9a78c3 | libxslt | 1.1.39-r2 | 1 |
| hazegoodlife/ | 50f02d2d5d4d | libxslt | 1.1.35-1+deb12u1 | 1 |
| hazegoodlife/ | 8d4c63169e14 | libxslt | 1.1.35-1+deb12u1 | 1 |
| hecrom/ | bb0372939c19 | libxslt | 1.1.35-1+deb12u1 | 1 |
| helicone/ | 4a913936c97b | libxslt | 1.1.35-1+deb12u1 | 1 |
| hngtech11/ | f0112dc12cfb | libxslt | 1.1.38-r1 | 1 |
| intelloop/ | 2409c2a00ab6 | libxslt | 1.1.39-r1 | 1 |
| intel/ | 1a89327e499b | libxslt | 1.1.34-4ubuntu0.20.04.3 | 1 |
| intelowlproject/ | 0b22e547ea6b | libxslt | 1.1.35-1+deb12u1 | 1 |
| invoiceninja/ | 1437916dee01 | libxslt | 1.1.38-r1 | 1 |