CVE-2025-24928

High

Advisory

Published 18 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 445; of 17,781 indexed, latest versions
Container images: 455; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 445 of 17,781 indexed charts deploy, on 455 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+28 more	2.9.1+dfsg1-3ubuntu4.13+esm7, 2.9.3+dfsg1-1ubuntu0.7+esm7, 2.9.4+dfsg1-6.1ubuntu1.9+esm2, 2.9.10+dfsg-5ubuntu0.20.04.9+3 more	442
libxml2apk	2.13.4-r3	2.13.4-r4	13

OSV records: ALPINE-CVE-2025-24928 DEBIAN-CVE-2025-24928 UBUNTU-CVE-2025-24928
Also known as: USN-7302-1

Charts affected

445 by stars

Chart

Latest

Affected images

Radar Score

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,521

nominatimrobjuz

6.4.1

1 of 4 See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

8,690

browserless-chromesagikazarmark

0.0.5

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

24,488

repmanszpadel-charts

3.52.17

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/nginx :1.27.3	fb197595ebe7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

7,052

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

13,635

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	libxml2@2.9.4+dfsg1-6.1ubuntu1.6	2.9.4+dfsg1-6.1ubuntu1.9+esm2

Open the chart page →

12,046

anteonanteon

2.6.4

1 of 13 See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

22,202

dltbrokerassist-iot-distributed-broker

0.2.0

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

77,687

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

13,145

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,190

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,190

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

15,863

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

36,094

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

9,724

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

5,398

dbrepodbrepo

1.13.3

5 of 25 See more

dbrepo dbrepo 1.13.3

5 of the 25 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

52,635

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

18,376

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

11,458

zabbix-server-mysqlfermosit

3.0.2

2 of 4 See more

zabbix-server-mysql fermosit 3.0.2

2 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2

Open the chart page →

12,840

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

3 of 7 See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

15,653

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

11,558

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

13,025

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

15,856

tdarrgeek-cookbook

4.6.2

2 of 2 See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr :2.00.18	1256348872ce	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

31,000

gentrace-self-hostedgentrace-self-hosted

0.1.3

1 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :15.3	8775adb39f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

15,562

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

10,072

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :16.1	09f23e02d766	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,610

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
langgenius/dify-api :0.6.11	fca918260dd6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

20,403

kubefarmkvaps

0.13.4

1 of 6 See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

12,422

opennebulakvaps

2.1.1

5 of 9 See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

113,791

drillmagasin-drill

0.9.0

1 of 3 See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
merlos/zookeeper :3.9.3	a38fc7e09ed7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,734

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2

Open the chart page →

4,137

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
moreillon/food-manager :latest	e8fd856e593d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,738

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,039

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

14,838

librechatopenshift

1.9.0

1 of 3 See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,779

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

31,844

pzserverpzserver

0.1.17

1 of 2 See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
lis314/project-zomboid-docker :latest	aa2089c37920	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

3,201

napcatredish101

0.1.3

1 of 1 See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
mlikiowa/napcat-docker :latest	1336a777f9a4	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,405

atuinrm3l

0.11.0

1 of 3 See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

6,521

dev-feedrm3l

3.1.2

1 of 3 See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

9,837

delugerubxkube

1.2.1

1 of 1 See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
linuxserver/deluge :18.04.1	0ac871624394	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm2

Open the chart page →

13,541

kyoorubxkube

0.1.10

2 of 9 See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

30,234

mssqlserver-2019simcube

1.2.3

1 of 1 See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

6,817

smarter-demosmarter

0.1.5

3 of 7 See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

45,832

Container images carrying it

455 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
opea/guardrails-tgi :latest	f68bec6a1271	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/speecht5 :1.0	249afad3d268	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opea/web-retriever-chroma :1.0	fe08165d7770	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opencsghq/kubectl :latest	b6d87e1048c2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
opendatacube/restcube :latest	91870111837c	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
opendatacube/wms :latest	1b90cdf68831	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
openelevation/open-elevation :latest	82fb21612e86	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
openkm/openkm-ce :6.3.11	3bc465a7461b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.9	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.9	1
openthread/otbr :latest	f307f59f6432	libxml2@2.9.4+dfsg1-6.1ubuntu1.9	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	libxml2@2.9.1+dfsg1-3ubuntu4.12	2.9.1+dfsg1-3ubuntu4.13+esm7	1
owncloud/server :10.15.0	51d9b74fc2a8	libxml2@2.9.10+dfsg-5ubuntu0.20.04.7	2.9.10+dfsg-5ubuntu0.20.04.9	1
penpotapp/backend :2.2.1	47853d9bb9dd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
penpotapp/exporter :2.2.1	5c835ffd87ab	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.6	1
photoprism/photoprism :220629-jammy	2954334adbda	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.6	1
photoprism/photoprism :240711-ce	fc6fd632ca74	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2	1
pk910/powfaucet :v2-stable	3dcae6a62896	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	libxml2@2.9.3+dfsg1-1ubuntu0.7	2.9.3+dfsg1-1ubuntu0.7+esm7	1
praravind1801/helmimages :3.0.0	f29d637b9ce1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
project2team4/react :latest	3ff031a08887	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7	1
razorbladex401/dayz :latest	6a4d79248e7d	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
reaper99/recipya :v1.2.2	7f7ec3aeb88c	libxml2@2.13.4-r3	2.13.4-r4	1
resouer/redis-slave :v2	e2f198b49ba7	libxml2@2.9.1+dfsg1-3ubuntu4.4	2.9.1+dfsg1-3ubuntu4.13+esm7	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	libxml2@2.13.4-r3	2.13.4-r4	1
saidsef/scapy-containerised :v2025.02	f17f7c435891	libxml2@2.13.4-r3	2.13.4-r4	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
scrapinghub/splash :3.4.1	a5f89bc84606	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9	1
seafileltd/seafile-mc :10.0.1	70628f29c663	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.9	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9	1
shamimkuet/nginx :1.0.2	b82902a76a04	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
sismics/docs :v1.10	f4b0ef019cf1	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
snipe/snipe-it :v6.0.14	55fb7636a98c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.9	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	libxml2@2.9.4+dfsg1-6.1ubuntu1.9	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1