CVE-2025-24928

High

Advisory

Published 18 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 445; of 17,781 indexed, latest versions
Container images: 455; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 445 of 17,781 indexed charts deploy, on 455 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+28 more	2.9.1+dfsg1-3ubuntu4.13+esm7, 2.9.3+dfsg1-1ubuntu0.7+esm7, 2.9.4+dfsg1-6.1ubuntu1.9+esm2, 2.9.10+dfsg-5ubuntu0.20.04.9+3 more	442
libxml2apk	2.13.4-r3	2.13.4-r4	13

OSV records: ALPINE-CVE-2025-24928 DEBIAN-CVE-2025-24928 UBUNTU-CVE-2025-24928
Also known as: USN-7302-1

Charts affected

445 by stars

Chart

Latest

Affected images

Radar Score

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,521

nominatimrobjuz

6.4.1

1 of 4 See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

8,690

browserless-chromesagikazarmark

0.0.5

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

24,488

repmanszpadel-charts

3.52.17

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/nginx :1.27.3	fb197595ebe7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

7,052

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

13,635

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	libxml2@2.9.4+dfsg1-6.1ubuntu1.6	2.9.4+dfsg1-6.1ubuntu1.9+esm2

Open the chart page →

12,046

anteonanteon

2.6.4

1 of 13 See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

22,202

dltbrokerassist-iot-distributed-broker

0.2.0

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

77,687

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

13,145

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,190

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,190

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

15,863

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm7

Open the chart page →

36,094

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

9,724

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

5,398

dbrepodbrepo

1.13.3

5 of 25 See more

dbrepo dbrepo 1.13.3

5 of the 25 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

52,635

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

18,376

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

11,458

zabbix-server-mysqlfermosit

3.0.2

2 of 4 See more

zabbix-server-mysql fermosit 3.0.2

2 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2

Open the chart page →

12,840

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

3 of 7 See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

15,653

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

11,558

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

13,025

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

15,856

tdarrgeek-cookbook

4.6.2

2 of 2 See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr :2.00.18	1256348872ce	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

31,000

gentrace-self-hostedgentrace-self-hosted

0.1.3

1 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :15.3	8775adb39f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

15,562

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

10,072

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
library/postgres :16.1	09f23e02d766	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,610

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
langgenius/dify-api :0.6.11	fca918260dd6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

20,403

kubefarmkvaps

0.13.4

1 of 6 See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

12,422

opennebulakvaps

2.1.1

5 of 9 See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

113,791

drillmagasin-drill

0.9.0

1 of 3 See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
merlos/zookeeper :3.9.3	a38fc7e09ed7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,734

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2

Open the chart page →

4,137

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
moreillon/food-manager :latest	e8fd856e593d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

13,738

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,039

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

14,838

librechatopenshift

1.9.0

1 of 3 See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

5,779

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

31,844

pzserverpzserver

0.1.17

1 of 2 See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
lis314/project-zomboid-docker :latest	aa2089c37920	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

3,201

napcatredish101

0.1.3

1 of 1 See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
mlikiowa/napcat-docker :latest	1336a777f9a4	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6

Open the chart page →

7,405

atuinrm3l

0.11.0

1 of 3 See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

6,521

dev-feedrm3l

3.1.2

1 of 3 See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

9,837

delugerubxkube

1.2.1

1 of 1 See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
linuxserver/deluge :18.04.1	0ac871624394	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm2

Open the chart page →

13,541

kyoorubxkube

0.1.10

2 of 9 See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

30,234

mssqlserver-2019simcube

1.2.3

1 of 1 See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

6,817

smarter-demosmarter

0.1.5

3 of 7 See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2025-24928.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9

Open the chart page →

45,832

Container images carrying it

455 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.6	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	libxml2@2.9.4+dfsg1-6.1ubuntu1.8	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	libxml2@2.13.4-r3	2.13.4-r4	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.2	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.7	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	libxml2@2.9.10+dfsg-5ubuntu0.20.04.7	2.9.10+dfsg-5ubuntu0.20.04.9	1
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.6	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	libxml2@2.9.4+dfsg1-6.1ubuntu1.9	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.9	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	libxml2@2.9.4+dfsg1-6.1ubuntu1.9	2.9.4+dfsg1-6.1ubuntu1.9+esm2	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.9	1