CVE-2025-32415

High

Advisory

Published 17 Apr 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 625; of 17,787 indexed, latest versions
Container images: 686; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 625 of 17,787 indexed charts deploy, on 686 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+31 more	2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.3+dfsg1-1ubuntu0.7+esm8, 2.9.4+dfsg1-6.1ubuntu1.9+esm3, 2.9.10+dfsg-5ubuntu0.20.04.10+3 more	449
libxml2rpm	2.9.1-6.el7_2.3, 2.9.1-6.el7_9.6, 2.9.1-6.el7.4, 2.9.1-6.el7.5+19 more	0:2.9.1-6.el7_9.13, 0:2.9.7-21.el8_10.3	237

OSV records: DEBIAN-CVE-2025-32415 RHSA-2025:13203 RHSA-2025:13789 RLSA-2025:13203 UBUNTU-CVE-2025-32415
Also known as: RHSA-2025:13688, RHSA-2025:13689, RHSA-2025:13788, RHSA-2025:13806, USN-7467-1, USN-7467-2, USN-7896-1

Charts affected

625 by stars

Chart

Latest

Affected images

Radar Score

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

17,323

zookeepertwomartens

0.2.2

1 of 1 See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
confluentinc/cp-zookeeper :latest	7610a50b13e7	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.3

Open the chart page →

1,733

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

8,607

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.3

Open the chart page →

4,960

opencloudunxwares

0.2.3

7 of 13 See more

opencloud unxwares 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.3
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

45,239

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm8

Open the chart page →

15,330

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

14,358

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.7

Open the chart page →

9,347

maybe-financevicsufer

0.2.7

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

10,795

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.7

Open the chart page →

13,459

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.10

Open the chart page →

11,405

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.10

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.10

Open the chart page →

9,130

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

10,001

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.3

Open the chart page →

28,605

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	libxml2@2.9.7-8.el8	0:2.9.7-21.el8_10.3

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.3

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	libxml2@2.9.7-21.el8_10.2	0:2.9.7-21.el8_10.3

Open the chart page →

14,983

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.7

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

2 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.3

Open the chart page →

11,577

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Open the chart page →

7,673

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.3

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-32415.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.3

Open the chart page →

3,697

Container images carrying it

686 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
altinity/metrics-exporter :0.16.1	85b4fdbae053	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.13	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	libxml2@2.9.7-9.el8	0:2.9.7-21.el8_10.3	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	libxml2@2.9.7-5.el8	0:2.9.7-21.el8_10.3	1
andrianrf/backoffice :latest	047a7837651e	libxml2@2.9.7-18.el8_10.1	0:2.9.7-21.el8_10.3	1
anguda/ant-media :2.5	c435285fc241	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.10	1
ankane/pgvector :v0.5.1	d3a9d8ac27bb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
apache/airflow :2.8.1	e5560ad0b86e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
apache/camel-k :1.10.4	3bb13d14f64a	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.3	1
apache/nifi-registry :1.27.0	63b8e3e40742	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.7	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.7	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10	1
apachepulsar/pulsar :3.0.7	9c9947de139d	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.7	1
apachepulsar/pulsar :2.9.0	d056c89b7131	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10	1
apachepulsar/pulsar :2.8.2	d538416d5afe	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.3	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.3	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.3	1
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.3	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.3	1
aristidetm/basic-notebook :3.6.5	469dbc951224	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
assistiot/identity-manager_db :latest	0d3e6d35f168	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.3	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.10	1
avinash263/pyredis263 :latest	aa2b8727f1a6	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u2	1
avzini/web-app :latest	f40b30210ed0	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
baserow/backend :1.31.1	e0b3c8130b91	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
baserow/baserow :1.30.1	df0c42eb67e8	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
beopenit/door-helm :v3.0.1	b4d9f9bee224	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.3	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/kubectl :1.30	1249fc292e84	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/kubectl :1.31	64614ef8290f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/nginx :1.27.1	934d1acd5ca8	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1
bitnamilegacy/pgbouncer :1.23.1	92356da09704	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2	1