StackRadar

CVE-2025-49795

High

Advisory

Published 16 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
65
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
libxml2apk2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r02.13.9-r064
OSV records
ALPINE-CVE-2025-49795

Charts affected

65 by stars
ChartLatestAffected imagesRadar Score
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

16,251
amd-gpuamd-gpu-helmOfficialVerified publisher0.22.01 of 1See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
rocm/k8s-device-plugin:1.31.0.926212c665aab
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

1,023
camunda-bpm-platformcamunda-community-hub7.6.111 of 1See more

camunda-bpm-platform camunda-community-hub 7.6.11

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
camunda/camunda-bpm-platform:latestbcc5bb0542df
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

1,154
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

4,531
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

2,811
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

586
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

1,133
certscertsVerified publisher2.1.31 of 1See more

certs certs 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
mathnao/certs:2.1.3b900e6b64684
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

695
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

2,286
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

5,852
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

14,917
eoapieoapiOfficialVerified publisher0.16.21 of 7See more

eoapi eoapi 0.16.2

1 of the 7 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

6,250
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

840
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

1,838
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

4,095
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

5,654
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

2,278
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

6,639
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

5,213
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

10,323
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

4,880
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

840
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

15,027
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

840
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

1,291
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

11,335
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

2,097
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

3,470
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

21,641
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

1,440
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

7,691
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

1,395
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

8,923
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

4,637
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

8,188
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

4,647
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
libxml2@2.13.4-r6
2.13.9-r0

Open the chart page →

3,407
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

1,476
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

2,733
postgresqlkagiso-me0.4.01 of 1See more

postgresql kagiso-me 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
library/postgres:17.4-alpine7062a2109c4b
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

1,488
ingress-nginxkubeblocksVerified publisher4.12.11 of 2See more

ingress-nginx kubeblocks 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

1,476
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

4,439
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
mavrick1/kubestellar-f:latest56bd8eaa53a4
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

4,763
excalidrawkubitodevVerified publisher1.0.31 of 1See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

840
excalidrawlinkding0.2.31 of 1See more

excalidraw linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

840
docker-mailservermailserverVerified publisher0.2.652 of 9See more

docker-mailserver mailserver 0.2.65

2 of the 9 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
libxml2@2.13.4-r6
2.13.9-r0
jeboehm/mailserver-web:5.0.929da13edf5aa8
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

10,897
zkapps-dashboardminaVerified publisher0.1.21 of 2See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
library/postgres:12-alpine7c8f48705831
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

1,524
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
beyzkaya/blog-frontend:v1.0.0bf412d75c510
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

13,010
lensoci-ai-incubations0.1.142 of 16See more

lens oci-ai-incubations 0.1.14

2 of the 16 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
libxml2@2.13.8-r0
2.13.9-r0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

17,070
operatonoperatonVerified publisher1.0.51 of 1See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
operaton/operaton:1.0.0-beta-4b35867ffe4d8
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

2,003

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libxml2@2.13.4-r3
2.13.9-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libxml2@2.13.8-r0
2.13.9-r0
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
libxml2@2.13.4-r6
2.13.9-r0
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
libxml2@2.13.4-r6
2.13.9-r0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libxml2@2.13.8-r0
2.13.9-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
libxml2@2.13.8-r0
2.13.9-r0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
libxml2@2.13.4-r3
2.13.9-r0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxml2@2.13.8-r0
2.13.9-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
libxml2@2.13.8-r0
2.13.9-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
libxml2@2.13.8-r0
2.13.9-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
libxml2@2.13.4-r3
2.13.9-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.