StackRadar

CVE-2025-49795

High

Advisory

Published 16 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
65
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
libxml2apk2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r02.13.9-r064
OSV records
ALPINE-CVE-2025-49795

Charts affected

65 by stars
ChartLatestAffected imagesRadar Score
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
library/postgres:17.5-alpine6567bca8d7bc
libxml2@2.13.8-r0
2.13.9-r0
library/postgres:17.2-alpine7e5df973a748
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

71,208
parcial-1parcial-1-chart1.0.02 of 5See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
libxml2@2.13.8-r0
2.13.9-r0
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

3,844
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

2,028
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

3,332
radar-upload-connect-frontendradar-baseVerified publisher0.8.11 of 1See more

radar-upload-connect-frontend radar-base 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

936
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

1,529
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

5,338
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

2,066
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

1,291
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
libxml2@2.13.4-r3
2.13.9-r0

Open the chart page →

2,817
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

840
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

1,291
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
erenozcan17/react_frontend:v4.56e1b14973f9b
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

6,973
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
libxml2@2.13.8-r0
2.13.9-r0

Open the chart page →

4,768
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-49795.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
libxml2@2.13.4-r5
2.13.9-r0

Open the chart page →

2,076

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
excalidraw/excalidraw:latestf7ee194addd6
libxml2@2.13.4-r5
2.13.9-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxml2@2.13.4-r6
2.13.9-r0
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
libxml2@2.13.8-r0
2.13.9-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
libxml2@2.13.8-r0
2.13.9-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
libxml2@2.13.4-r5
2.13.9-r0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
libxml2@2.13.8-r0
2.13.9-r0
1
alpine/k8s:1.31.106dbe6f391eda
libxml2@2.13.8-r0
2.13.9-r0
1
alpine/k8s:1.31.137a319b15cfc9
libxml2@2.13.8-r0
2.13.9-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
libxml2@2.13.4-r5
2.13.9-r0
1
alpine/k8s:1.31.49c4976d47656
libxml2@2.13.4-r3
2.13.9-r0
1
alpine/k8s:1.32.3eec354133193
libxml2@2.13.4-r5
2.13.9-r0
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
libxml2@2.13.8-r0
2.13.9-r0
1
camunda/camunda-bpm-platform:latestbcc5bb0542df
libxml2@2.13.8-r0
2.13.9-r0
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
libxml2@2.13.4-r3
2.13.9-r0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
libxml2@2.13.8-r0
2.13.9-r0
1
erenozcan17/react_frontend:v4.56e1b14973f9b
libxml2@2.13.8-r0
2.13.9-r0
1
esteban1930/frontend-1:1.8.0f9078279632c
libxml2@2.13.8-r0
2.13.9-r0
1
extrim/perlite:1.5.99cb7eb5598b6
libxml2@2.13.4-r5
2.13.9-r0
1
grafana/oncall:v1.16.5499851658393
libxml2@2.13.4-r6
2.13.9-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
libxml2@2.13.4-r6
2.13.9-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
libxml2@2.13.8-r0
2.13.9-r0
1
jlesage/firefox:v25.03.1055c28defe31
libxml2@2.13.4-r5
2.13.9-r0
1
library/nginx:1.27-alpine65645c7bb6a0
libxml2@2.13.4-r5
2.13.9-r0
1
library/postgres:17.5-alpine6567bca8d7bc
libxml2@2.13.8-r0
2.13.9-r0
1
library/postgres:17.4-alpine7062a2109c4b
libxml2@2.13.4-r3
2.13.9-r0
1
library/postgres:12-alpine7c8f48705831
libxml2@2.13.4-r3
2.13.9-r0
1
library/postgres:17.2-alpine7e5df973a748
libxml2@2.13.4-r3
2.13.9-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
libxml2@2.13.4-r6
2.13.9-r0
1
mathnao/certs:2.1.3b900e6b64684
libxml2@2.13.4-r6
2.13.9-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
libxml2@2.13.4-r5
2.13.9-r0
1
nginxdemos/hello:plain-text751bf8933179
libxml2@2.13.8-r0
2.13.9-r0
1
nginxdemos/hello:0.4b28d1e16c676
libxml2@2.13.8-r0
2.13.9-r0
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
libxml2@2.13.4-r5
2.13.9-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
libxml2@2.13.8-r0
2.13.9-r0
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
libxml2@2.13.4-r5
2.13.9-r0
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
libxml2@2.13.4-r5
2.13.9-r0
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
libxml2@2.13.4-r6
2.13.9-r0
1
reaper99/recipya:v1.2.27f7ec3aeb88c
libxml2@2.13.4-r3
2.13.9-r0
1
rocm/k8s-device-plugin:1.31.0.926212c665aab
libxml2@2.13.4-r3
2.13.9-r0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
libxml2@2.13.4-r3
2.13.9-r0
1
seyiogunniran/my-nginx:1.03a0ed39e5830
libxml2@2.13.8-r0
2.13.9-r0
1
svcosti/cidrapp:latest8428d87bc5d0
libxml2@2.13.4-r5
2.13.9-r0
1
vcnngr/pnfrontend:latest4e4979ab8c41
libxml2@2.13.8-r0
2.13.9-r0
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
libxml2@2.13.8-r0
2.13.9-r0
1
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/colanode/web:latestbcad696f03ee
libxml2@2.13.4-r5
2.13.9-r0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
libxml2@2.13.8-r0
2.13.9-r0
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
libxml2@2.13.4-r3
2.13.9-r0
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
libxml2@2.13.4-r3
2.13.9-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.