CVE-2025-6021

High

Advisory

Published 12 Jun 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.014; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 556; of 17,787 indexed, latest versions
Container images: 549; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 549 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+35 more	2.9.1+dfsg1-3ubuntu4.13+esm8, 2.9.3+dfsg1-1ubuntu0.7+esm9, 2.9.4+dfsg1-6.1ubuntu1.9+esm4, 2.9.10+dfsg-5ubuntu0.20.04.10+esm1+3 more	485
libxml2apk	2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r0	2.13.9-r0	64

OSV records: ALPINE-CVE-2025-6021 DEBIAN-CVE-2025-6021 UBUNTU-CVE-2025-6021
Also known as: USN-7694-1

Charts affected

556 by stars

Chart

Latest

Affected images

Radar Score

giteawenerme

12.7.0

2 of 4 See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

8,811

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1

Open the chart page →

15,230

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

7,624

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

11,577

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

7,673

Container images carrying it

549 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	libxml2@2.13.8-r0	2.13.9-r0	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	libxml2@2.13.4-r3	2.13.9-r0	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.9+esm4	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/ellite/wallos :2.46.0	9ce55520e7bd	libxml2@2.13.4-r3	2.13.9-r0	1
ghcr.io/erlkoenig91/prompt-db-frontend :1.0.7	121dc29eb14d	libxml2@2.13.4-r5	2.13.9-r0	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	libxml2@2.13.4-r3	2.13.9-r0	1
ghcr.io/home-operations/beets :2.3.1	cc4975f1a0be	libxml2@2.13.8-r0	2.13.9-r0	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/huscker/townsquare-frontend :2.15.2	dc6384d10cc8	libxml2@2.13.4-r6	2.13.9-r0	1
ghcr.io/jaydee94/kubeseal-webgui/ui :4.5.3	4447636e8102	libxml2@2.13.4-r6	2.13.9-r0	1
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	1
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.10	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	libxml2@2.13.8-r0	2.13.9-r0	1
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	libxml2@2.13.8-r0	2.13.9-r0	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	libxml2@2.9.4+dfsg1-6.1ubuntu1.8	2.9.4+dfsg1-6.1ubuntu1.9+esm4	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1