CVE-2025-6021

High

Advisory

Published 12 Jun 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.014; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,781 indexed, latest versions
Container images: 549; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 555 of 17,781 indexed charts deploy, on 549 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+35 more	2.9.1+dfsg1-3ubuntu4.13+esm8, 2.9.3+dfsg1-1ubuntu0.7+esm9, 2.9.4+dfsg1-6.1ubuntu1.9+esm4, 2.9.10+dfsg-5ubuntu0.20.04.10+esm1+3 more	485
libxml2apk	2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r0	2.13.9-r0	64

OSV records: ALPINE-CVE-2025-6021 DEBIAN-CVE-2025-6021 UBUNTU-CVE-2025-6021
Also known as: USN-7694-1

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1

Open the chart page →

15,230

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

7,624

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

11,577

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-6021.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

7,673

Container images carrying it

549 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	11
oomk8s/readiness-check :2.0.2	875814cc853d	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9	11
oomk8s/readiness-check :2.0.0	7daa08b81954	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9	6
quay.io/devtron/postgres :14.9	1b594392f7cb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	6
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	5
library/postgres :12	2f2a8c2a7d10	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	5
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	4
bitnamilegacy/postgresql :16	233f361c5819	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	4
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9	4
library/nginx :1.27.1	287ff321f9e3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	4
opea/llm-tgi :1.0	0c25aab3f106	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	4
bitnamilegacy/kubectl :latest	cd354d5b2556	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	3
ciscolabs/rtsp-client :latest	a7b60ec88285	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	3
ciscolabs/rtsp-server :latest	b59fc10bb821	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	3
gchq/hdfs :3.3.3	5ec58edbb2db	libxml2@2.9.14+dfsg-1.3ubuntu3.1	2.9.14+dfsg-1.3ubuntu3.4	3
guacamole/guacamole :1.6.0	f344085e618b	libxml2@2.9.14+dfsg-1.3ubuntu3.3	2.9.14+dfsg-1.3ubuntu3.4	3
library/nginx :1.25 :1.25.5	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u3	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	libxml2@2.9.13+dfsg-1ubuntu0.2	2.9.13+dfsg-1ubuntu0.8	3
apache/nifi-registry :1.26.0	7cdfd8deec92	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3	2
excalidraw/excalidraw :latest	f7ee194addd6	libxml2@2.13.4-r5	2.13.9-r0	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u3	2
gradiant/ueransim :3.2.6	015b30d5fa0f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8	2
hookiesolutions/webhookie :latest	0629694246ba	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	2
library/nginx :1.27.0	98f8ec75657d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
library/phpmyadmin :5.2.1	6e75aa8f767c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
library/postgres :16.1	09f23e02d766	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
library/postgres :16.2	4aea012537ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
library/postgres :16.4	e62fbf9d3e2b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
library/python :3.7	eedf63967cdb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	libxml2@2.9.4+dfsg1-6.1ubuntu1	2.9.4+dfsg1-6.1ubuntu1.9+esm4	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	libxml2@2.13.4-r6	2.13.9-r0	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9	2
opea/embedding-tei :1.0	5c9639de61c1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2
opea/reranking-tei :1.0	e48613afb191	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	2