CVE-2025-6170

Low

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.5; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 827; of 17,787 indexed, latest versions
Container images: 898; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 827 of 17,787 indexed charts deploy, on 898 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+35 more	2.9.1+dfsg1-3ubuntu4.13+esm8, 2.9.3+dfsg1-1ubuntu0.7+esm9, 2.9.4+dfsg1-6.1ubuntu1.9+esm4, 2.9.10+dfsg-5ubuntu0.20.04.10+esm1+3 more	486
libxml2rpm	2.9.7-5.el8, 2.9.7-7.el8, 2.9.7-8.el8, 2.9.7-9.el8+32 more	0:2.9.7-21.el8_10.6, 0:2.9.13-14.el9_8.2, 0:2.12.5-10.el10_2.2	346
libxml2apk	2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r0	2.13.9-r0	66

OSV records: ALPINE-CVE-2025-6170 DEBIAN-CVE-2025-6170 RHSA-2026:36734 RHSA-2026:39304 RHSA-2026:39317 RLSA-2026:36734 RLSA-2026:39317 UBUNTU-CVE-2025-6170
Also known as: USN-7694-1

Charts affected

827 by stars

Chart

Latest

Affected images

Radar Score

commonground-gatewayopencatalogi

1.5.3

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

9,736

opentickopenchart

0.1.0

1 of 1 See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
library/nginx :1.25.5	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

5,688

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	libxml2@2.9.7-9.el8	0:2.9.7-21.el8_10.6

Open the chart page →

18,023

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm4
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

63,277

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9
omecproject/onos-progran :1.0.0	5715e5648aa0	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

88,616

comac-cuopencord

0.1.1

1 of 4 See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	libxml2@2.9.4+dfsg1-6.1ubuntu1	2.9.4+dfsg1-6.1ubuntu1.9+esm4

Open the chart page →

8,053

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

26,234

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

42,662

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

29,158

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm9
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	libxml2@2.9.4+dfsg1-6.1ubuntu1	2.9.4+dfsg1-6.1ubuntu1.9+esm4

Open the chart page →

15,660

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm4
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm4

Open the chart page →

14,550

omec-control-planeopencord

0.1.31

3 of 8 See more

omec-control-plane opencord 0.1.31

3 of the 8 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
omecproject/c3po-hssdb :master-latest	28a90cc26716	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm4
omecproject/openmme :master-latest	64776cb9edb3	libxml2@2.9.3+dfsg1-1ubuntu0.7	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

40,795

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9

Open the chart page →

38,889

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

11,003

sentinelopennms-helm-charts

0.4.0

1 of 2 See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
opennms/sentinel :36.0.2	88869082a14f	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.2

Open the chart page →

2,043

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.6
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.6

Open the chart page →

7,457

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

11,795

alquimia-studioopenshift

0.2.0

1 of 1 See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
alquimiaai/studio :certification	38a1f0341982	libxml2@2.9.13-14.el9_7	0:2.9.13-14.el9_8.2

Open the chart page →

2,386

bpjstk-serviceopenshift

1.0.0

3 of 6 See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
andrianrf/backoffice :latest	047a7837651e	libxml2@2.9.7-18.el8_10.1	0:2.9.7-21.el8_10.6
andrianrf/backoffice-be :latest	6036614803d4	libxml2@2.9.13-3.el9_1	0:2.9.13-14.el9_8.2
andrianrf/iso-server :latest	7da47f525c7d	libxml2@2.9.13-3.el9_1	0:2.9.13-14.el9_8.2

Open the chart page →

34,721

canvas-oamportalopenshift

4.0.0

1 of 1 See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/oam :4.0.0	ed8fd2062548	libxml2@2.9.7-18.el8_10.1	0:2.9.7-21.el8_10.6

Open the chart page →

7,519

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2

Open the chart page →

18,991

exporteropenshift

1.0.47

3 of 3 See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	libxml2@2.9.7-18.el8_10.1	0:2.9.7-21.el8_10.6
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2

Open the chart page →

13,034

flomesh-consoleopenshift

0.70.0-30-ubi8

2 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6

Open the chart page →

9,968

fsmopenshift

0.1.8-ubi.6

6 of 6 See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

16,554

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	libxml2@2.9.13-14.el9_7	0:2.9.13-14.el9_8.2

Open the chart page →

4,145

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	libxml2@2.9.7-21.el8_10.4	0:2.9.7-21.el8_10.6

Open the chart page →

5,863

orion-ldopenshift

1.0.3

2 of 2 See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.6
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	libxml2@2.9.7-9.el8	0:2.9.7-21.el8_10.6

Open the chart page →

14,727

osm-edgeopenshift

1.2.1-ubi8

7 of 7 See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.6

Open the chart page →

19,449

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	libxml2@2.9.13-3.el9_2.1	0:2.9.13-14.el9_8.2

Open the chart page →

8,634

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

13,608

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

11,740

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

13,570

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

13,553

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

13,457

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.6

Open the chart page →

13,101

openshift-integration-operatoropenshift-integration-operator

0.8.2

1 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	libxml2@2.9.13-6.el9_5.2	0:2.9.13-14.el9_8.2

Open the chart page →

2,063

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm4

Open the chart page →

36,230

operatonoperaton

1.0.5

1 of 1 See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	libxml2@2.13.4-r5	2.13.9-r0

Open the chart page →

2,003

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.6

Open the chart page →

5,609

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	libxml2@2.9.1+dfsg1-3ubuntu4.12	2.9.1+dfsg1-3ubuntu4.13+esm8

Open the chart page →

26,367

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

4,539

osdfir-infrastructureosdfir-infrastructure

2.15.0

2 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
library/postgres :17.5-alpine	6567bca8d7bc	libxml2@2.13.8-r0	2.13.9-r0
library/postgres :17.2-alpine	7e5df973a748	libxml2@2.13.4-r3	2.13.9-r0

Open the chart page →

72,154

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

11,095

ungatep2p-avs

0.1.0

2 of 3 See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

25,681

p4p4

0.1.0

2 of 7 See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
mastercloudapps/server :v2.23	f3d24dfe2686	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.6
mastercloudapps/weatherservice :v1.23	de859d29c116	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.6

Open the chart page →

27,667

parcial-1parcial-1-chart

1.0.0

2 of 5 See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
esteban1930/frontend-1 :1.8.0	f9078279632c	libxml2@2.13.8-r0	2.13.9-r0
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	libxml2@2.13.8-r0	2.13.9-r0

Open the chart page →

3,852

cloudflaredpascaliske

3.0.0

1 of 1 See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	libxml2@2.13.8-r0	2.13.9-r0

Open the chart page →

2,029

pmm-ha-dependenciespercona

1.0.0

1 of 4 See more

pmm-ha-dependencies percona 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_8.2

Open the chart page →

2,449

ps-operatorpercona

1.2.0

1 of 1 See more

ps-operator percona 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	libxml2@2.9.13-14.el9_8.1	0:2.9.13-14.el9_8.2

Open the chart page →

267

matomopetbattle

11.0.1

2 of 2 See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2025-6170.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3

Open the chart page →

10,801

Container images carrying it

898 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
tensorflow/tensorflow :1.6.0-devel	1e3172090703	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9	1
theradius/loggia :0.4	63ba348546ec	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
thongngo3301/stakefish :latest	a341af5976e3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.8	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	libxml2@2.9.13+dfsg-1ubuntu0.2	2.9.13+dfsg-1ubuntu0.8	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.8	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm9	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
trinodb/trino :450	38c6f24ab1a4	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8	1
ubuntu/bind9 :9.16-20.04_beta	5ee73f44e5d0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
vcnngr/pnfrontend :latest	4e4979ab8c41	libxml2@2.13.8-r0	2.13.9-r0	1
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.6	1
vividplanet/swr-cache-proxy :v1	ae1c5b1cbecb	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.6	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
vlebediantsev/notes-project-front :latest	945675fd2636	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
wavefronthq/proxy :9.2	d1064d28f6eb	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm4	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.8	1
xeladock/mysql_dns :latest	4baf531453f1	libxml2@2.9.13+dfsg-1build1	2.9.13+dfsg-1ubuntu0.8	1
xeladock/nginx2 :latest	c259a67b1dff	libxml2@2.9.13+dfsg-1build1	2.9.13+dfsg-1ubuntu0.8	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.4	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.8	1
zbalogh/reservation-angular-ui :1.0.9	5eb19e460b3c	libxml2@2.13.8-r0	2.13.9-r0	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_8.2	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	libxml2@2.9.13-6.el9_5.2	0:2.9.13-14.el9_8.2	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	libxml2@2.9.13-6.el9_5.1	0:2.9.13-14.el9_8.2	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	libxml2@2.9.13-6.el9_5.2	0:2.9.13-14.el9_8.2	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	libxml2@2.9.13-6.el9_4	0:2.9.13-14.el9_8.2	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	libxml2@2.9.3+dfsg1-1ubuntu0.7	2.9.3+dfsg1-1ubuntu0.7+esm9	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	libxml2@2.9.10+dfsg-5ubuntu0.20.04.7	2.9.10+dfsg-5ubuntu0.20.04.10+esm1	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	libxml2@2.9.13-9.el9_6	0:2.9.13-14.el9_8.2	1
ghcr.io/angelnu/pod-gateway :v1.13.0	a5b032e15f75	libxml2@2.13.4-r5	2.13.9-r0	1
ghcr.io/appscode/inbox-ui :0.0.5	ae3b0e29daaa	libxml2@2.13.4-r5	2.13.9-r0	1
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.6	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.8	1