StackRadar

CVE-2025-7425

High

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
732
of 17,787 indexed, latest versions
Container images
807
deployed by those charts
Fix available
2 of 4
affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 732 of 17,787 indexed charts deploy, on 807 images.

Affected packageAffected versionsFixed inImages
libxml2deb2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+40 more2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.3+dfsg1-1ubuntu0.7+esm11, 2.9.4+dfsg1-6.1ubuntu1.9+esm6, 2.9.10+dfsg-5ubuntu0.20.04.10+esm3+4 more495
libxml2rpm2.9.1-6.el7_2.3, 2.9.1-6.el7_9.6, 2.9.1-6.el7.4, 2.9.1-6.el7.5+28 more0:2.9.1-6.el7_9.12, 0:2.9.7-21.el8_10.2, 0:2.9.13-11.el9_6, 2.13.8-3.1291
libxsltdeb1.1.39-0exp1build1, 1.1.39-0exp1ubuntu0.24.04.2, 1.1.39-0exp1ubuntu0.24.04.3, 1.1.45-0.1no fix listed24
libxsltapk1.1.45-r3no fix listed3
OSV records
CGA-393j-mrfx-mmvpRHSA-2025:12447RHSA-2025:12450RHSA-2025:13464RLSA-2025:12447UBUNTU-CVE-2025-7425DSA-5990-1openSUSE-SU-2025:15363-1
Also known as
CGA-j6x2-xhvh-29pw, RHSA-2025:13308, RHSA-2025:13310, RHSA-2025:13311, RHSA-2025:13312, RHSA-2025:13313, RHSA-2025:13314, USN-7852-1, USN-7852-2, USN-7896-1

Charts affected

732 by stars
ChartLatestAffected imagesRadar Score
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libxml2@2.9.13+dfsg-1ubuntu0.7
2.9.13+dfsg-1ubuntu0.10
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.10+esm3
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.10+esm3
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

42,126
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

25,669
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
libxml2@2.9.7-19.el8_10
0:2.9.7-21.el8_10.2

Open the chart page →

2,453
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
libxml2@2.9.13-6.el9_5.2
0:2.9.13-11.el9_6

Open the chart page →

2,902
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.2
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.2

Open the chart page →

12,521
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
libxml2@2.9.7-18.el8_9
0:2.9.7-21.el8_10.2

Open the chart page →

2,404
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
libxml2@2.9.7-18.el8_9
0:2.9.7-21.el8_10.2

Open the chart page →

2,569
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libxml2@2.12.7+dfsg+really2.9.14-2.1
2.12.7+dfsg+really2.9.14-2.1+deb13u1

Open the chart page →

7,489
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libxml2@2.9.14+dfsg-1.3~deb12u2
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

40,238
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libxml2@2.9.10+dfsg-5ubuntu0.20.04.5
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

23,353
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
libxml2@2.9.10+dfsg-5ubuntu0.20.04.9
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

3,530
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
libxml2@2.9.10+dfsg-5ubuntu0.20.04.6
2.9.10+dfsg-5ubuntu0.20.04.10+esm3
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
libxml2@2.9.10+dfsg-5ubuntu0.20.04.6
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

22,568
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
libxml2@2.9.7-16.el8_8.1
0:2.9.7-21.el8_10.2
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
libxml2@2.9.7-16.el8_8.1
0:2.9.7-21.el8_10.2

Open the chart page →

14,728
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxml2@2.9.3+dfsg1-1ubuntu0.5
2.9.3+dfsg1-1ubuntu0.7+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxml2@2.9.3+dfsg1-1ubuntu0.6
2.9.3+dfsg1-1ubuntu0.7+esm11

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxml2@2.9.3+dfsg1-1ubuntu0.5
2.9.3+dfsg1-1ubuntu0.7+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxml2@2.9.3+dfsg1-1ubuntu0.6
2.9.3+dfsg1-1ubuntu0.7+esm11

Open the chart page →

77,706
idmassist-iot-identity-manager0.1.02 of 2See more

idm assist-iot-identity-manager 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
assistiot/identity-manager_kc:latest0df4b4fa899a
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.2

Open the chart page →

13,352
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libxml2@2.9.10+dfsg-5ubuntu0.20.04.5
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libxml2@2.9.13+dfsg-1ubuntu0.3
2.9.13+dfsg-1ubuntu0.10
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

32,501
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

9,412
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
kuzwolka/aws9:news3e8880fbbb96
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
kuzwolka/aws9:blog4a7707410bf1
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
kuzwolka/aws9:shop84a9d9766345
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

6,297
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
libxml2@2.9.13+dfsg-1ubuntu0.4
2.9.13+dfsg-1ubuntu0.10

Open the chart page →

7,190
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
libxml2@2.9.4+dfsg1-6.1ubuntu1.3
2.9.4+dfsg1-6.1ubuntu1.9+esm6

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

10,145
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

15,253
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
sysnet4admin/colosseum-prm:log5802bfcd7fed
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

26,996
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

6,707
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxml2@2.9.14+dfsg-1.3ubuntu3.3
2.9.14+dfsg-1.3ubuntu3.6

Open the chart page →

14,352
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

88,335
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
libxml2@2.9.14+dfsg-1.3~deb12u2
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

3,311
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

10,776
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
camptocamp/mapserver:latestbf2e8e118c9b
libxslt@1.1.39-0exp1ubuntu0.24.04.3
no fix listed

Open the chart page →

1,431
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
libxml2@2.9.7-8.el8
0:2.9.7-21.el8_10.2

Open the chart page →

6,389
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
libxml2@2.9.7-18.el8_9
0:2.9.7-21.el8_10.2
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.2

Open the chart page →

7,776
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

15,371
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4

Open the chart page →

5,778
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
libxml2@2.9.4+dfsg1-6.1ubuntu1.9
2.9.4+dfsg1-6.1ubuntu1.9+esm6

Open the chart page →

12,779
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.10+esm3

Open the chart page →

12,483
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6

Open the chart page →

1,423
kube-acp-stackcloudentity2.28.03 of 7See more

kube-acp-stack cloudentity 2.28.0

3 of the 7 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
cockroachdb/cockroach:v22.2.91116820f4134
libxml2@2.9.7-15.el8_7.1
0:2.9.7-21.el8_10.2
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libxml2@2.9.13+dfsg-1ubuntu0.5
2.9.13+dfsg-1ubuntu0.10
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
libxml2@2.9.1-6.el7_9.6
0:2.9.1-6.el7_9.12

Open the chart page →

20,900
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
libxml2@2.9.3+dfsg1-1ubuntu0.5
2.9.3+dfsg1-1ubuntu0.7+esm11

Open the chart page →

36,094
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
libxml2@2.9.1+dfsg1-3ubuntu4.4
2.9.1+dfsg1-3ubuntu4.13+esm10

Open the chart page →

36,839
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libxml2@2.9.3+dfsg1-1ubuntu0.5
2.9.3+dfsg1-1ubuntu0.7+esm11

Open the chart page →

33,963
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libxml2@2.9.3+dfsg1-1ubuntu0.5
2.9.3+dfsg1-1ubuntu0.7+esm11

Open the chart page →

77,758
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libxml2@2.9.7-16.el8
0:2.9.7-21.el8_10.2

Open the chart page →

25,151
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-7425.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libxml2@2.9.7-7.el8
0:2.9.7-21.el8_10.2

Open the chart page →

25,456

Container images carrying it

807 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
libxml2@2.9.7-18.el8_10.1
0:2.9.7-21.el8_10.2
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.10+esm3
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u4
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libxml2@2.9.13-6.el9_4
0:2.9.13-11.el9_6
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
libxml2@2.9.7-18.el8_9
0:2.9.7-21.el8_10.2
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
libxml2@2.9.7-16.el8_8.1
0:2.9.7-21.el8_10.2
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
libxml2@2.9.7-9.el8
0:2.9.7-21.el8_10.2
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libxml2@2.9.7-16.el8
0:2.9.7-21.el8_10.2
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.2
1
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
libxml2@2.9.7-18.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.2
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
libxml2@2.9.13-6.el9_5.2
0:2.9.13-11.el9_6
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
libxml2@2.9.7-13.el8
0:2.9.7-21.el8_10.2
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.2
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
libxml2@2.9.7-18.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
libxml2@2.9.7-18.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
libxml2@2.9.7-13.el8
0:2.9.7-21.el8_10.2
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
libxml2@2.9.7-21.el8_10.1
0:2.9.7-21.el8_10.2
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
libxml2@2.9.7-13.el8
0:2.9.7-21.el8_10.2
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.