CVE-2025-7425
HighAdvisory
Published 10 Jul 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 738
- of 17,787 indexed, latest versions
- Container images
- 812
- deployed by those charts
- Fix available
- 2 of 4
- affected packages
Red Hat Security Advisory: libxml2 security update
Carried by container images the latest versions of 738 of 17,787 indexed charts deploy, on 812 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libxml2deb | 2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+40 more | 2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.3+dfsg1-1ubuntu0.7+esm11, 2.9.4+dfsg1-6.1ubuntu1.9+esm6, 2.9.10+dfsg-5ubuntu0.20.04.10+esm3+4 more | 496 |
| libxml2rpm | 2.9.1-6.el7_2.3, 2.9.1-6.el7_9.6, 2.9.1-6.el7.4, 2.9.1-6.el7.5+28 more | 0:2.9.1-6.el7_9.12, 0:2.9.7-21.el8_10.2, 0:2.9.13-11.el9_6, 2.13.8-3.1 | 293 |
| libxsltdeb | 1.1.39-0exp1build1, 1.1.39-0exp1ubuntu0.24.04.2, 1.1.39-0exp1ubuntu0.24.04.3, 1.1.45-0.1 | no fix listed | 25 |
| libxsltapk | 1.1.45-r3, 1.1.45-r4 | no fix listed | 4 |
- OSV records
- CGA-393j-mrfx-mmvpRHSA-2025:12447RHSA-2025:12450RHSA-2025:13464RLSA-2025:12447UBUNTU-CVE-2025-7425DSA-5990-1openSUSE-SU-2025:15363-1
- Also known as
- CGA-j6x2-xhvh-29pw, RHSA-2025:13308, RHSA-2025:13310, RHSA-2025:13311, RHSA-2025:13312, RHSA-2025:13313, RHSA-2025:13314, USN-7852-1, USN-7852-2, USN-7896-1
Charts affected
738 by stars
Container images carrying it
812 by charts deploying them
A fixed version is listed for 2 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | ce6938ff6709 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | e6d7afb1a4bf | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | fce990dece01 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 3590af73f65a | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | e048bc7a17c2 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 674f45865af1 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | c3bc5e7a70e6 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 8e9c39c34e89 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | f94282a9cfec | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 9912fdf6c183 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 24352dca6672 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 35d87a381432 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 1f5e3161cb84 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 8a1361fa38c1 | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | a4d2667f2b6e | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 2d867eefb233 | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 7a4b9fedc724 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | cc79b9e2a1c8 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 3029dc0f1d38 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 8830f76112b6 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | b8f2a453a17a | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 09d52508fee9 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 15fa0ed662b1 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 36ce77526145 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | b1710745fa64 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | ec6ab507c5da | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | eebb65b8a12c | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 150f76e844d9 | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | b596a4687bb0 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | d50c80a85b35 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | f9c71dc2bc5f | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | d6fc43ac802e | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 1a6eff92827a | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | e383ba3e0966 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | c2851757eca4 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 4560083eb77d | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 50ee58bc9770 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 546a8b52d7b0 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | c3d20bc2ea08 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | d853057f2800 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | edb322094359 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 107a7c73af59 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 6722d5041b47 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 0bbe8b451fa3 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | c241c971aef8 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | c6a934439421 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm11 | 1 |
| quay.io/ | 89ee6493af89 | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |
| quay.io/ | 59fe607dfdf2 | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 7b4202c25b67 | libxml2 | 0:2.9.13-11.el9_6 | 1 |
| quay.io/ | 0290e7b2800a | libxml2 | 0:2.9.7-21.el8_10.2 | 1 |