CVE-2025-9714

Medium

Advisory

Published 4 Sept 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 955; of 17,790 indexed, latest versions
Container images: 1,038; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 955 of 17,790 indexed charts deploy, on 1,038 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+49 more	2.9.1+dfsg1-3ubuntu4.13+esm9, 2.9.3+dfsg1-1ubuntu0.7+esm10, 2.9.4+dfsg1-6.1ubuntu1.9+esm5, 2.9.10+dfsg-5ubuntu0.20.04.10+esm2+5 more	714
libxml2rpm	2.9.1-6.el7_2.3, 2.9.1-6.el7_9.6, 2.9.1-6.el7.4, 2.9.1-6.el7.5+30 more	0:2.9.1-6.el7_9.14, 0:2.9.7-21.el8_10.4, 0:2.9.13-3.el9_2.10, 0:2.9.13-13.el9_4+1 more	324

OSV records: DEBIAN-CVE-2025-9714 RHSA-2025:22162 RHSA-2025:22163 RHSA-2025:22376 RHSA-2026:11349 RHSA-2026:22420 RLSA-2025:22376 RLSA-2026:11349 UBUNTU-CVE-2025-9714 DLA-4319-1
Also known as: RHSA-2025:22377, RHSA-2026:14832, RHSA-2026:14858, RHSA-2026:15967, USN-7743-1

Charts affected

955 by stars

Chart

Latest

Affected images

Radar Score

workshop-pipelinesworkshop-pipelines

0.1.6

2 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-9714.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u5
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.4

Open the chart page →

11,592

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-9714.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u5

Open the chart page →

7,685

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-9714.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.4

Open the chart page →

6,016

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-9714.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u9

Open the chart page →

1,838

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-9714.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.4

Open the chart page →

3,697

Container images carrying it

1,038 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
pecan/web :1.7.2	814d678c5550	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u9	1
penpotapp/backend :2.2.1	47853d9bb9dd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.9	1
penpotapp/exporter :2.2.1	5c835ffd87ab	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.9	1
penpotapp/frontend :2.2.1	8974882a0542	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_7	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	libxml2@2.9.13-9.el9_6	0:2.9.13-14.el9_7	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.4	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	libxml2@2.9.13-5.el9_3	0:2.9.13-14.el9_7	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u5	1
phntom/binaryvision-tlo-static :0.0.4	e8b9ac93a3dd	libxml2@2.9.10+dfsg-6.7+deb11u1	2.9.10+dfsg-6.7+deb11u9	1
phntom/email-manager :0.1.22	d8e2a9f2f085	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u9	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u9	1
phntom/mattermost-defaultbackend :6.4.0	c318dc90a4bf	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u9	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.9	1
photoprism/photoprism :220629-jammy	2954334adbda	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.9	1
photoprism/photoprism :240711-ce	fc6fd632ca74	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.5	1
phpmyadmin/phpmyadmin :5.1	38437e021deb	libxml2@2.9.10+dfsg-6.7+deb11u1	2.9.10+dfsg-6.7+deb11u9	1
phpmyadmin/phpmyadmin :5.2.3	42a200db07b4	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u2	1
pihole/pihole :2023.05.0	b83258064f54	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9	1
pk910/powfaucet :v2-stable	3dcae6a62896	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u5	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm2	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	libxml2@2.9.3+dfsg1-1ubuntu0.7	2.9.3+dfsg1-1ubuntu0.7+esm10	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	libxml2@2.9.7-5.el8	0:2.9.7-21.el8_10.4	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.4	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.4	1
praravind1801/helmimages :3.0.0	f29d637b9ce1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u5	1
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u2	1
project2team4/react :latest	3ff031a08887	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.10+esm2	1
ptthanh1511/daloradius :1.2-dev	afecc5143fcb	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.14	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.14	1
rancher/hardened-cni-plugins :v0.9.1-build20210414	be3c1d469bf7	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.14	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.14	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.14	1
rancher/hardened-kube-proxy :v1.20.2	d0600143c23c	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.14	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.14	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm10	1
razorbladex401/dayz :latest	6a4d79248e7d	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.9	1
razzy10/product-service :latest	702e411956db	libxml2@2.9.13-10.el9_6	0:2.9.13-14.el9_7	1
redash/redash :25.8.0	00d813437db5	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u5	1
redislabs/redisinsight :1.14.0	b03ab1426d0d	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9	1
reportportal/service-auto-analyzer :5.7.2	95ada4a216ce	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u9	1
reportportal/service-metrics-gatherer :1.1.20	2a0e6dc11161	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u9	1
resouer/redis-slave :v2	e2f198b49ba7	libxml2@2.9.1+dfsg1-3ubuntu4.4	2.9.1+dfsg1-3ubuntu4.13+esm9	1
resurfaceio/resurface :3.7.84	d5cda2f64109	libxml2@2.9.13+dfsg-1ubuntu0.6	2.9.13+dfsg-1ubuntu0.9	1
rm3l/dev-feed-api :latest	9a7f732245a3	libxml2@2.9.13-3.el9_2.1	0:2.9.13-3.el9_2.10	1
rm3l/mac-oui :1.8.0	3a5e1f95c132	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.4	1
robmarkcole/deepstack-ui :latest	410275726459	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u9	1
robotshop/rs-payment :latest	774b52c6180d	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u9	1