CVE-2026-0989

Low

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 651; of 17,787 indexed, latest versions
Container images: 634; deployed by those charts
Fix available: 2 of 2; affected packages

libxml2-16-2.14.5-2.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 634 images.

Affected package	Affected versions	Fixed in	Images
libxml2rpm	2.9.7-lp151.5.3.1	2.14.5-2.1	2
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+47 more	2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4+5 more	632

OSV records: DEBIAN-CVE-2026-0989 UBUNTU-CVE-2026-0989 openSUSE-SU-2026:10085-1
Also known as: USN-7974-1

Charts affected

651 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-0989.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,685

Container images carrying it

634 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/postgres :16.4	e62fbf9d3e2b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/python :3.7	eedf63967cdb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12	2
louislam/uptime-kuma :2.5.4	917318f9d7be	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	libxml2@2.9.4+dfsg1-6.1ubuntu1	2.9.4+dfsg1-6.1ubuntu1.9+esm7	2
obolnetwork/charon :v1.10.0	278c7e2897b6	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12	2
opea/embedding-tei :1.0	5c9639de61c1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opea/reranking-tei :1.0	e48613afb191	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opea/retriever-redis :1.0	eb746b263705	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opendatacube/ows :latest	668cbb41473c	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.7	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.11	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.11	2
vdiogov/glpi-conteiner :latest	6945f84f0058	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
wurstmeister/zookeeper :latest	7a7fd44a7210	libxml2@2.9.1+dfsg1-3ubuntu4.3	2.9.1+dfsg1-3ubuntu4.13+esm11	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	libxml2@2.9.14+dfsg-1.3ubuntu3.3	2.9.14+dfsg-1.3ubuntu3.7	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.11	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
1dev/server :11.9.0	cd5b12fe5471	libxml2@2.9.14+dfsg-1.3ubuntu3.3	2.9.14+dfsg-1.3ubuntu3.7	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	libxml2@2.9.10+dfsg-5ubuntu0.20.04.6	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm7	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
akaunting/akaunting :3.0.15	52811b36ec3a	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u6	1
allegroai/clearml :2.0.0-613	713ae38f7daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1