CVE-2026-0989

Low

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 651; of 17,787 indexed, latest versions
Container images: 634; deployed by those charts
Fix available: 2 of 2; affected packages

libxml2-16-2.14.5-2.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 634 images.

Affected package	Affected versions	Fixed in	Images
libxml2rpm	2.9.7-lp151.5.3.1	2.14.5-2.1	2
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+47 more	2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4+5 more	632

OSV records: DEBIAN-CVE-2026-0989 UBUNTU-CVE-2026-0989 openSUSE-SU-2026:10085-1
Also known as: USN-7974-1

Charts affected

651 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-0989.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,685

Container images carrying it

634 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
jordan/icinga2 :latest	f75025fe8ea8	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
josh5/unmanic :0.2.6	4d49c4816260	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.11	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
kennethreitz/httpbin :latest	599fe5e50731	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.9+esm7	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	libxml2@2.9.10+dfsg-5ubuntu0.20.04.5	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	1
kinseii/wazuh-agent :4.14.1	7160eb143728	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	1
knspar/phronetis-operator :0.1.6	0c4f0543ee58	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm7	1
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	libxml2@2.9.14+dfsg-1.3ubuntu3.3	2.9.14+dfsg-1.3ubuntu3.7	1
kuzwolka/aws9 :main	1ad759b961b1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
kuzwolka/aws9 :news	3e8880fbbb96	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
kuzwolka/aws9 :blog	4a7707410bf1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
kuzwolka/aws9 :shop	84a9d9766345	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
laly9999/node-app :1	dd0e503913e1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
langflowai/langflow-frontend :latest	54f67f1961fe	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
langgenius/dify-api :0.6.11	fca918260dd6	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	libxml2@2.9.14+dfsg-1.3ubuntu3.6	2.9.14+dfsg-1.3ubuntu3.7	1
library/httpd :2.4.63	1ae8051591a5	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	1
library/matomo :5.1.2-apache	2415789e1602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/nextcloud :31.0.6-apache	588609d76b21	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	1
library/nextcloud :31.0.10-apache	b7faa1653c39	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/nginx :1.27.4	09369da6b103	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/nginx :1.29	1881968aff6f	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/nginx :1.27	6784fb0834aa	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/nginx :1.25.1	67f9a4f10d14	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/nginx :1.25.4	9ff236ed47fe	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/nginx :1.27.3	fb197595ebe7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/node :20	8f693eaa7e0a	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
library/postgres :18.0	073e7c8b84e2	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :17.4	304ab8135187	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/postgres :16.11	468e1f126ca5	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :16.6	557fea37a744	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/postgres :18.3	69e8582b781c	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :15.3	8775adb39f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/postgres :18.4	8ff36f3c6637	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :18.3	a9abf4275f9e	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :17.5	aadf2c0696f5	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :13.12	ced3ba927f4c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/postgres :14.22	eba8ddbdd837	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/postgres :17.5-bookworm	fbcea1bd13b6	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	1
library/python :3.8	d41127070014	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/python :3.9	da5aee29682d	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/redmine :6.1.2	04ac44a2595b	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/wordpress :6.4.3-apache	8ae66efb09a2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
library/wordpress :php8.1-apache	f73396626d2f	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libxml2@2.9.4+dfsg1-6.1ubuntu1.3	2.9.4+dfsg1-6.1ubuntu1.9+esm7	1
linuxserver/calibre-web :0.6.24	241009026e6f	libxml2@2.9.14+dfsg-1.3ubuntu3.4	2.9.14+dfsg-1.3ubuntu3.7	1