CVE-2026-0989

Low

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 651; of 17,787 indexed, latest versions
Container images: 634; deployed by those charts
Fix available: 2 of 2; affected packages

libxml2-16-2.14.5-2.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 634 images.

Affected package	Affected versions	Fixed in	Images
libxml2rpm	2.9.7-lp151.5.3.1	2.14.5-2.1	2
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+47 more	2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4+5 more	632

OSV records: DEBIAN-CVE-2026-0989 UBUNTU-CVE-2026-0989 openSUSE-SU-2026:10085-1
Also known as: USN-7974-1

Charts affected

651 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-0989.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,685

Container images carrying it

634 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	11
oomk8s/readiness-check :2.0.2	875814cc853d	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12	11
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	7
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	6
oomk8s/readiness-check :2.0.0	7daa08b81954	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm12	6
quay.io/devtron/postgres :14.9	1b594392f7cb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	6
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	5
library/postgres :12	2f2a8c2a7d10	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	5
artifacthub/postgres :latest	4fd34fa635cc	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	4
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/postgresql :16	233f361c5819	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	libxml2@2.9.3+dfsg1-1ubuntu0.5	2.9.3+dfsg1-1ubuntu0.7+esm12	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12	4
library/nginx :1.27.1	287ff321f9e3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
library/postgres :13	4689940c6838	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	4
opea/llm-tgi :1.0	0c25aab3f106	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/kubectl :latest	cd354d5b2556	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
ciscolabs/rtsp-client :latest	a7b60ec88285	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	3
ciscolabs/rtsp-server :latest	b59fc10bb821	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	3
gchq/hdfs :3.3.3	5ec58edbb2db	libxml2@2.9.14+dfsg-1.3ubuntu3.1	2.9.14+dfsg-1.3ubuntu3.7	3
guacamole/guacamole :1.6.0	f344085e618b	libxml2@2.9.14+dfsg-1.3ubuntu3.3	2.9.14+dfsg-1.3ubuntu3.7	3
library/nginx :1.25 :1.25.5	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u6	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	libxml2@2.9.13+dfsg-1ubuntu0.2	2.9.13+dfsg-1ubuntu0.11	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	3
apache/nifi-registry :1.26.0	7cdfd8deec92	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.11	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.7	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	2
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
fireflyiii/data-importer :version-2.2.3	ab52bf932546	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u6	2
gradiant/ueransim :3.2.6	015b30d5fa0f	libxml2@2.9.13+dfsg-1ubuntu0.4	2.9.13+dfsg-1ubuntu0.11	2
hookiesolutions/webhookie :latest	0629694246ba	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.10+esm4	2
kurento/kurento-media-server :latest	03c0d34d0828	libxml2@2.9.14+dfsg-1.3ubuntu3.6	2.9.14+dfsg-1.3ubuntu3.7	2
library/nginx :latest	6e23479198b9	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/nginx :1.27.0	98f8ec75657d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/nginx :1.29.4	9dd288848f44	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/phpmyadmin :5.2.1	6e75aa8f767c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :16.1	09f23e02d766	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :18.1	1090bc3a8ccf	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/postgres :16.2	4aea012537ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :18.0	6f3e42ad37de	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2