StackRadar

CVE-2026-11979

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,249
of 17,781 indexed, latest versions
Container images
1,097
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libxml2 security update

Carried by container images the latest versions of 1,249 of 17,781 indexed charts deploy, on 1,097 images.

Affected packageAffected versionsFixed inImages
libxml2deb2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+58 more2.12.7+dfsg+really2.9.14-2.1+deb13u2+e7854
libxml2rpm2.9.7-5.el8, 2.9.7-7.el8, 2.9.7-8.el8, 2.9.7-9.el8+25 more0:2.9.7-21.el8_10.7, 0:2.12.5-10.el10_2.3, 2.12.10-150700.4.14.1, 2.15.3-2.1243
OSV records
DEBIAN-CVE-2026-11979UBUNTU-CVE-2026-11979RHSA-2026:60394RHSA-2026:61248RLSA-2026:60394RLSA-2026:61248ECHO-eb03-65da-1e8copenSUSE-SU-2026:11258-1SUSE-SU-2026:3097-1

Charts affected

1,249 by stars
ChartLatestAffected imagesRadar Score
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed

Open the chart page →

9,460
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

3,641
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

1,626
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

2,027
hertzbeathertzbeatOfficialVerified publisher1.8.13 of 4See more

hertzbeat hertzbeat 1.8.1

3 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
libxml2@2.9.14+dfsg-1.3ubuntu3.7
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
libxml2@2.9.14+dfsg-1.3ubuntu3.7
no fix listed
library/postgres:159b1d34adbce1
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

14,000
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

10,428
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
libxml2@2.9.14+dfsg-1.3ubuntu3.7
no fix listed

Open the chart page →

1,685
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
libxml2@2.9.10+dfsg-5ubuntu0.20.04.10
no fix listed

Open the chart page →

6,307
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
libxml2@2.9.7-15.el8
0:2.9.7-21.el8_10.7

Open the chart page →

4,652
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7

Open the chart page →

4,957
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
libxml2@2.9.3+dfsg1-1ubuntu0.7
no fix listed

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

5,779
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed

Open the chart page →

3,997
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
libxml2@2.9.14+dfsg-1.3~deb12u2
no fix listed

Open the chart page →

7,949
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
libxml2@2.9.13+dfsg-1ubuntu0.3
no fix listed

Open the chart page →

8,722
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

9,746
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

5,557
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed

Open the chart page →

2,595
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
libxml2@2.15.2+dfsg-0.1ubuntu0.1
no fix listed

Open the chart page →

1,201
limesurveyarea-42Verified publisher0.3.932 of 2See more

limesurvey area-42 0.3.93

2 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.0.15e75e2f455c8d
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
libxml2@2.9.14+dfsg-1.3~deb12u2
no fix listed

Open the chart page →

4,668
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
libxml2@2.9.7-7.el8
0:2.9.7-21.el8_10.7

Open the chart page →

9,052
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
libxml2@2.9.14+dfsg-1.3~deb12u4
no fix listed

Open the chart page →

5,235
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1
no fix listed

Open the chart page →

5,606
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

17,404
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
libxml2@2.9.7-18.el8_10.1
0:2.9.7-21.el8_10.7

Open the chart page →

3,080
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

28,839
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

1,791
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed

Open the chart page →

9,316
defectdojodefectdojo1.9.511 of 4See more

defectdojo defectdojo 1.9.51

1 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.1b140a89a34e2
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

2,408
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
libxml2@2.9.7-13.el8_6.2
0:2.9.7-21.el8_10.7

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
libxml2@2.9.7-13.el8_6.2
0:2.9.7-21.el8_10.7

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
libxml2@2.9.7-13.el8_6.2
0:2.9.7-21.el8_10.7

Open the chart page →

13,874
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
libxml2@2.9.4+dfsg1-6.1ubuntu1.3
no fix listed

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
no fix listed

Open the chart page →

10,598
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
no fix listed

Open the chart page →

13,950
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
no fix listed

Open the chart page →

9,627
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
libxml2@2.9.10+dfsg-5ubuntu0.20.04.1
no fix listed

Open the chart page →

10,628
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1
no fix listed

Open the chart page →

5,613
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed

Open the chart page →

4,127
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

2,962
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed

Open the chart page →

10,530
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed

Open the chart page →

30,816
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
libxml2@2.9.14+dfsg-1.3ubuntu3
no fix listed

Open the chart page →

4,309
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed

Open the chart page →

4,477
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
libxml2@2.9.10+dfsg-5ubuntu0.20.04.6
no fix listed

Open the chart page →

7,337
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed

Open the chart page →

1,681
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7

Open the chart page →

7,273
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
libxml2@2.9.10+dfsg-5ubuntu0.20.04.10
no fix listed

Open the chart page →

11,582
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-11979.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libxml2@2.9.3+dfsg1-1ubuntu0.6
no fix listed

Open the chart page →

15,330

Container images carrying it

1,097 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
craftypath/sops-operator:v0.8.0402a0024c732
libxml2@2.9.7-9.el8
0:2.9.7-21.el8_10.7
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
ctron/hawkbit-operator:0.1.48fdea8f76499
libxml2@2.9.7-7.el8
0:2.9.7-21.el8_10.7
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
dannielkil/book-frontend:latest937993927694
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
datadog/extendeddaemonset:v0.8.0513a4377aed5
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.7
1
datamate/seafile-professional:11.0.202dd66b722464
libxml2@2.9.13+dfsg-1ubuntu0.8
no fix listed
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
libxml2@2.9.7-9.el8_4.2
0:2.9.7-21.el8_10.7
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
defectdojo/defectdojo-django:3.3.1b140a89a34e2
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7
1
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
libxml2@2.9.7-13.el8_6.1
0:2.9.7-21.el8_10.7
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libxml2@2.12.7+dfsg+really2.9.14-2.1
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
libxml2@2.9.10+dfsg-5ubuntu0.20.04.10
no fix listed
1
dragonflyoss/client:v1.5.4a1b52779c4dd
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
eginnovations/agent:7.5.4e4dfe242fe9f
libxml2@2.14.5+dfsg-0.2ubuntu0.2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libxml2@2.9.4+dfsg1-6.1ubuntu1.4
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libxml2@2.9.4+dfsg1-6.1ubuntu1.4
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libxml2@2.9.10+dfsg-5ubuntu0.20.04.10
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
fiware/mintaka:0.7.092a3c5cf43c0
libxml2@2.9.7-13.el8
0:2.9.7-21.el8_10.7
1
fiware/mintaka:latestefc6793388cc
libxml2@2.9.7-13.el8
0:2.9.7-21.el8_10.7
1
fiware/orion-ld:1.10.03c490a746f65
libxml2@2.9.7-21.el8_10.3
0:2.9.7-21.el8_10.7
1
fluent/fluent-bit:4.0-debuge76397ef3983
libxml2@2.9.14+dfsg-1.3~deb12u4
no fix listed
1
fnzv/dump1090:latestb3079b95c336
libxml2@2.9.13+dfsg-1ubuntu0.3
no fix listed
1
folioci/mod-z3950:latest2493041ce880
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
libxml2@2.9.1+dfsg1-3ubuntu4.12
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
libxml2@2.9.1+dfsg1-3ubuntu4.12
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
libxml2@2.9.14+dfsg-1.3ubuntu3.1
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
libxml2@2.9.4+dfsg1-6.1ubuntu1.3
no fix listed
1
gethue/hue:4.11.011b649636e68
libxml2@2.9.10+dfsg-5ubuntu0.20.04.5
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
libxml2@2.9.4+dfsg1-6.1ubuntu1.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.