CVE-2026-1757

Medium

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 403; of 17,781 indexed, latest versions
Container images: 375; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 375 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.14+dfsg-1.2, 2.9.14+dfsg-1.3~deb12u1, 2.9.14+dfsg-1.3~deb12u2, 2.9.14+dfsg-1.3~deb12u4+5 more	2.9.14+dfsg-1.3~deb12u6, 2.12.7+dfsg+really2.9.14-2.1+deb13u3, 2.14.5+dfsg-0.2ubuntu0.2	375

OSV records: DEBIAN-CVE-2026-1757 UBUNTU-CVE-2026-1757
Also known as: USN-8460-1

Charts affected

403 by stars

Chart

Latest

Affected images

Radar Score

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,624

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

11,577

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,673

Container images carrying it

375 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/pgbouncer :1.23.1	92356da09704	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.4.0-debian-12-r11	02e2f47a405e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.5.0-debian-12-r16	687034f33da6	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.3.0-debian-12-r14	cc55da2fa366	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.2.0-debian-12-r2	e6fa49bb0347	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bitnami/mariadb :11.7.2	16a7dae804fb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
bnjbvr/kresus :0.22.1	37e216b182c8	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
boky/postfix :5.1.0	aafc77238423	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
castopod/castopod :1.12.10	1fd37280cbb2	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
castopod/castopod :1.15.5	4e4f0440520f	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
chiefonboarding/chiefonboarding :v2.4.1	59bc7aa60fe7	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
chocobozzz/peertube :v8.1.5	052712130691	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
ckulka/baikal :0.10.1-nginx	434bdd162247	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	1
coturn/coturn :4.10.0-r1	f4c2af06c3c5	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
dannielkil/book-frontend :latest	937993927694	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
deconzcommunity/deconz :2.29.2	062de2362641	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
dolibarr/dolibarr :22.0.4	7ad88fc9b13c	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
domainmod/domainmod :4.23.0	4017bfe4c597	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
emqx/ecp-ui :2.5.1	e33e9816f147	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
escaping/core-keeper-dedicated :latest	87fa79255962	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
espocrm/espocrm :9.3.10	1b5a24504ed9	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
falcosecurity/event-generator :latest	932956d86c99	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
fireflyiii/core :version-6.6.6	ae69fdd95cde	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	1
fluent/fluent-bit :4.0-debug	e76397ef3983	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	1
folioci/mod-z3950 :latest	2493041ce880	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
gotenberg/gotenberg :8.30	206a6c708fc6	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1
gotenberg/gotenberg :8.34	67097317623a	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	1