CVE-2026-1757

Medium

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 403; of 17,781 indexed, latest versions
Container images: 375; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 375 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.14+dfsg-1.2, 2.9.14+dfsg-1.3~deb12u1, 2.9.14+dfsg-1.3~deb12u2, 2.9.14+dfsg-1.3~deb12u4+5 more	2.9.14+dfsg-1.3~deb12u6, 2.12.7+dfsg+really2.9.14-2.1+deb13u3, 2.14.5+dfsg-0.2ubuntu0.2	375

OSV records: DEBIAN-CVE-2026-1757 UBUNTU-CVE-2026-1757
Also known as: USN-8460-1

Charts affected

403 by stars

Chart

Latest

Affected images

Radar Score

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,624

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

11,577

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,673

Container images carrying it

375 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	11
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	7
quay.io/devtron/postgres :14.9	1b594392f7cb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	6
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	5
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	5
library/postgres :12	2f2a8c2a7d10	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	5
artifacthub/postgres :latest	4fd34fa635cc	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	4
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/postgresql :16	233f361c5819	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	4
library/nginx :1.27.1	287ff321f9e3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
library/postgres :13	4689940c6838	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	4
opea/llm-tgi :1.0	0c25aab3f106	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	4
bitnamilegacy/kubectl :latest	cd354d5b2556	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
library/nginx :1.25 :1.25.5	a484819eb602	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u6	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6	3
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6	2
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
fireflyiii/data-importer :version-2.2.3	ab52bf932546	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	libxml2@2.9.14+dfsg-1.2	2.9.14+dfsg-1.3~deb12u6	2
library/nginx :latest	6e23479198b9	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/nginx :1.27.0	98f8ec75657d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/nginx :1.29.4	9dd288848f44	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/phpmyadmin :5.2.1	6e75aa8f767c	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :16.1	09f23e02d766	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :18.1	1090bc3a8ccf	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/postgres :16.2	4aea012537ed	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/postgres :18.0	6f3e42ad37de	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
library/postgres :16.4	e62fbf9d3e2b	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/python :3.7	eedf63967cdb	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
louislam/uptime-kuma :2.5.4	917318f9d7be	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
obolnetwork/charon :v1.10.0	278c7e2897b6	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	2
opea/embedding-tei :1.0	5c9639de61c1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opea/reranking-tei :1.0	e48613afb191	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opea/retriever-redis :1.0	eb746b263705	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6	2