DSA-5979-2

Unscored

Advisory

Published 25 Sept 2025In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 182; of 17,781 indexed, latest versions
Container images: 162; deployed by those charts
Fix available: 1 of 1; affected package

libxslt - regression update

Carried by container images the latest versions of 182 of 17,781 indexed charts deploy, on 162 images.

Affected package	Affected versions	Fixed in	Images
libxsltdeb	1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u1, 1.1.35-1+deb12u2	1.1.35-1.2+deb13u2, 1.1.35-1+deb12u3	162

OSV records: DSA-5979-2

Charts affected

182 by stars

Chart

Latest

Affected images

Radar Score

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

8,811

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

11,367

weblateweblate

0.5.36

1 of 3 See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

6,699

difydouban

0.10.0

1 of 6 See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

19,391

openprojectopenproject-helm-charts

13.11.0

1 of 5 See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
openproject/hocuspocus :release-338001b2	88dc1359dfb5	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

19,926

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

6,543

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

5,987

litellm-helmlitellm

1.100.1

1 of 2 See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,003

prefect-serverprefect

2026.9.3212605

1 of 2 See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,786

devtron-operatordevtron

0.23.3

1 of 11 See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
quay.io/devtron/postgres :14.9	1b594392f7cb	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

32,902

ilumilum

6.7.3

1 of 19 See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

23,228

syftopenmined

0.9.5

1 of 6 See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :16.1	09f23e02d766	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

17,245

paperless-ngxpaperless-ngx

0.3.22

1 of 3 See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

8,489

convoyconvoy

3.7.13

1 of 3 See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

5,896

baserowbaserow-chart

1.0.56

1 of 6 See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

17,263

headwind-mdmchristianhuth

5.10.1

1 of 2 See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

5,870

infrahubinfrahub

4.33.2

1 of 5 See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

10,428

kubeflowkubeflow

1.6.2

1 of 45 See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/python :3.7	eedf63967cdb	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

96,941

librechatlibrechat-openshift

1.9.0

1 of 3 See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,779

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

17,404

cosmocosmo-platform

0.20.0

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

28,839

infrahub-enterpriseinfrahub-enterprise

4.19.2

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

10,530

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.5.0	42a8200d3597	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

4,060

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/nginx :1.27.4	09369da6b103	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

5,435

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

13,521

nominatimrobjuz

6.4.1

1 of 4 See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

8,690

repmanszpadel-charts

3.52.17

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/nginx :1.27.3	fb197595ebe7	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

7,052

anteonanteon

2.6.4

1 of 13 See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

22,202

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

15,863

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

9,724

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

13,761

dbrepodbrepo

1.13.3

2 of 25 See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	libxslt@1.1.35-1	1.1.35-1+deb12u3
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

52,635

gentrace-self-hostedgentrace-self-hosted

0.1.3

1 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :15.3	8775adb39f0d	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

15,562

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :16.1	09f23e02d766	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

13,610

guacamolehelmforge

1.5.2

1 of 5 See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :17.5-bookworm	fbcea1bd13b6	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

8,716

immichimmich-helm

0.3.0

1 of 4 See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

15,712

flaresolverrlib42

2.0.0

1 of 1 See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

35,050

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
moreillon/food-manager :latest	e8fd856e593d	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

13,738

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,039

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	libxslt@1.1.35-1	1.1.35-1+deb12u3
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

14,838

librechatopenshift

1.9.0

1 of 3 See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,779

paperless-ngxpaperless

0.4.0

1 of 3 See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresqldigest-pinned	926356130b77	libxslt@1.1.35-1+deb12u2	1.1.35-1+deb12u3

Open the chart page →

8,489

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

31,844

atuinrm3l

0.11.0

1 of 3 See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

6,521

baikalrubxkube

1.3.1

1 of 1 See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ckulka/baikal :0.10.1-nginx	434bdd162247	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

5,315

kyoorubxkube

0.1.10

2 of 9 See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	libxslt@1.1.35-1	1.1.35-1+deb12u3
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

30,234

nginx-chartsomnath-chart

0.1.9

1 of 1 See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
somnathmore/custom-nginx :v2	bdfc06cad4ec	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

5,676

unitycatalogunitycatalog

0.0.2

1 of 4 See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

12,581

backendzymtrace

26.9.1

1 of 6 See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
library/postgres :17.4	304ab8135187	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3

Open the chart page →

10,323

ddosifyanteon

1.7.5

2 of 13 See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry DSA-5979-2.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	libxslt@1.1.35-1	1.1.35-1+deb12u3
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	libxslt@1.1.35-1	1.1.35-1+deb12u3

Open the chart page →

25,669

Container images carrying it

162 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	libxslt@1.1.35-1	1.1.35-1+deb12u3	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libxslt@1.1.35-1	1.1.35-1+deb12u3	1