CVE-2025-49794 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/security/cve/CVE-2025-49794.html

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
rancher/mirrored-library-nginx:1.29.1-alpine Harvester v1.8-head libxml2 libxml2@2.13.8-r0 2.13.9-r0 HIGH affected
rancher/mirrored-library-nginx:1.29.1-alpine Harvester v1.8.2 libxml2 libxml2@2.13.8-r0 2.13.9-r0 HIGH affected
rancher/mirrored-library-nginx:1.29.1-alpine Harvester v1.9-head libxml2 libxml2@2.13.8-r0 2.13.9-r0 HIGH affected
rancher/mirrored-library-nginx:1.29.1-alpine Harvester v1.9.0 libxml2 libxml2@2.13.8-r0 2.13.9-r0 HIGH affected
seldonio/mlserver:1.7.1 SUSE AI latest libxml2 libxml2@2.9.13-9.el9_6 2.9.13-10.el9_6 HIGH affected
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.2.0 Rancher Prime v2.12-head libxml2 libxml2@2.9.12-13.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.3.1 Rancher Prime v2.12-head libxml2 libxml2@2.9.12-14.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.2.0 Rancher Prime v2.12-head libxml2 libxml2@2.9.12-13.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.3.1 Rancher Prime v2.12-head libxml2 libxml2@2.9.12-14.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.2.0 Rancher Prime v2.12.15 libxml2 libxml2@2.9.12-13.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.3.1 Rancher Prime v2.12.15 libxml2 libxml2@2.9.12-14.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.2.0 Rancher Prime v2.12.15 libxml2 libxml2@2.9.12-13.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.3.1 Rancher Prime v2.12.15 libxml2 libxml2@2.9.12-14.ph4 2.9.12-18.ph4 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/hub/controller:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/hub/server:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/hub/storage-initializer:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/model-registry/controller:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/model-registry/server:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/model-registry/storage-initializer:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-10.el9_6 HIGH not affected version of the dependency not affected
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.7.2 Rancher Prime v2.12-head libxml2 libxml2@2.15.3-1.ph5 2.9.12-18.ph4 CRITICAL not affected version of the dependency not affected
rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.7.2 Rancher Prime v2.12.15 libxml2 libxml2@2.15.3-1.ph5 2.9.12-18.ph4 CRITICAL not affected version of the dependency not affected