Image reports › httpd
httpd — vulnerabilities, FIPS 140-3 and fixes
mirror.gcr.io/library/httpd · Debian GNU/Linux 13 (trixie)
Latest: httpd:latest · checked 2026-09-25
Not FIPS-ready
No. httpd:latest relies on cryptography that isn't FIPS-certified, so it can't be used where FIPS 140-3 is required as it stands.
Security: 53 known vulnerabilities
53 known vulnerabilities in 28 packages (1 high); none has a fix available yet.
Critical, high and exploited vulnerabilities in latest
| Severity | ID | Package | Fixed in | Summary |
|---|---|---|---|---|
| high | CVE-2024-25062 | libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | no fix yet | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. |
All checked tags
| Tag | FIPS | Known vulnerabilities | Checked | |
|---|---|---|---|---|
| latest | Not FIPS-ready | A 53 | 2026-09-25 | Full report |