[BUG] CVE-2022-49043 xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

[maxlepikhin]

Describe the bug

Trivy security scanning flagged libxml2 due to this CVE:
CVE-2022-49043

Related component

No response

To Reproduce

docker run -it --entrypoint=/bin/bash opensearchproject/opensearch:2.19.0
ls /usr/lib64 | grep libxml

observe the output:

libxml2.so.2
libxml2.so.2.10.4

Expected behavior

Trivy does not flag libxml2 library.

Additional Details

Plugins
N/A

Screenshots
N/A

Host/Environment (please complete the following information):
Ubuntu 24.04

Additional context
N/A