diff --git a/pkgs/by-name/un/unityhub/package.nix b/pkgs/by-name/un/unityhub/package.nix
index 292eae8e8696..ab7dd5b92db9 100644
--- a/pkgs/by-name/un/unityhub/package.nix
+++ b/pkgs/by-name/un/unityhub/package.nix
@@ -96,7 +96,18 @@ stdenv.mkDerivation rec {
         xorg.libXcursor
         glib
         gdk-pixbuf
-        libxml2
+        (libxml2.overrideAttrs (oldAttrs: rec {
+          version = "2.13.8";
+          src = fetchurl {
+            url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
+            hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
+          };
+          meta = oldAttrs.meta // {
+            knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
+              "CVE-2025-6021"
+            ];
+          };
+        }))
         zlib
         clang
         git # for git-based packages in unity package manager