CVE-2020-35525

High

Advisory

Published 1 Sept 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 353; of 17,781 indexed, latest versions
Container images: 267; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 353 of 17,781 indexed charts deploy, on 267 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+12 more	3.8.2-1ubuntu2.2+esm4, 3.11.0-1ubuntu1.5+esm1, 3.22.0-1ubuntu0.6, 3.31.1-4ubuntu0.4	267

OSV records: UBUNTU-CVE-2020-35525
Also known as: USN-5615-1, USN-5615-2, USN-5615-3

Charts affected

353 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2020-35525.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-35525.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4

Open the chart page →

15,230

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-35525.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4

Open the chart page →

9,207

Container images carrying it

267 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.6	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.6	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.4	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.6	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.6	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	sqlite3@3.11.0-1ubuntu1.5	3.11.0-1ubuntu1.5+esm1	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	sqlite3@3.11.0-1ubuntu1.2	3.11.0-1ubuntu1.5+esm1	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	1