StackRadar

CVE-2025-29087

High

Advisory

Published 7 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
116
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
sqliteapk3.44.2-r0, 3.45.3-r1, 3.47.1-r0, 3.48.0-r03.44.2-r1, 3.45.3-r2, 3.48.0-r194
sqlite3deb3.45.1-1ubuntu2, 3.45.1-1ubuntu2.13.45.1-1ubuntu2.322
OSV records
ALPINE-CVE-2025-29087UBUNTU-CVE-2025-29087
Also known as
USN-7528-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

5,411
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

960
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
sqlite@3.45.3-r1
3.45.3-r2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

25,934
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,338
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

2,854
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

9,355
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

2,855
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,529
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

4,038
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,713
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,528
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

644
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

7,901
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,058
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,515
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

2,806
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,083
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

45,239
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

4,768
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
thecloudspark/app-vote:1.0c7da7417a86a
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

3,031
waldur-site-agentwaldur-site-agentVerified publisher1.0.71 of 1See more

waldur-site-agent waldur-site-agent 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

535
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

570

Container images carrying it

116 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
indevlab/ejabberd:24.12-k8s8bc689d093a7
sqlite@3.44.2-r0
3.44.2-r1
1
jlesage/firefox:v25.03.1055c28defe31
sqlite@3.48.0-r0
3.48.0-r1
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
sqlite@3.47.1-r0
3.48.0-r1
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
sqlite@3.45.3-r1
3.45.3-r2
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
sqlite@3.44.2-r0
3.44.2-r1
1
leantime/leantime:3.3.3ad4bfb0699d3
sqlite@3.45.3-r1
3.45.3-r2
1
library/python:3.8-alpine3d93b1f77efc
sqlite@3.45.3-r1
3.45.3-r2
1
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
sqlite@3.45.3-r1
3.45.3-r2
1
librenms/librenms:24.11.00920bc9117a8
sqlite@3.44.2-r0
3.44.2-r1
1
linuxserver/foldingathome:7.6.219a997426d71e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
mathieuruellan/piwigo:latest04572c8a1b04
sqlite@3.45.3-r1
3.45.3-r2
1
mauricenino/dashdot:5.9.2236997816917
sqlite@3.48.0-r0
3.48.0-r1
1
metabase/metabase:v0.53.4.17807bc5cad17
sqlite@3.48.0-r0
3.48.0-r1
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
sqlite@3.45.3-r1
3.45.3-r2
1
nodered/node-red:3.0.2-18e2632a7a35dd
sqlite@3.44.2-r0
3.44.2-r1
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
sqlite@3.45.3-r1
3.45.3-r2
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
sqlite@3.44.2-r0
3.44.2-r1
1
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
sqlite@3.45.3-r1
3.45.3-r2
1
openruntimes/executor:0.11.42228f186dcbb
sqlite@3.44.2-r0
3.44.2-r1
1
photoprism/photoprism:240711-cefc6fd632ca74
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
sqlite@3.45.3-r1
3.45.3-r2
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
sqlite@3.44.2-r0
3.44.2-r1
1
psono/psono-server:5.0.03b974b43ea03
sqlite@3.45.3-r1
3.45.3-r2
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
sqlite@3.44.2-r0
3.44.2-r1
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
supabase/storage-api:v1.12.0f983fb50bd95
sqlite@3.45.3-r1
3.45.3-r2
1
temporalio/admin-tools:1.26.237e2e33dbd7b
sqlite@3.45.3-r1
3.45.3-r2
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
sqlite@3.44.2-r0
3.44.2-r1
1
thecloudspark/app-vote:1.0c7da7417a86a
sqlite@3.45.3-r1
3.45.3-r2
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
sqlite@3.45.3-r1
3.45.3-r2
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
sqlite@3.44.2-r0
3.44.2-r1
1
tomsajan/netio-exporter:0.0.5fb61907707b8
sqlite@3.44.2-r0
3.44.2-r1
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
sqlite@3.48.0-r0
3.48.0-r1
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
sqlite@3.47.1-r0
3.48.0-r1
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
sqlite@3.48.0-r0
3.48.0-r1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
sqlite@3.48.0-r0
3.48.0-r1
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
sqlite@3.48.0-r0
3.48.0-r1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
sqlite@3.44.2-r0
3.44.2-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.