StackRadar

CVE-2025-29087

High

Advisory

Published 7 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
116
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
sqliteapk3.44.2-r0, 3.45.3-r1, 3.47.1-r0, 3.48.0-r03.44.2-r1, 3.45.3-r2, 3.48.0-r194
sqlite3deb3.45.1-1ubuntu2, 3.45.1-1ubuntu2.13.45.1-1ubuntu2.322
OSV records
ALPINE-CVE-2025-29087UBUNTU-CVE-2025-29087
Also known as
USN-7528-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,141
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,141
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

5,974
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

2,097
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

16,954
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

21,641
ejabberdejabberdVerified publisher0.1.01 of 1See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
indevlab/ejabberd:24.12-k8s8bc689d093a7
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

903
postgresql-verify-backupeosc-lot-1Verified publisher0.2.01 of 3See more

postgresql-verify-backup eosc-lot-1 0.2.0

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/s3cmd:2-alpine49bce0dd876d
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

2,063
s3cmdeosc-lot-1Verified publisher0.3.21 of 1See more

s3cmd eosc-lot-1 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/s3cmd:2-alpine49bce0dd876d
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

703
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,440
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

12,454
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,395
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

2,438
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

2,183
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

9,342
bitcoindgaloymoney0.5.11 of 3See more

bitcoind galoymoney 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
lncm/bitcoind:v27.0324fec72192e
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,875
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

2,155
bitcoindgaloymoney20.5.11 of 3See more

bitcoind galoymoney2 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
lncm/bitcoind:v27.0324fec72192e
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,875
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

2,155
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

49,025
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
sqlite@3.45.3-r1
3.45.3-r2
clsen2024/gwangju_2-3:service-a-151b1d45961cd
sqlite@3.45.3-r1
3.45.3-r2
clsen2024/gwangju_2-3:service-c-1efb1586c8299
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

6,491
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

4,647
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

10,418
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

45,239
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

888
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

6,568
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,733
netio-exporterk8sonlabVerified publisher0.1.101 of 1See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
tomsajan/netio-exporter:0.0.5fb61907707b8
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

729
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

679
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

519
whatsappkubernetes-whatsappVerified publisher0.1.81 of 4See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
library/python:3.8-alpine3d93b1f77efc
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,574
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

3,104
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

5,332
qbittorrentnoxleonardo0918000.1.01 of 1See more

qbittorrentnox leonardo091800 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,118
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

4,647
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

21,064
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

10,180
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

2,589
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

2,899
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

4,560
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
sqlite@3.44.2-r0
3.44.2-r1
ahmetgrbzz/web_server:1.02e7fef69c29f
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

3,034
proxy-pynas-helm-chartsVerified publisher1.0.01 of 1See more

proxy-py nas-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
abhinavsingh/proxy.py:latest51adc989fd03
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

594
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

2,293
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

5,826
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

6,037
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

5,137

Container images carrying it

116 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mshade/kronic:v0.1.466e3043851cd
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
sqlite@3.48.0-r0
3.48.0-r1
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
sqlite@3.45.3-r1
3.45.3-r2
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
sqlite@3.48.0-r0
3.48.0-r1
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
sqlite@3.44.2-r0
3.44.2-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.