StackRadar

CVE-2025-29087

High

Advisory

Published 7 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
116
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
sqliteapk3.44.2-r0, 3.45.3-r1, 3.47.1-r0, 3.48.0-r03.44.2-r1, 3.45.3-r2, 3.48.0-r194
sqlite3deb3.45.1-1ubuntu2, 3.45.1-1ubuntu2.13.45.1-1ubuntu2.322
OSV records
ALPINE-CVE-2025-29087UBUNTU-CVE-2025-29087
Also known as
USN-7528-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

5,411
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

960
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
sqlite@3.45.3-r1
3.45.3-r2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

25,934
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,338
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

2,854
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

9,355
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3

Open the chart page →

2,855
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,529
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

4,038
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,713
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,528
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

644
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
sqlite@3.47.1-r0
3.48.0-r1

Open the chart page →

7,901
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

1,058
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

1,515
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

2,806
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

1,083
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3

Open the chart page →

45,239
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
sqlite@3.48.0-r0
3.48.0-r1

Open the chart page →

4,768
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
thecloudspark/app-vote:1.0c7da7417a86a
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

3,031
waldur-site-agentwaldur-site-agentVerified publisher1.0.71 of 1See more

waldur-site-agent waldur-site-agent 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
sqlite@3.45.3-r1
3.45.3-r2

Open the chart page →

535
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-29087.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
sqlite@3.44.2-r0
3.44.2-r1

Open the chart page →

570

Container images carrying it

116 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mshade/kronic:v0.1.466e3043851cd
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
sqlite@3.48.0-r0
3.48.0-r1
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
sqlite@3.44.2-r0
3.44.2-r1
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
sqlite@3.45.3-r1
3.45.3-r2
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
sqlite@3.45.3-r1
3.45.3-r2
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
sqlite@3.48.0-r0
3.48.0-r1
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
sqlite@3.44.2-r0
3.44.2-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.