StackRadar

CVE-2025-29088

Medium

Advisory

Published 10 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,033
of 17,790 indexed, latest versions
Container images
965
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,033 of 17,790 indexed charts deploy, on 965 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+25 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more931
sqliteapk3.47.1-r0, 3.48.0-r0, 3.48.0-r1, 3.48.0-r2+1 more3.48.0-r434
OSV records
ALPINE-CVE-2025-29088DEBIAN-CVE-2025-29088UBUNTU-CVE-2025-29088
Also known as
USN-7528-1, USN-7679-1

Charts affected

1,033 by stars
ChartLatestAffected imagesRadar Score
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
sqlite@3.48.0-r0
3.48.0-r4

Open the chart page →

1,529
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,327
pagesroccohiggins-pages1.0.02 of 3See more

pages roccohiggins-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

9,299
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,763
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,685
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.4

Open the chart page →

13,011
devtron-enterpriseromholdings48.0.04 of 28See more

devtron-enterprise romholdings 48.0.0

4 of the 28 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
sqlite3@3.11.0-1ubuntu1.5
3.11.0-1ubuntu1.5+esm3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
sqlite3@3.40.1-2+deb12u2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

68,695
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

33,180
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

11,959
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,908
pagesronan-pages1.0.02 of 3See more

pages ronan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
endeavorrotationalVerified publisher1.3.11 of 2See more

endeavor rotational 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,240
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,329
quarterdeckrotationalVerified publisher0.16.01 of 1See more

quarterdeck rotational 0.16.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,161
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7

Open the chart page →

6,954
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,529
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,735
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

27,554
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,440
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
sqlite@3.48.0-r2
3.48.0-r4

Open the chart page →

2,778
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

30,517
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

8,733
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,904
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

19,707
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,739
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
sqlite3@3.40.1-2
no fix listed
santisbon/evworker:lateste807283f8d69
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,323
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
sqlite3@3.40.1-2+deb12u2
no fix listed
santisbon/speedtest:latest8ee3a1697227
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,791
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

10,237
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,377
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
sqlite3@3.40.1-2+deb12u2
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,618
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

3,268
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,246
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,916
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,319
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,892
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,723
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

23,041
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.16d210dc69321e
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,976
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,062
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,242
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

11,711
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
sqlite@3.47.1-r0
3.48.0-r4

Open the chart page →

643
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,932
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7

Open the chart page →

5,897
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7

Open the chart page →

9,246
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2025-29088.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

4,379

Container images carrying it

965 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
sqlite@3.48.0-r0
3.48.0-r4
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
sqlite3@3.11.0-1ubuntu1.5
3.11.0-1ubuntu1.5+esm3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
sqlite3@3.11.0-1ubuntu1.2
3.11.0-1ubuntu1.5+esm3
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
sqlite3@3.40.1-2
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.