CVE-2025-52099
HighAdvisory
Published 22 May 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 556
- of 17,787 indexed, latest versions
- Container images
- 473
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 473 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+22 more | 3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more | 473 |
- OSV records
- UBUNTU-CVE-2025-52099
- Also known as
- USN-7528-1, USN-7679-1
Charts affected
556 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,857 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,287 |
| jaegerwikimedia | 3.1.2 | 1 of 4See more | 9,296 |
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,323 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,172 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,250 |
Container images carrying it
473 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 3c8375dc5487 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | 5ecb16015aa8 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | 1dcca70c6446 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | 8368359c8dd0 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | 26953ec68d5d | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | d7c43c3135c6 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| ghcr.io/ | b354978c440d | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| ghcr.io/ | a56dfe91f5b1 | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| ghcr.io/ | 916746209ac5 | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| ghcr.io/ | 63873f3f698e | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| ghcr.io/ | 8e6a9516eac0 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 | 1 |
| mcr.microsoft.com/ | 13221ac5f673 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 | 1 |
| mcr.microsoft.com/ | 49a57dc220b1 | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| mcr.microsoft.com/ | fbf79e0fea59 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 | 1 |
| public.ecr.aws/ | efcecf98b912 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 | 1 |
| public.ecr.aws/ | 573779e57fae | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |
| quay.io/ | 5b6701d8fb31 | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| quay.io/ | 95b5cf7ba6fe | sqlite3 | 3.45.1-1ubuntu2.3 | 1 |
| quay.io/ | acaf37352569 | sqlite3 | 3.37.2-2ubuntu0.4 | 1 |
| quay.io/ | a2d3a4c67b0f | sqlite3 | 3.22.0-1ubuntu0.7+esm2 | 1 |
| quay.io/ | a1c3843b03bc | sqlite3 | 3.11.0-1ubuntu1.5+esm3 | 1 |
| quay.io/ | c6a934439421 | sqlite3 | 3.11.0-1ubuntu1.5+esm3 | 1 |
| registry.gitlab.com/ | f6385712935f | sqlite3 | 3.31.1-4ubuntu0.7 | 1 |