StackRadar

CVE-2025-52099

High

Advisory

Published 22 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
556
of 17,787 indexed, latest versions
Container images
473
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 473 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+22 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more473
OSV records
UBUNTU-CVE-2025-52099
Also known as
USN-7528-1, USN-7679-1

Charts affected

556 by stars
ChartLatestAffected imagesRadar Score
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

15,287
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

9,296
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7

Open the chart page →

6,323
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

14,172
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

9,250

Container images carrying it

473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
sqlite3@3.37.2-2
3.37.2-2ubuntu0.4
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.4
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
3.22.0-1ubuntu0.7+esm2
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
sqlite3@3.11.0-1ubuntu1.5
3.11.0-1ubuntu1.5+esm3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
sqlite3@3.11.0-1ubuntu1.2
3.11.0-1ubuntu1.5+esm3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.