StackRadar

CVE-2025-52099

High

Advisory

Published 22 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
556
of 17,787 indexed, latest versions
Container images
473
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 473 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+22 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more473
OSV records
UBUNTU-CVE-2025-52099
Also known as
USN-7528-1, USN-7679-1

Charts affected

556 by stars
ChartLatestAffected imagesRadar Score
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

15,287
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

9,296
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7

Open the chart page →

6,323
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

14,172
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

9,250

Container images carrying it

473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
chriseaton/adventureworks:latest54c3384ce701
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
circleci/runner:launch-agent9bdc62f02162
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
citizenstig/httpbin:latestb81c818ccb86
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
cloudve/janis-terminal:latestaf56e77ca587
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
cloudve/ttyd:latestd79c1c5881c0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
cortezaproject/corteza:2024.9.08eb7a26605c9
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
countly/countly-server:25.05.4e3c238248f99
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
cribl/cribl:3.0.2762747cb6796
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
sqlite3@3.11.0-1ubuntu1.5
3.11.0-1ubuntu1.5+esm3
1
daskdev/dask-notebook:1.1.0052630f5ca04
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2
1
datalust/seq:5.0.832-pre9c731bb207a6
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7
1
dellcloud/category:distributed02fc234353a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
dellcloud/pages:1.04d2eb25b9225
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
dniel/api-posts:master45a667852f2a
sqlite3@3.22.0-1ubuntu0.1
3.22.0-1ubuntu0.7+esm2
1
elastic/apm-server:7.17.6c7a1c63257d0
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
elastictranscoder/media:627e21dc963ab3858c6b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
elastictranscoder/media-storage:f6d861a026208b8c2359
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
engrmth/bnkr:2.1.06d8464e6f0e8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
flyway/flyway:9.1545b5d7cdc75a
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
foldingathome/fah-gpu:latest5ef7742d1eb4
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
free5gmano/nextepc-mongodb:latest36f806935519
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
galaxy/cloudman-server:lateste5c265fe9fcd
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
galaxy/galaxy-init:v18.010267bad550e6
sqlite3@3.8.2-1ubuntu2.1
3.8.2-1ubuntu2.2+esm5
1
galaxy/galaxy-stable:v18.018e577a626dfd
sqlite3@3.8.2-1ubuntu2.1
3.8.2-1ubuntu2.2+esm5
1
gchq/accumulo:2.0.1c460bb587d6d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
gethue/hue:4.11.011b649636e68
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
gethue/hue:4.10.05702b2c37ff9
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
gotson/komga:0.99.49b15ea6bfc30
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
graylog/graylog:6.1.1019de1aff48c2
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4
1
grpl/grapple-cli:0.2.127c00aafee6629
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.4
1
haugene/transmission-openvpn:4.0059216cfae4b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
haveagitgat/tdarr:2.00.181256348872ce
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.