CVE-2025-52099

High

Advisory

Published 22 May 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 556; of 17,787 indexed, latest versions
Container images: 473; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 473 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+22 more	3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more	473

OSV records: UBUNTU-CVE-2025-52099
Also known as: USN-7528-1, USN-7679-1

Charts affected

556 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7

Open the chart page →

15,287

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4

Open the chart page →

9,296

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	sqlite3@3.31.1-4ubuntu0.6	3.31.1-4ubuntu0.7

Open the chart page →

6,323

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4

Open the chart page →

14,172

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-52099.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7

Open the chart page →

9,250

Container images carrying it

473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.4	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.4	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	sqlite3@3.37.2-2	3.37.2-2ubuntu0.4	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
tpdock/freeradius :2.2.9	3da600c95a49	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
trinodb/trino :405	ee80ab5eeab2	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.4	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	sqlite3@3.22.0-1ubuntu0.7	3.22.0-1ubuntu0.7+esm2	1
voltha/voltha-cli :1.6.0	c4e41e92f046	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	sqlite3@3.8.2-1ubuntu2.1	3.8.2-1ubuntu2.2+esm5	1
voltha/voltha-netconf :1.6.0	37f80524c207	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
voltha/voltha-onos :5.1.8	e038acb950d3	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7+esm2	1
voltha/voltha-tester :1.7.0	655c3048a602	sqlite3@3.11.0-1ubuntu1.2	3.11.0-1ubuntu1.5+esm3	1
voltha/voltha-voltha :1.6.0	ff596b62de59	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
wavefronthq/proxy :9.2	d1064d28f6eb	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
woojoong/wowza :latest	ec230db19652	sqlite3@3.22.0-1	3.22.0-1ubuntu0.7+esm2	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
xeladock/mysql_dns :latest	4baf531453f1	sqlite3@3.37.2-2	3.37.2-2ubuntu0.4	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7	1
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :latest	1cbf75aabe1e	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
yandex/clickhouse-server :19.17	ab1738a64b70	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.16	d210dc69321e	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.3	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	sqlite3@3.37.2-2	3.37.2-2ubuntu0.4	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	sqlite3@3.37.2-2	3.37.2-2ubuntu0.4	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	sqlite3@3.22.0-1ubuntu0.2	3.22.0-1ubuntu0.7+esm2	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.4	1