StackRadar

CVE-2025-52099

High

Advisory

Published 22 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
556
of 17,787 indexed, latest versions
Container images
473
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 556 of 17,787 indexed charts deploy, on 473 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+22 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+2 more473
OSV records
UBUNTU-CVE-2025-52099
Also known as
USN-7528-1, USN-7679-1

Charts affected

556 by stars
ChartLatestAffected imagesRadar Score
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

15,287
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

9,296
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7

Open the chart page →

6,323
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.4

Open the chart page →

14,172
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-52099.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7

Open the chart page →

9,250

Container images carrying it

473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/dask/dask:2024.1.0080150de7d86
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
sqlite3@3.37.2-2
3.37.2-2ubuntu0.4
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
sqlite3@3.37.2-2
3.37.2-2ubuntu0.4
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
sqlite3@3.37.2-2
3.37.2-2ubuntu0.4
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
sqlite3@3.37.2-2
3.37.2-2ubuntu0.4
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.3
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.