StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.758
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,278
of 17,787 indexed, latest versions
Container images
1,283
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,278 of 17,787 indexed charts deploy, on 1,283 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more797
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7292
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,278 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

13,551
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,222
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

10,994
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,698
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SQLitePCLRaw.lib.e_sqlite3@2.1.0
no fix listed

Open the chart page →

1,381
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,581
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

12,958
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

12,076
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

10,379
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,768
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,895
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

26,944
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,929
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
library/elasticsearch:7.17.1588c2ec10c7f2
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
library/kibana:7.17.150172f1c538e7
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

34,754
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,756
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/pilot:1.2.9c09319753454
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/proxyv2:1.2.90c78be035e98
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,102
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

901
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,170
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,789
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,229
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

49,025
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,722
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

8,188
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,261
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-a-151b1d45961cd
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-c-1efb1586c8299
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,491
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sqlite@3.48.0-r2
3.48.0-r3

Open the chart page →

2,950
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,284
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

9,096
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,708
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

24,995

Container images carrying it

1,283 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
sqlite@3.41.2-r2
3.41.2-r4
1
homeassistant/home-assistant:2023.12.48d000332b09b
sqlite@3.41.2-r2
3.41.2-r4
1
housewrecker/gaps:latestf417dd0a7547
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
hugohg34/toposervice:0.0.2812a03b3f274
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
i4trust/activation-service:2.2.09f3719176893
sqlite@3.41.2-r2
3.41.2-r4
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/app-nav-controller:1.0.1ee4624ba513d
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-init-dev:19.0.2b138f1eac0b1
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
sqlite@3.26.0-6.el8
0:3.26.0-20.el8_10
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
sqlite@3.26.0-6.el8
0:3.26.0-20.el8_10
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
ibmcom/microclimate-theia:lateste17bdccc5030
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
sqlite@3.26.0-3.el8
0:3.26.0-20.el8_10
1
ibmcom/skydive:0.22.0395e60cc6e3d
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
sqlite@3.7.17-8.el7_7.1
0:3.7.17-9.el7_9.1
1
ibmcom/websphere-liberty:javaee8-ubi-min28ae40e05980
sqlite@3.7.17-8.el7
0:3.7.17-9.el7_9.1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
indevlab/ejabberd:24.12-k8s8bc689d093a7
sqlite@3.44.2-r0
3.44.2-r2
1
inseefrlab/shelly:cloudshell31f04ca7436b
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
instructure/kinesalite:latest34400d82f28f
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
invoiceninja/invoiceninja:5.6.241437916dee01
sqlite@3.41.2-r2
3.41.2-r4
1
iofog/router:2.0.17260cf861479
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
iomesh/csi-driver:v2.8.01a151f602451
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.