CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.758; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,278; of 17,787 indexed, latest versions
Container images: 1,283; deployed by those charts
Fix available: 7 of 8; affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,278 of 17,787 indexed charts deploy, on 1,283 images.

Affected package	Affected versions	Fixed in	Images
SQLitePCLRaw.lib.e_sqlite3nuget	2.0.4, 2.0.6, 2.1.0, 2.1.6+1 more	no fix listed	16
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more	3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more	797
sqliterpm	3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more	0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7	292
sqliteapk	3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more	3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more	176
nodejsrpm	1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more	1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd01	14
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd	0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa	4
nodejs-packagingrpm	23-3.module+el8.3.0+6519+9f98ed83	0:2021.06-4.module+el8.10.0+23140+4056b950	6
sqlite3rpm	3.28.0-lp151.2.3.1	3.50.3-1.1	2

OSV records: GHSA-2m69-gcr7-jv3q ALPINE-CVE-2025-6965 DEBIAN-CVE-2025-6965 RHSA-2025:11802 RHSA-2025:11803 RHSA-2025:11992 RHSA-2025:12010 RHSA-2025:12349 RHSA-2025:20936 RLSA-2025:11802 RLSA-2025:11992 RLSA-2025:12010 RLSA-2025:20936 UBUNTU-CVE-2025-6965 openSUSE-SU-2025:15368-1
Also known as: BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,278 by stars

Chart

Latest

Affected images

Radar Score

pagesgary-pages

1.0.0

2 of 3 See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
flyway/flyway :6.4.4	22d97ceb0c47	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190

airsonicgeek-cookbook

6.4.2

1 of 1 See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,230

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,659

booksonic-airgeek-cookbook

6.4.2

1 of 1 See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,215

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,123

delugegeek-cookbook

5.4.2

1 of 1 See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

13,551

double-takegeek-cookbook

2.3.2

1 of 1 See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jakowenko/double-take :1.6.0	b858bac9e32a	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,222

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,545

gapsgeek-cookbook

5.4.2

1 of 1 See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
housewrecker/gaps :latest	f417dd0a7547	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,943

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

10,994

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,698

jellyfingeek-cookbook

9.5.3

1 of 1 See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.8.1	ee24f4459a40	SQLitePCLRaw.lib.e_sqlite3@2.1.0	no fix listed

Open the chart page →

1,381

komgageek-cookbook

2.4.2

1 of 1 See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
gotson/komga :0.99.4	9b15ea6bfc30	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,581

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,283

mopidygeek-cookbook

0.1.2

1 of 1 See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jaedb/iris :latest	048cfbf58d57	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

12,958

nzbgetgeek-cookbook

12.4.2

1 of 1 See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5

Open the chart page →

12,076

nzbhydra2geek-cookbook

10.4.2

1 of 1 See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,702

openkmgeek-cookbook

4.2.0

1 of 1 See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
openkm/openkm-ce :6.3.11	3bc465a7461b	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

27,949

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5

Open the chart page →

19,503

puppeteergeek-cookbook

1.2.2

1 of 1 See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,730

qbittorrentgeek-cookbook

13.5.2

1 of 1 See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,807

radarrgeek-cookbook

16.3.2

1 of 1 See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5

Open the chart page →

10,379

readarrgeek-cookbook

6.4.2

1 of 1 See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,768

resilio-syncgeek-cookbook

5.4.2

1 of 1 See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,895

seafilegeek-cookbook

3.2.0

1 of 1 See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

24,293

teedygeek-cookbook

6.2.0

1 of 1 See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
sismics/docs :v1.10	f4b0ef019cf1	sqlite3@3.22.0-1	3.22.0-1ubuntu0.7+esm2

Open the chart page →

26,944

transmissiongeek-cookbook

8.4.3

1 of 1 See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,861

xtevegeek-cookbook

8.4.2

1 of 1 See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,929

mongogengxiankun-charts

0.1.0

1 of 1 See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/mongo :5.0	41108d183e97	sqlite3@3.31.1-4ubuntu0.7	3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,969

geonetwork-k8sgeonetwork-k8s

4.2.8

3 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jingking/geonetwork-hnap :4.2.8	43e74ab234e1	sqlite3@3.31.1-4ubuntu0.6	3.31.1-4ubuntu0.7+esm1
library/elasticsearch :7.17.15	88c2ec10c7f2	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1
library/kibana :7.17.15	0172f1c538e7	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

34,754

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,756

knativegitlab

0.10.0

3 of 10 See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
istio/node-agent-k8s :1.2.9	268ab879ea51	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3
istio/pilot :1.2.9	c09319753454	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3
istio/proxyv2 :1.2.9	0c78be035e98	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,102

volume-autoscalergke-volume-autoscaler

3.0.2

1 of 1 See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
shadowrhyder/gke-volume-autoscaler :3.0.2	4aae9270356a	sqlite@3.41.2-r2	3.41.2-r4

Open the chart page →

901

glpiglpi-chart

0.1.1

1 of 3 See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

12,170

platformgoofy-chart

0.1.0

1 of 1 See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
devopsgoofy/k8s-platform :latest	ad865312099f	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

2,789

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5
library/cassandra :3.11.6	5aa8400b4b3b	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,229

opentelemetry-demogpg-dev

0.33.8

4 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	sqlite3@3.40.1-2	3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	sqlite3@3.40.1-2	3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

49,025

video-analytics-demogpu-operator

0.1.9

1 of 3 See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
anguda/ant-media :2.5	c435285fc241	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,722

mimir-openshift-experimentalgrafana

2.1.0

2 of 4 See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	sqlite@3.26.0-11.el8	0:3.26.0-20.el8_10
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	sqlite@3.26.0-11.el8	0:3.26.0-20.el8_10

Open the chart page →

17,759

pyroscope-monitoringgrafana

0.1.1

1 of 6 See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6

Open the chart page →

8,188

grayloggraylog

1.0.2

1 of 4 See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
graylog/graylog :6.1.10	19de1aff48c2	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

5,261

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

2,590

gwangju_2-3gwangju2-3

0.1.0

3 of 5 See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
clsen2024/gwangju_2-3 :service-b-1	0ba9eff852c5	sqlite@3.45.3-r1	3.45.3-r3
clsen2024/gwangju_2-3 :service-a-1	51b1d45961cd	sqlite@3.45.3-r1	3.45.3-r3
clsen2024/gwangju_2-3 :service-c-1	efb1586c8299	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

6,491

librechathajowieland

1.1.0

1 of 1 See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.8	7fe76551a78e	sqlite@3.48.0-r2	3.48.0-r3

Open the chart page →

2,950

librechat-exporterhajowieland

1.0.0

1 of 1 See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

2,284

hatchet-hahatchet

0.18.0

1 of 8 See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

7,344

hatchet-stackhatchet

0.18.0

1 of 8 See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

7,344

hawk-envoy-pluginhawk

0.1.0

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
kong/httpbin :latest	a6ac46531193	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

9,096

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,708

heliconehelicone

0.1.42

2 of 14 See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	sqlite3@3.31.1-4ubuntu0.6	3.31.1-4ubuntu0.7+esm1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

24,995

Container images carrying it

1,283 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	sqlite@3.26.0-16.el8_6	0:3.26.0-20.el8_10	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5	1
photoprism/photoprism :220629-jammy	2954334adbda	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5	1
photoprism/photoprism :240711-ce	fc6fd632ca74	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4	1
phsmith/rundeck-exporter :2.6.1	0265a7616ae8	sqlite@3.41.2-r2	3.41.2-r4	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	sqlite3@3.11.0-1ubuntu1.5	3.11.0-1ubuntu1.5+esm3	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	sqlite@3.26.0-4.el8_1	0:3.26.0-20.el8_10	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10	1
pococze/python-hello-elos :2.0.0	7a1aab425e51	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
postgis/postgis :15-3.3-alpine	4738bee21eb6	sqlite@3.41.2-r2	3.41.2-r4	1
postgis/postgis :17-3.4-alpine	5a1dbedac34e	sqlite@3.45.3-r1	3.45.3-r3	1
pozetroninc/keydb :v6.0.16	53ae64f29da8	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
prefecthq/prefect :2.20.4-python3.10	1df4b5b6238a	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
project2team4/react :latest	3ff031a08887	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
prompve/prometheus-pve-exporter :3.4.2	fcf041f0c24d	sqlite@3.44.2-r0	3.44.2-r2	1
proxysql/proxysql :2.7.3	a4d6c35c2949	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
pschichtel/mindustry-server :v145.1	b543e9c2d371	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	nodejs@1:20.20.2-1.module+el9.7.0+40153+4d595597	1:22.16.0-2.module+el9.6.0+32322+a8b1fd01	1
psono/psono-server :5.0.0	3b974b43ea03	sqlite@3.45.3-r1	3.45.3-r3	1
psorab/elibrary :latest	53b68896c4ce	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	sqlite3@3.31.1-4ubuntu0.4	3.31.1-4ubuntu0.7+esm1	1
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
pyaephyohein/mysql2s3bk :alpha	fdee05f2d441	sqlite@3.41.2-r2	3.41.2-r4	1
pypiserver/pypiserver :v2.4.1	e935e19433ef	sqlite@3.45.3-r2	3.45.3-r3	1
qbittorrentofficial/qbittorrent-nox :4.6.3-1	2b86d9c356ae	sqlite@3.44.2-r0	3.44.2-r2	1
radarbase/radar-push-endpoint :0.4.0	e1758508e033	sqlite3@3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.4	1
radarbase/radar-redcapintegration :1.0.6	fcd973d4796d	sqlite3@3.45.1-1ubuntu2.1	3.45.1-1ubuntu2.4	1
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-cni-plugins :v0.9.1-build20210414	be3c1d469bf7	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-kube-proxy :v1.20.2	d0600143c23c	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
razorbladex401/dayz :latest	6a4d79248e7d	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
razzy10/product-service :latest	702e411956db	sqlite@3.34.1-8.el9_6	0:3.34.1-9.el9_7	1
redash/redash :25.8.0	00d813437db5	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
redis/redis-stack-server :7.4.0-v0	887cf87cc744	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
resouer/redis-slave :v2	e2f198b49ba7	sqlite3@3.8.2-1ubuntu2	3.8.2-1ubuntu2.2+esm5	1
resurfaceio/resurface :3.7.84	d5cda2f64109	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
rezachalak/bzen-mongo :1.0.0	34f694325191	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1	1
rm3l/dev-feed-api :latest	9a7f732245a3	sqlite@3.34.1-6.el9_1	0:3.34.1-8.el9_6	1