StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.758
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,277
of 17,781 indexed, latest versions
Container images
1,283
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,277 of 17,781 indexed charts deploy, on 1,283 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more797
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7292
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,277 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

13,551
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,222
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

10,994
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,698
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SQLitePCLRaw.lib.e_sqlite3@2.1.0
no fix listed

Open the chart page →

1,381
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,581
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

12,958
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

12,076
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

10,379
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,768
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,895
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

26,944
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,929
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
library/elasticsearch:7.17.1588c2ec10c7f2
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
library/kibana:7.17.150172f1c538e7
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

34,754
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,756
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/pilot:1.2.9c09319753454
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/proxyv2:1.2.90c78be035e98
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,102
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

901
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,170
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,789
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,229
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

49,025
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,722
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

8,188
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,261
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-a-151b1d45961cd
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-c-1efb1586c8299
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,491
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sqlite@3.48.0-r2
3.48.0-r3

Open the chart page →

2,950
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,284
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

9,096
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,708
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

24,995

Container images carrying it

1,283 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
3
alpine/git:2.47.2062a01ad7a0e
sqlite@3.48.0-r2
3.48.0-r3
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
sqlite@3.41.2-r2
3.41.2-r4
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
2
eqalpha/keydb:latest6537505c4235
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
hookiesolutions/webhookie:latest0629694246ba
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
2
interlayhq/interbtc:latesta66d0e35e70f
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1
2
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
2
istio/proxyv2:1.10.3a78b7a165744
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
langgenius/dify-sandbox:0.2.009b7e8705673
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
2
library/cassandra:4.1.37cbcec0086ac
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
library/elasticsearch:7.17.35e6ac15bf6a5
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
library/mariadb:10.8.30abf60f81588
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
2
library/mariadb:10.10334b315c10e5
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
library/mariadb:11.3.2e101f9db3191
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
library/mongo:5.041108d183e97
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1
2
library/mongo:4.2.358b25d51baa1
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2
2
library/phpmyadmin:5.2.16e75aa8f767c
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
library/postgres:16.109f23e02d766
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
library/postgres:16.24aea012537ed
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
library/postgres:16.4e62fbf9d3e2b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
library/python:3.7eedf63967cdb
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
library/python:3.7-alpinef3d31c8677d0
sqlite@3.41.2-r2
3.41.2-r4
2
library/rabbitmq:3.13.6-management-alpine611107e29cce
sqlite@3.45.3-r1
3.45.3-r3
2
library/rabbitmq:4.1.0-management935b3f84c1e4
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4
2
library/rabbitmq:3.12.1-managementf020c06da226
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
sqlite@3.45.3-r1
3.45.3-r3
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
2
lncm/bitcoind:v27.0324fec72192e
sqlite@3.44.2-r0
3.44.2-r2
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.