CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.725; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,281; of 17,787 indexed, latest versions
Container images: 1,286; deployed by those charts
Fix available: 7 of 8; affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected package	Affected versions	Fixed in	Images
SQLitePCLRaw.lib.e_sqlite3nuget	2.0.4, 2.0.6, 2.1.0, 2.1.6+1 more	no fix listed	16
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more	3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more	798
sqliterpm	3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more	0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7	294
sqliteapk	3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more	3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more	176
nodejsrpm	1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more	1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd01	14
nodejs-packagingrpm	23-3.module+el8.3.0+6519+9f98ed83	0:2021.06-4.module+el8.10.0+23140+4056b950	6
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd	0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa	4
sqlite3rpm	3.28.0-lp151.2.3.1	3.50.3-1.1	2

OSV records: GHSA-2m69-gcr7-jv3q ALPINE-CVE-2025-6965 DEBIAN-CVE-2025-6965 RHSA-2025:11802 RHSA-2025:11803 RHSA-2025:11992 RHSA-2025:12010 RHSA-2025:12349 RHSA-2025:20936 RLSA-2025:11802 RLSA-2025:11992 RLSA-2025:12010 RLSA-2025:20936 UBUNTU-CVE-2025-6965 openSUSE-SU-2025:15368-1
Also known as: BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars

Chart

Latest

Affected images

Radar Score

ilum-marquezilum

6.7.0

1 of 3 See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

6,282

ilum-unity-catalogilum

0.1.0

1 of 4 See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

11,838

plausible-analyticsimio

0.4.2

2 of 5 See more

plausible-analytics imio 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2
ghcr.io/plausible/community-edition :v3.0.1	14c1afde21d6	sqlite@3.48.0-r0	3.48.0-r3

Open the chart page →

10,152

kore-boardimprowised

0.5.8

1 of 4 See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	sqlite3@3.22.0-1ubuntu0.7	3.22.0-1ubuntu0.7+esm2

Open the chart page →

16,226

proxysqlimprowised

1.0.0

1 of 1 See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
improwised/proxysql :master-6b26e59-1717650638	28940522e8b7	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

3,183

guardrails-usvcinfracloud-charts

1.0.1

1 of 1 See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
opea/guardrails-tgi :latest	f68bec6a1271	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

5,069

cloudshellinseefrlab

4.3.0

1 of 2 See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
inseefrlab/shelly :cloudshell	31f04ca7436b	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

10,542

evi-miniointel

3.0.3

2 of 2 See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10

Open the chart page →

7,457

gmaintel

0.1.0

1 of 1 See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,697

itm-servicesintel

2.0.0

1 of 8 See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,137

kesintel

0.8.3

1 of 1 See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
minio/kes :v0.22.2	55f3aef5803e	sqlite@3.26.0-16.el8_6	0:3.26.0-20.el8_10

Open the chart page →

3,570

map5gintel

1.0.0

1 of 1 See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,697

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,123

tcs-issuerintel

0.5.0

1 of 2 See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

5,996

intelowlintelowl-helm

6.6.1-01-06-2026

1 of 5 See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

16,558

interbtc-parachaininterlay

0.4.13

1 of 1 See more

interbtc-parachain interlay 0.4.13

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
interlayhq/interbtc :latest	a66d0e35e70f	sqlite3@3.31.1-4ubuntu0.7	3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,195

polkabtc-parachaininterlay

0.2.41

1 of 4 See more

polkabtc-parachain interlay 0.2.41

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
interlayhq/interbtc :latest	a66d0e35e70f	sqlite3@3.31.1-4ubuntu0.7	3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,937

daveit-at-m

0.2.15

2 of 11 See more

dave it-at-m 0.2.15

2 of the 11 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

15,245

kf-app-eaiit-at-m

0.1.7

1 of 1 See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/kf-app-eai :1.0.6	5de339b3d537	sqlite@3.34.1-8.el9_6	0:3.34.1-9.el9_7

Open the chart page →

1,965

wjh-rechnerit-at-m

1.0.4

1 of 1 See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/wjh-rechner :1.0.0	bc70cdb5a01a	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6

Open the chart page →

3,487

opencloudjacobcolvin

0.2.3

2 of 13 See more

opencloud jacobcolvin 0.2.3

2 of the 13 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4
quay.io/keycloak/keycloak :26.1.4	044a457e0498	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6

Open the chart page →

45,392

koptimizejaconi

0.5.4

1 of 2 See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
alpine/k8s :1.27.3	21b24e6bf801	sqlite@3.41.2-r2	3.41.2-r4

Open the chart page →

5,716

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

10,816

jasperjasper

1.0.203

1 of 2 See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

9,148

13ftjeffresc

0.2.0

1 of 1 See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/wasi-master/13ft :0.3.4	563ce7794a71	sqlite@3.44.2-r0	3.44.2-r2

Open the chart page →

887

esphomejeffresc

0.2.2

1 of 1 See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/esphome/esphome :2026.4.0	78a82d810709	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

5,066

jellyfinjellyfin-helm

10.9.10

1 of 1 See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.9.10	79fb3d73a3e9	SQLitePCLRaw.lib.e_sqlite3@2.1.6	no fix listed

Open the chart page →

4,097

jellyfinjellyfin--jellyfin-helm

3.0.0

1 of 1 See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.7	17285f9cce63	SQLitePCLRaw.lib.e_sqlite3@2.1.10	no fix listed

Open the chart page →

2,967

jx-app-anchorejenkins-x

0.0.4

1 of 2 See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.7.1	ed9b3badd17c	sqlite@3.26.0-4.el8_1	0:3.26.0-20.el8_10

Open the chart page →

9,853

nexusjenkins-x

0.1.37

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	sqlite@3.26.0-6.el8	0:3.26.0-20.el8_10

Open the chart page →

12,856

dayz-dedicated-server-razorbladex401jespernohr

1.0.3

1 of 1 See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
razorbladex401/dayz :latest	6a4d79248e7d	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

5,256

discord-experiencebotjfwenisch

0.7.4

1 of 1 See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	sqlite3@3.22.0-1ubuntu0.7	3.22.0-1ubuntu0.7+esm2

Open the chart page →

7,842

steamcmd-managerjfwenisch

0.4.5

1 of 1 See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4

Open the chart page →

6,648

webtoolsjfwenisch

0.1.4

1 of 1 See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4

Open the chart page →

6,629

image-storage-servicejtekt

0.4.3

1 of 4 See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

22,665

shinsei-managerjtekt

0.2.0

3 of 8 See more

shinsei-manager jtekt 0.2.0

3 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
moreillon/api-proxy :latest	d7d4a5463525	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	sqlite3@3.40.1-2	3.40.1-2+deb12u2
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

59,560

time-series-storagejtekt

0.1.10

1 of 2 See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

16,626

bitcoin-stackk8s-charts

1.0.1

1 of 1 See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
blockstream/bitcoind :27.2	9472492530e3	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

2,425

jellyfink8s-charts

0.2.4

1 of 1 See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.10.6	96b09723b22f	SQLitePCLRaw.lib.e_sqlite3@2.1.6	no fix listed

Open the chart page →

4,116

nostr-rs-relayk8s-charts

1.0.1

1 of 1 See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
scsibug/nostr-rs-relay :0.9.0	03f54bfbffff	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

3,360

valheim-serverk8s-charts

1.3.0

1 of 1 See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
mbround18/valheim :3.1.0	70bd4da591cd	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

6,136

k8s-dev-podk8s-dev-pod

0.3.1

1 of 1 See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	sqlite3@3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.4

Open the chart page →

8,879

beetsk8s-home-lab-repo

3.1.1

1 of 1 See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/beets :2.3.1	cc4975f1a0be	sqlite@3.49.2-r0	3.49.2-r1

Open the chart page →

2,732

organizrk8s-home-lab-repo

8.1.1

1 of 1 See more

organizr k8s-home-lab-repo 8.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
organizr/organizr :latest	1ce319d73cdf	sqlite@3.41.2-r2	3.41.2-r4

Open the chart page →

1,532

youtubedl-materialk8s-home-lab-repo

5.1.1

1 of 1 See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :4.3.2	2f943d584711	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

9,832

zurgk8s-home-lab-repo

1.2.1

1 of 1 See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

1,732

librephotosk8sonlab

1.1.6

1 of 7 See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

14,833

netio-exporterk8sonlab

0.1.10

1 of 1 See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
tomsajan/netio-exporter :0.0.5	fb61907707b8	sqlite@3.44.2-r0	3.44.2-r2

Open the chart page →

728

unifik8sonlab

0.3.7

1 of 1 See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	sqlite3@3.31.1-4ubuntu0.7	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,333

kadeck-webkadeck

0.6.0

1 of 1 See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
xeotek/kadeck :4.2.9	4c6b04d9ce55	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,292

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
yandex/clickhouse-server :19.17	ab1738a64b70	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.16	d210dc69321e	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2	1
ybucci/traefik-external-dns-operator :1.0.0	f1fcc7c8d9fd	sqlite@3.48.0-r0	3.48.0-r3	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5	1
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	sqlite3@3.22.0-1ubuntu0.2	3.22.0-1ubuntu0.7+esm2	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/axoflow/axosyslog :4.5.0	aa7831e207cd	sqlite@3.41.2-r2	3.41.2-r4	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	SQLitePCLRaw.lib.e_sqlite3@2.1.0 sqlite3@3.37.2-2ubuntu0.1	no fix listed 3.37.2-2ubuntu0.5	1
ghcr.io/b-it-projects-gmbh/nvme_exporter :latest	e70307b193c6	sqlite@3.49.2-r0	3.49.2-r1	1
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	sqlite@3.47.1-r0	3.48.0-r3	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/cosmicrocks/knots :29.2.knots20251010	d7db5cd4079b	sqlite@3.45.3-r2	3.45.3-r3	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/ctron/ditto-operator :0.4.0	61a9bb81b85c	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1