StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.725
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,281
of 17,787 indexed, latest versions
Container images
1,286
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more798
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7294
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars
ChartLatestAffected imagesRadar Score
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
SQLitePCLRaw.lib.e_sqlite3@2.1.10
no fix listed

Open the chart page →

2,615
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,061
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5

Open the chart page →

8,384
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,387
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

22,233
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
sqlite3@3.37.2-2ubuntu0.4
3.37.2-2ubuntu0.5

Open the chart page →

7,790
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,199
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

1,623
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

84,678
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

12,561
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

15,995
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,132
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4

Open the chart page →

10,076
cockroachdb-operator-chartcockroachdbv21.0.01 of 1See more

cockroachdb-operator-chart cockroachdbv2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
cockroachdb/cockroachdb-operator-v2:v1.0.04335d8bcbd3d
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7

Open the chart page →

842
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10

Open the chart page →

6,473
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,924
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

5,298
data-fairdata354-helmVerified publisher1.1.24 of 12See more

data-fair data354-helm 1.1.2

4 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sqlite@3.41.2-r2
3.41.2-r4
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/data-fair/processings:15a9216989707
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

38,424
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

4,759
dbrepodbrepo1.13.33 of 25See more

dbrepo dbrepo 1.13.3

3 of the 25 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
sqlite3@3.40.1-2
3.40.1-2+deb12u2
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
sqlite3@3.40.1-2
3.40.1-2+deb12u2
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

50,281
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

1,845
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
sqlite@3.45.3-r2
3.45.3-r3

Open the chart page →

9,239
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

6,237
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,978
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

8,842
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

10,884
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

18,402
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4

Open the chart page →

5,724
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

15,501
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

15,865
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10

Open the chart page →

31,572
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

11,483
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
3.22.0-1ubuntu0.7+esm2

Open the chart page →

6,515
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
omkara25/simple-microservice-app-user-service:v2d62cba548580
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

9,619
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
sqlite@3.48.0-r1
3.48.0-r3
featurehub/edge:1.9.198ad426737f6
sqlite@3.48.0-r1
3.48.0-r3
featurehub/mr:1.9.1477d8bf771a9
sqlite@3.48.0-r1
3.48.0-r3

Open the chart page →

8,237
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4

Open the chart page →

12,988
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
sqlite3@3.22.0-1ubuntu0.2
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,914
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

1,964
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,438
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,717
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

11,684
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2

Open the chart page →

11,579
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

5,175

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
yandex/clickhouse-server:19.17ab1738a64b70
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
yandex/clickhouse-server:19.16d210dc69321e
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
sqlite@3.48.0-r0
3.48.0-r3
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
sqlite@3.7.17-8.el7_7.1
0:3.7.17-9.el7_9.1
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
sqlite3@3.22.0-1ubuntu0.2
3.22.0-1ubuntu0.7+esm2
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
SQLitePCLRaw.lib.e_sqlite3@2.1.0
sqlite3@3.37.2-2ubuntu0.1
no fix listed
3.37.2-2ubuntu0.5
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
sqlite@3.49.2-r0
3.49.2-r1
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
sqlite@3.47.1-r0
3.48.0-r3
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/cosmicrocks/knots:29.2.knots20251010d7db5cd4079b
sqlite@3.45.3-r2
3.45.3-r3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.