CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.725; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,281; of 17,787 indexed, latest versions
Container images: 1,286; deployed by those charts
Fix available: 7 of 8; affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected package	Affected versions	Fixed in	Images
SQLitePCLRaw.lib.e_sqlite3nuget	2.0.4, 2.0.6, 2.1.0, 2.1.6+1 more	no fix listed	16
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more	3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more	798
sqliterpm	3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more	0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7	294
sqliteapk	3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more	3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more	176
nodejsrpm	1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more	1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd01	14
nodejs-packagingrpm	23-3.module+el8.3.0+6519+9f98ed83	0:2021.06-4.module+el8.10.0+23140+4056b950	6
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd	0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa	4
sqlite3rpm	3.28.0-lp151.2.3.1	3.50.3-1.1	2

OSV records: GHSA-2m69-gcr7-jv3q ALPINE-CVE-2025-6965 DEBIAN-CVE-2025-6965 RHSA-2025:11802 RHSA-2025:11803 RHSA-2025:11992 RHSA-2025:12010 RHSA-2025:12349 RHSA-2025:20936 RLSA-2025:11802 RLSA-2025:11992 RLSA-2025:12010 RLSA-2025:20936 UBUNTU-CVE-2025-6965 openSUSE-SU-2025:15368-1
Also known as: BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars

Chart

Latest

Affected images

Radar Score

unitycatalogunitycatalog

0.0.2

1 of 4 See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

12,581

upbot-operatorupbot-operator

0.0.20

1 of 2 See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.13	e5c0b053fed7	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

4,460

varnish-cachevarnish

1.1.1

1 of 1 See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/varnish :7.5.0	4d0bb287d87b	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

4,249

verbacapverbacap

1.0.7

1 of 1 See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/mirio/verbacap :v1.5.0	84928e2fc4f2	sqlite@3.44.2-r0	3.44.2-r2

Open the chart page →

2,233

tdarrvhdirk

5.0.5

2 of 2 See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.7+esm1

Open the chart page →

26,657

phpipamvquie

1.0.3

1 of 3 See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/mariadb :10.11.2	1c33370a599c	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

7,025

wavefront-adapter-for-istiowavefront

0.1.4

1 of 2 See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
wavefronthq/proxy :9.2	d1064d28f6eb	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2

Open the chart page →

15,970

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	sqlite3@3.8.2-1ubuntu2	3.8.2-1ubuntu2.2+esm5

Open the chart page →

41,427

spark-operatorwikimedia

2.2.7

1 of 1 See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	sqlite3@3.31.1-4ubuntu0.6	3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,835

wraftwraft

0.1.12

1 of 9 See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10

Open the chart page →

10,090

redirectwyrihaximusnet

1.1.0

1 of 1 See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

1,581

raponchiygdrassil

0.4.0

1 of 1 See more

raponchi ygdrassil 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
elautoestopista/raponchi :0.3.0	b6f74db9fc81	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

1,315

youtubedl-materialyoutubedl-material

0.0.1

1 of 1 See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :latest	2f943d584711	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

9,783

qleverzazuko

0.7.0

1 of 2 See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/zazukoians/qlever-ui :v0.10.0	34c7b540a095	sqlite@3.45.3-r1	3.45.3-r3

Open the chart page →

2,900

backendzymtrace

26.9.1

1 of 6 See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/postgres :17.4	304ab8135187	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

10,323

acos-prometheus-exporter-helm-charta10-prometheus-exporter

0.1.0

1 of 1 See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,007

keycloakaccount-service

18.4.5

1 of 2 See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10

Open the chart page →

7,713

open5gsadaptivenetlab

1.0.3

2 of 3 See more

open5gs adaptivenetlab 1.0.3

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
free5gmano/nextepc-mongodb :latest	36f806935519	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

25,443

aktoakto

0.2.0

2 of 7 See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10

Open the chart page →

13,613

akto-ai-guardrails-v2akto

0.3.0

1 of 6 See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.4.0-v1	72035434f455	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

9,321

akto-mini-testing-kafkaakto

1.42.1

2 of 5 See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :7.8.0-3-ubi8	adc392d28a1e	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10
confluentinc/cp-zookeeper :7.8.0-3-ubi8	5ca5f3269814	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10

Open the chart page →

6,397

akto-mrs-runtime-combinedakto

0.0.2

1 of 2 See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.1.0-1-ubi9	9026dbbf280d	sqlite@3.34.1-8.el9_6	0:3.34.1-9.el9_7

Open the chart page →

1,826

akto-protectionakto

0.1.0

2 of 4 See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10

Open the chart page →

11,285

akto-regional-setupakto

1.3.1

1 of 9 See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.4.0	72035434f455	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5

Open the chart page →

7,603

esphomealexmorbo-esphome

1.0.0

1 of 1 See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
esphome/esphome :2024.12.2	b2c6322700ac	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

6,324

pagesalstom-pages-app

1.0.0

2 of 3 See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
flyway/flyway :6.4.4	22d97ceb0c47	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190

amorphieamorphie

0.1.2

1 of 18 See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
hazelcast/management-center :5.3.2	f9d34300d330	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10

Open the chart page →

28,131

anchore-admission-controlleranchore-charts

0.8.5

1 See more

anchore-admission-controller anchore-charts 0.8.5

1 container image this version deploys carries CVE-2025-6965.

Container image	Digest	Package	Fixed in
cfssl/cfssl :v1.6.5	c9018c2ddf0b	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

—

pagesandrei-pages

1.0.0

2 of 3 See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
flyway/flyway :6.4.4	22d97ceb0c47	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190

omada-controllerandrelote-k8s

4.5.0

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	sqlite3@3.22.0-1ubuntu0.7	3.22.0-1ubuntu0.7+esm2

Open the chart page →

11,553

games-on-whalesangelnu

2.0.0

4 of 7 See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	sqlite3@3.37.2-2ubuntu0.4	3.37.2-2ubuntu0.5
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

42,126

ddosifyanteon

1.7.5

2 of 13 See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	sqlite3@3.40.1-2	3.40.1-2+deb12u2
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	sqlite3@3.40.1-2	3.40.1-2+deb12u2

Open the chart page →

25,669

monitoringantmedia

1.0.0

1 of 6 See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
confluentinc/cp-zookeeper :latest	7610a50b13e7	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10

Open the chart page →

2,453

apishiftapishift

0.3.0

1 of 4 See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6

Open the chart page →

2,902

d.vazquezm.2021_helmapphelm

1.0.0

1 of 6 See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1

Open the chart page →

19,745

app-mobilityappmo

0.1.0

2 of 5 See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10

Open the chart page →

12,521

inbox-server-distributedappscode

2025.12.25

2 of 4 See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/cassandra :4.1.3	7cbcec0086ac	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5
library/rabbitmq :3.12.1-management	f020c06da226	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

15,573

james-komposeappscode

0.1.0

2 of 4 See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/cassandra :4.1.3	7cbcec0086ac	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5
library/rabbitmq :3.12.1-management	f020c06da226	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5

Open the chart page →

16,975

managed-serviceaccountappscode

2024.2.25

1 of 1 See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/managed-serviceaccount :latest	365183f83ac9	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10

Open the chart page →

2,404

minioappscode

2026.9.11

1 of 1 See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	sqlite@3.26.0-16.el8_6	0:3.26.0-20.el8_10

Open the chart page →

4,043

multicluster-controlplaneappscode

2025.4.30

1 of 1 See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/multicluster-controlplane :latest	6de40f528be9	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10

Open the chart page →

2,569

maxscaleappuio

2.0.1

1 of 1 See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10

Open the chart page →

2,903

appwriteappwrite-helm

1.3.2

1 of 8 See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
openruntimes/executor :0.11.4	2228f186dcbb	sqlite@3.44.2-r0	3.44.2-r2

Open the chart page →

9,847

argocdargo-helm-charts

1.0.0

1 of 3 See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	sqlite3@3.45.1-1ubuntu2.1	3.45.1-1ubuntu2.4

Open the chart page →

7,300

arlas-aiasarlas-stack

28.8.0

2 of 22 See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2
ghcr.io/developmentseed/titiler :0.22.4	8ac53eb38393	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2

Open the chart page →

40,238

arma-reforgerarma-reforger

0.5.3

1 of 8 See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

23,353

keystonearzu

0.2.29

3 of 4 See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
library/rabbitmq :3.7-management	b6dd45cc35b3	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1

Open the chart page →

22,568

automatedconfigurationassist-iot-automated-configuration

1.0.0

2 of 5 See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :7.5.1	dc9b972db002	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10

Open the chart page →

14,728

dltkvassist-iot-data-integrity-verification

0.2.0

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

0.2.0

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,706

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
yandex/clickhouse-server :19.17	ab1738a64b70	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2	1
yandex/clickhouse-server :19.16	d210dc69321e	sqlite3@3.22.0-1ubuntu0.3	3.22.0-1ubuntu0.7+esm2	1
ybucci/traefik-external-dns-operator :1.0.0	f1fcc7c8d9fd	sqlite@3.48.0-r0	3.48.0-r3	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.4	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	sqlite3@3.37.2-2	3.37.2-2ubuntu0.5	1
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	sqlite3@3.22.0-1ubuntu0.2	3.22.0-1ubuntu0.7+esm2	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	sqlite3@3.11.0-1ubuntu1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	sqlite3@3.11.0-1ubuntu1.1	3.11.0-1ubuntu1.5+esm3	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/axoflow/axosyslog :4.5.0	aa7831e207cd	sqlite@3.41.2-r2	3.41.2-r4	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	SQLitePCLRaw.lib.e_sqlite3@2.1.0 sqlite3@3.37.2-2ubuntu0.1	no fix listed 3.37.2-2ubuntu0.5	1
ghcr.io/b-it-projects-gmbh/nvme_exporter :latest	e70307b193c6	sqlite@3.49.2-r0	3.49.2-r1	1
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	sqlite@3.47.1-r0	3.48.0-r3	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	sqlite3@3.31.1-4ubuntu0.5	3.31.1-4ubuntu0.7+esm1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	sqlite3@3.40.1-2	3.40.1-2+deb12u2	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/cosmicrocks/knots :29.2.knots20251010	d7db5cd4079b	sqlite@3.45.3-r2	3.45.3-r3	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	sqlite3@3.40.1-2+deb12u1	3.40.1-2+deb12u2	1
ghcr.io/ctron/ditto-operator :0.4.0	61a9bb81b85c	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6 nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83 sqlite@3.26.0-13.el8	1:22.16.0-2.module+el8.10.0+23338+c5a38893 0:2021.06-4.module+el8.10.0+23140+4056b950 0:3.26.0-20.el8_10	1