StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.725
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,281
of 17,787 indexed, latest versions
Container images
1,286
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more798
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7294
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

8,842
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5

Open the chart page →

6,597
airflowairflow-helmVerified publisher8.9.02 of 4See more

airflow airflow-helm 8.9.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

11,372
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

7,713
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
sqlite@3.48.0-r0
3.48.0-r3

Open the chart page →

24,009
graylogkong-zVerified publisher3.0.321 of 5See more

graylog kong-z 3.0.32

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10

Open the chart page →

2,736
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,557
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

5,948
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

2,102
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

9,194
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
milvusdb/milvus:v2.2.13a3a55e1c1497
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

10,648
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

6,761
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

2,660
community-operatormongodb-helm-charts0.13.01 of 1See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10

Open the chart page →

1,126
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

4,808
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

19,497
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4

Open the chart page →

3,645
eclipse-cheeclipse-cheVerified publisher7.122.01 of 1See more

eclipse-che eclipse-che 7.122.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10

Open the chart page →

924
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

23,992
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

19,998
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

33,907
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

3,700
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

6,550
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

6,012
pypiservercommunity-chartsVerified publisher0.1.91 of 1See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v2.4.1e935e19433ef
sqlite@3.45.3-r2
3.45.3-r3

Open the chart page →

583
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,830
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

4,574
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

15,607
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
SQLitePCLRaw.lib.e_sqlite3@2.0.4
sqlite3@3.31.1-4ubuntu0.3
no fix listed
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,917
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

6,040
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10

Open the chart page →

6,853
glasskube-operatorglasskubeOfficialVerified publisher0.12.22 of 3See more

glasskube-operator glasskube 0.12.2

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10

Open the chart page →

11,971
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

4,854
milvusmilvus-helm5.0.281 of 4See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

10,764
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

5,448
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7

Open the chart page →

6,385
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,570
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10

Open the chart page →

6,675
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2api:3.86f56d239d280
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2auth:3.833ecfda16608
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2notifier:3.8f190a6212195
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2rulesengine:3.8259503496ff9
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2scheduler:3.8b1de2055c362
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2sensorcontainer:3.8b1a338f64773
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2stream:3.81c8904a3bf67
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2timersengine:3.81bf35bfaf00c
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2web:3.809989a26c8b7
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
stackstorm/st2workflowengine:3.819fdfffdbba8
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

96,984
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
supabase/storage-api:v1.12.0f983fb50bd95
sqlite@3.45.3-r1
3.45.3-r3
supabase/studio:20241021-9f9b08326d8070c55e9
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

23,263
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

8,530
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

4,412
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,453
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
SQLitePCLRaw.lib.e_sqlite3@2.1.0
sqlite3@3.37.2-2ubuntu0.1
no fix listed
3.37.2-2ubuntu0.5

Open the chart page →

4,281
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
3.40.1-2+deb12u2
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

31,447
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4

Open the chart page →

3,645
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4

Open the chart page →

5,396
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
gitea/gitea:1.22.376f516a1a8c2
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

23,289
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
sqlite3@3.40.1-2
3.40.1-2+deb12u2
openmined/syft-seaweedfs:0.9.53a4144c0bb82
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

17,306

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
sqlite@3.48.0-r2
3.48.0-r3
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
sqlite@3.41.2-r3
3.41.2-r4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
sqlite@3.48.0-r0
3.48.0-r3
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.