StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.725
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,281
of 17,787 indexed, latest versions
Container images
1,286
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more798
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7294
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars
ChartLatestAffected imagesRadar Score
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,407
idmassist-iot-identity-manager0.1.02 of 2See more

idm assist-iot-identity-manager 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/identity-manager_kc:latest0df4b4fa899a
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

12,799
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
sqlite@3.41.2-r2
3.41.2-r4
assistiot/resource-provisioning_im:1.0.0a942dc14030a
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

8,042
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,982
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,368
smartorchestratorassist-iot-smart-orchestrator4.0.04 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
3.40.1-2+deb12u2
library/mongo:4.4.66efa05203990
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

42,460
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

1,165
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,986
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

8,555
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

955
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

1,515
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

2,388
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

20,785
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,738
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

22,916
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

10,171
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,499
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,299
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
sysnet4admin/colosseum-prm:log5802bfcd7fed
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

26,266
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

6,063
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,291
jenkinsbook-k8sinfra-v25.1.122 of 2See more

jenkins book-k8sinfra-v2 5.1.12

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
sqlite3@3.40.1-2
3.40.1-2+deb12u2
kiwigrid/k8s-sidecar:1.26.2e271016441af
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,035
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagesbrixton-pages1.0.02 of 3See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,782
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,746
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4

Open the chart page →

14,446
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,947
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
geoservercamptocamp20.0.37 of 12See more

geoserver camptocamp2 0.0.3

7 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

88,377
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

6,158
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,932
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

10,318
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,521
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
sqlite@3.48.0-r0
3.48.0-r3

Open the chart page →

14,865
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

6,389
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

7,776
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

14,964
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

16,395
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
sqlite@3.48.0-r0
3.48.0-r3

Open the chart page →

1,124

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
sqlite@3.48.0-r2
3.48.0-r3
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
sqlite@3.41.2-r3
3.41.2-r4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
sqlite@3.48.0-r0
3.48.0-r3
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
sqlite@3.41.2-r2
3.41.2-r4
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.