StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.725
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,281
of 17,787 indexed, latest versions
Container images
1,286
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more798
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7294
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars
ChartLatestAffected imagesRadar Score
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,407
idmassist-iot-identity-manager0.1.02 of 2See more

idm assist-iot-identity-manager 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/identity-manager_kc:latest0df4b4fa899a
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

12,799
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
sqlite@3.41.2-r2
3.41.2-r4
assistiot/resource-provisioning_im:1.0.0a942dc14030a
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

8,042
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,982
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,368
smartorchestratorassist-iot-smart-orchestrator4.0.04 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
3.40.1-2+deb12u2
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
3.40.1-2+deb12u2
library/mongo:4.4.66efa05203990
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

42,460
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

1,165
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,986
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

8,555
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

955
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

1,515
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

2,388
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

20,785
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,738
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

22,916
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

10,171
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,499
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,299
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
sysnet4admin/colosseum-prm:log5802bfcd7fed
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

26,266
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

6,063
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,291
jenkinsbook-k8sinfra-v25.1.122 of 2See more

jenkins book-k8sinfra-v2 5.1.12

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
sqlite3@3.40.1-2
3.40.1-2+deb12u2
kiwigrid/k8s-sidecar:1.26.2e271016441af
sqlite@3.44.2-r0
3.44.2-r2

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,035
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagesbrixton-pages1.0.02 of 3See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

10,782
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,746
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4

Open the chart page →

14,446
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,947
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
geoservercamptocamp20.0.37 of 12See more

geoserver camptocamp2 0.0.3

7 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

88,377
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

6,158
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,932
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

10,318
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,233
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,521
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
sqlite@3.48.0-r0
3.48.0-r3

Open the chart page →

14,865
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

6,389
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

7,776
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

14,964
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

16,395
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
sqlite@3.48.0-r0
3.48.0-r3

Open the chart page →

1,124

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
sqlite@3.44.2-r0
3.44.2-r2
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
sqlite@3.45.3-r1
3.45.3-r3
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127
sqlite@3.34.1-7.el9_3
1:22.16.0-2.module+el9.6.0+23339+d3c8acfa
0:3.34.1-8.el9_6
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
sqlite@3.26.0-13.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:2021.06-4.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
3.22.0-1ubuntu0.7+esm2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.