StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.725
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,281
of 17,787 indexed, latest versions
Container images
1,286
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,281 of 17,787 indexed charts deploy, on 1,286 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more798
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7294
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,281 by stars
ChartLatestAffected imagesRadar Score
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
SQLitePCLRaw.lib.e_sqlite3@2.1.10
no fix listed

Open the chart page →

2,615
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,061
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5

Open the chart page →

8,384
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,387
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

22,233
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
sqlite3@3.37.2-2ubuntu0.4
3.37.2-2ubuntu0.5

Open the chart page →

7,790
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

13,199
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

7,239
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

1,623
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

84,678
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

12,561
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

15,995
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,132
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4

Open the chart page →

10,076
cockroachdb-operator-chartcockroachdbv21.0.01 of 1See more

cockroachdb-operator-chart cockroachdbv2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
cockroachdb/cockroachdb-operator-v2:v1.0.04335d8bcbd3d
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7

Open the chart page →

842
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10

Open the chart page →

6,473
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,924
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

5,298
data-fairdata354-helmVerified publisher1.1.24 of 12See more

data-fair data354-helm 1.1.2

4 of the 12 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sqlite@3.41.2-r2
3.41.2-r4
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/data-fair/processings:15a9216989707
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

38,424
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

4,759
dbrepodbrepo1.13.33 of 25See more

dbrepo dbrepo 1.13.3

3 of the 25 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
sqlite3@3.40.1-2
3.40.1-2+deb12u2
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
sqlite3@3.40.1-2
3.40.1-2+deb12u2
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

50,281
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

1,845
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
sqlite@3.45.3-r2
3.45.3-r3

Open the chart page →

9,239
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10

Open the chart page →

6,237
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,978
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

8,842
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

10,884
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

18,402
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4

Open the chart page →

5,724
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

15,501
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

15,865
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10

Open the chart page →

31,572
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

11,483
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
3.22.0-1ubuntu0.7+esm2

Open the chart page →

6,515
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
omkara25/simple-microservice-app-user-service:v2d62cba548580
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

9,619
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
sqlite@3.48.0-r1
3.48.0-r3
featurehub/edge:1.9.198ad426737f6
sqlite@3.48.0-r1
3.48.0-r3
featurehub/mr:1.9.1477d8bf771a9
sqlite@3.48.0-r1
3.48.0-r3

Open the chart page →

8,237
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4

Open the chart page →

12,988
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
sqlite3@3.22.0-1ubuntu0.2
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,914
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
sqlite@3.41.2-r3
3.41.2-r4

Open the chart page →

1,964
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,438
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,717
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

11,684
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2

Open the chart page →

11,579
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

5,175

Container images carrying it

1,286 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/apollo:0.0.1055330b1b60c1
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/flomesh/toolbox-ubi8:1.2.01f5e3161cb84
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/frrouting/frr:9.0.2086acb1278fe
sqlite@3.41.2-r2
3.41.2-r4
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
nodejs@1:12.18.2-1.module+el8.2.0+7233+61d664c1
nodejs-nodemon@1.18.3-1.module+el8.1.0+3369+37ae6a45
sqlite@3.26.0-6.el8
1:22.16.0-2.module+el8.10.0+23338+c5a38893
0:3.0.1-1.module+el8.10.0+23140+4056b950
0:3.26.0-20.el8_10
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak:26.009a381c715ab
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
sqlite@3.34.1-6.el9_1
0:3.34.1-8.el9_6
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
sqlite@3.48.0-r0
3.48.0-r3
1
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
sqlite@3.41.2-r2
3.41.2-r4
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
sqlite@3.34.1-8.el9_6
0:3.34.1-9.el9_7
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.