StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.758
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,277
of 17,781 indexed, latest versions
Container images
1,283
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,277 of 17,781 indexed charts deploy, on 1,283 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more797
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7292
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,277 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

13,551
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,222
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

10,994
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,698
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SQLitePCLRaw.lib.e_sqlite3@2.1.0
no fix listed

Open the chart page →

1,381
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,581
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

12,958
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

12,076
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

10,379
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,768
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,895
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

26,944
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,929
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
library/elasticsearch:7.17.1588c2ec10c7f2
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
library/kibana:7.17.150172f1c538e7
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

34,754
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,756
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/pilot:1.2.9c09319753454
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/proxyv2:1.2.90c78be035e98
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,102
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

901
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,170
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,789
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,229
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

49,025
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,722
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

8,188
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,261
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-a-151b1d45961cd
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-c-1efb1586c8299
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,491
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sqlite@3.48.0-r2
3.48.0-r3

Open the chart page →

2,950
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,284
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

9,096
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,708
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

24,995

Container images carrying it

1,283 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
locustio/locust:2.32.2a0d4b88e42c1
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
mbentley/omada-controller:4.3f4e682274bed
sqlite3@3.22.0-1ubuntu0.7
3.22.0-1ubuntu0.7+esm2
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
minio/operator:v4.3.754393e03f3b2
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
2
opea/embedding-tei:1.05c9639de61c1
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
opea/reranking-tei:1.0e48613afb191
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
opea/retriever-redis:1.0eb746b263705
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
2
organizr/organizr:latest1ce319d73cdf
sqlite@3.41.2-r2
3.41.2-r4
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
rajnandan1/kener:3.2.1930407afca731
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
2
uffizzi/controller:latest0344805f267b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
wurstmeister/zookeeper:latest7a7fd44a7210
sqlite3@3.8.2-1ubuntu2
3.8.2-1ubuntu2.2+esm5
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm3
2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
sqlite@3.44.2-r0
3.44.2-r2
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5
2
ghcr.io/eosc-lot-1/s3cmd:2-alpine49bce0dd876d
sqlite@3.44.2-r0
3.44.2-r2
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
sqlite3@3.40.1-2
3.40.1-2+deb12u2
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
sqlite@3.49.2-r0
3.49.2-r1
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
sqlite@3.47.1-r0
3.48.0-r3
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
sqlite@3.26.0-17.el8_7
0:3.26.0-20.el8_10
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
2
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
sqlite@3.44.2-r0
3.44.2-r2
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
sqlite@3.45.3-r1
3.45.3-r3
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.