StackRadar

CVE-2025-6965

Critical

Advisory

Published 15 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.758
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,277
of 17,781 indexed, latest versions
Container images
1,283
deployed by those charts
Fix available
7 of 8
affected packages

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Carried by container images the latest versions of 1,277 of 17,781 indexed charts deploy, on 1,283 images.

Affected packageAffected versionsFixed inImages
SQLitePCLRaw.lib.e_sqlite3nuget2.0.4, 2.0.6, 2.1.0, 2.1.6+1 moreno fix listed16
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+27 more3.8.2-1ubuntu2.2+esm5, 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1+3 more797
sqliterpm3.7.17-8.el7, 3.7.17-8.el7_7.1, 3.26.0-3.el8, 3.26.0-4.el8_1+13 more0:3.7.17-9.el7_9.1, 0:3.26.0-20.el8_10, 0:3.34.1-8.el9_6, 0:3.34.1-9.el9_7292
sqliteapk3.41.2-r2, 3.41.2-r3, 3.44.2-r0, 3.44.2-r1+7 more3.41.2-r4, 3.44.2-r2, 3.45.3-r3, 3.48.0-r3+1 more176
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+5 more1:22.16.0-2.module+el8.10.0+23338+c5a38893, 1:22.16.0-2.module+el9.6.0+23339+d3c8acfa, 1:22.16.0-2.module+el9.6.0+32322+a8b1fd0114
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+23140+4056b9506
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034, 3.0.1-1.module+el9.6.0+23146+be9976bd0:3.0.1-1.module+el8.10.0+23140+4056b950, 0:3.0.1-1.module+el9.6.0+23339+d3c8acfa4
sqlite3rpm3.28.0-lp151.2.3.13.50.3-1.12
OSV records
GHSA-2m69-gcr7-jv3qALPINE-CVE-2025-6965DEBIAN-CVE-2025-6965RHSA-2025:11802RHSA-2025:11803RHSA-2025:11992RHSA-2025:12010RHSA-2025:12349RHSA-2025:20936RLSA-2025:11802RLSA-2025:11992RLSA-2025:12010RLSA-2025:20936UBUNTU-CVE-2025-6965openSUSE-SU-2025:15368-1
Also known as
BIT-sqlite-2025-6965, RHSA-2025:12036, RHSA-2025:12521, RHSA-2025:12749, RHSA-2025:12901, RHSA-2025:12904, RHSA-2025:12905, USN-7676-1, USN-7679-1

Charts affected

1,277 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7+esm2

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

18,230
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,659
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

13,551
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

12,222
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,545
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

8,943
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

10,994
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

9,698
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SQLitePCLRaw.lib.e_sqlite3@2.1.0
no fix listed

Open the chart page →

1,381
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

12,581
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

12,958
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

12,076
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
sqlite3@3.37.2-2
3.37.2-2ubuntu0.5

Open the chart page →

10,379
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

7,768
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

5,895
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7+esm2

Open the chart page →

26,944
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

17,929
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
sqlite3@3.31.1-4ubuntu0.7
3.31.1-4ubuntu0.7+esm1

Open the chart page →

3,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
library/elasticsearch:7.17.1588c2ec10c7f2
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
library/kibana:7.17.150172f1c538e7
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

34,754
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1

Open the chart page →

16,756
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/pilot:1.2.9c09319753454
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3
istio/proxyv2:1.2.90c78be035e98
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm3

Open the chart page →

36,102
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
sqlite@3.41.2-r2
3.41.2-r4

Open the chart page →

901
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

12,170
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,789
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7+esm2

Open the chart page →

19,229
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.4
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

49,025
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

15,722
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
sqlite@3.26.0-11.el8
0:3.26.0-20.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
sqlite@3.34.1-7.el9_3
0:3.34.1-8.el9_6

Open the chart page →

8,188
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

5,261
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-a-151b1d45961cd
sqlite@3.45.3-r1
3.45.3-r3
clsen2024/gwangju_2-3:service-c-1efb1586c8299
sqlite@3.45.3-r1
3.45.3-r3

Open the chart page →

6,491
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sqlite@3.48.0-r2
3.48.0-r3

Open the chart page →

2,950
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

2,284
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2

Open the chart page →

7,344
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5

Open the chart page →

9,096
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1

Open the chart page →

6,708
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-6965.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
sqlite3@3.31.1-4ubuntu0.6
3.31.1-4ubuntu0.7+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
3.40.1-2+deb12u2

Open the chart page →

24,995

Container images carrying it

1,283 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
sqlite3@3.37.2-2ubuntu0.4
3.37.2-2ubuntu0.5
1
andreymileshin/kube-info:v0.1.0f7b300bc9e66
sqlite@3.44.2-r0
3.44.2-r2
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
sqlite@3.44.2-r0
3.44.2-r2
1
andrianrf/backoffice:latest047a7837651e
sqlite@3.26.0-19.el8_9
0:3.26.0-20.el8_10
1
andrianrf/backoffice-be:latest6036614803d4
sqlite@3.34.1-6.el9_1
0:3.34.1-8.el9_6
1
andrianrf/iso-server:latest7da47f525c7d
sqlite@3.34.1-6.el9_1
0:3.34.1-8.el9_6
1
anguda/ant-media:2.5c435285fc241
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
anujdatar/cups:25.07.01685df04a643b
sqlite3@3.40.1-2+deb12u1
3.40.1-2+deb12u2
1
apache/airflow:2.8.4-python3.964e58748b6b9
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
apache/airflow:2.8.1e5560ad0b86e
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
apache/camel-k:1.10.43bb13d14f64a
sqlite@3.26.0-16.el8_6
0:3.26.0-20.el8_10
1
apache/iotdb:0.13.3-nodeafa47bf1692a
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.7+esm1
1
apache/kafka:3.9.0fbc7d7c428e3
sqlite@3.45.3-r1
3.45.3-r3
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
apachepulsar/pulsar:2.9.0d056c89b7131
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
apache/ranger:2.7.076c176e8a0e4
sqlite3@3.37.2-2ubuntu0.4
3.37.2-2ubuntu0.5
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
apache/skywalking-ui:8.9.180530f0308a5
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.7+esm1
1
apache/superset:4.0.1ab9467fd712c
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
apache/tika:2.9.0.092d055a84e9e
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
sqlite@3.41.2-r2
3.41.2-r4
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
sqlite@3.26.0-13.el8
0:3.26.0-20.el8_10
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
sqlite@3.26.0-18.el8_8
0:3.26.0-20.el8_10
1
aristidetm/basic-notebook:3.6.5469dbc951224
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.7+esm1
1
assistiot/identity-manager_db:latest0d3e6d35f168
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
assistiot/identity-manager_kc:latest0df4b4fa899a
sqlite@3.26.0-15.el8
0:3.26.0-20.el8_10
1
assistiot/open_api_backend:1.1.230812ba93555
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
sqlite@3.41.2-r2
3.41.2-r4
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
sqlite@3.44.2-r0
3.44.2-r2
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
3.40.1-2+deb12u2
1
assistiot/traffic-classification_api:2.0.0e32b87786142
sqlite@3.44.2-r0
3.44.2-r2
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
sqlite3@3.31.1-4ubuntu0.5
3.31.1-4ubuntu0.7+esm1
1
atlassian/confluence-server:7.10.03b9222ab32ef
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.5
1
atlassian/jira-software:8.14.037bc46cbec1a
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.5
1
atlassian/jira-software:9.7.264a75aa4ec4e
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.