StackRadar

CVE-2025-70873

High

Advisory

Published 12 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,113
of 17,792 indexed, latest versions
Container images
894
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.3-1.1 on GA media

Carried by container images the latest versions of 1,113 of 17,792 indexed charts deploy, on 894 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.46.1-7+4 more3.46.1-7+e2892
sqlite3rpm3.28.0-lp151.2.3.13.51.3-1.12
OSV records
DEBIAN-CVE-2025-70873ECHO-186e-750f-440bopenSUSE-SU-2026:10406-1

Charts affected

1,113 by stars
ChartLatestAffected imagesRadar Score
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,874
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,483
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,664
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
sqlite3@3.40.1-2
no fix listed

Open the chart page →

5,559
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,676
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,603
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
sqlite3@3.40.1-2
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
sqlite3@3.40.1-2
no fix listed
murtazashah46/helmfile:latest4d11726cf803
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,783
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,304
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,612
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849

Container images carrying it

894 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
supabase/studio:latest94a2a9d2906e
sqlite3@3.40.1-2+deb12u2
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
sqlite3@3.40.1-2
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
sqlite3@3.40.1-2+deb12u2
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
sqlite3@3.40.1-2+deb12u1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
sqlite3@3.40.1-2+deb12u1
no fix listed
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
sqlite3@3.46.1-7
no fix listed
1
tautulli/tautulli:latest670e68dd9efc
sqlite3@3.46.1-7+deb13u1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
sqlite3@3.40.1-2
no fix listed
1
tensorzero/gateway:2026.6.0c939db4f27e4
sqlite3@3.46.1-7+deb13u1
no fix listed
1
tensorzero/ui:2026.6.0f2563d54724e
sqlite3@3.46.1-7
no fix listed
1
tenureai/tenure:v1.0.285f5b222df9a5
sqlite3@3.46.1-7+deb13u1+dhi2
no fix listed
1
teslamate/teslamate:4.1.1cc87082e7d67
sqlite3@3.46.1-7+deb13u1
no fix listed
1
theradius/loggia:0.463ba348546ec
sqlite3@3.40.1-2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
sqlite3@3.46.1-7
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
sqlite3@3.46.1-7
no fix listed
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
sqlite3@3.46.1-7+deb13u1
no fix listed
1
thingsboard/tbmq-node:2.4.070661025dba5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
sqlite3@3.40.1-2+deb12u2
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
sqlite3@3.40.1-2
no fix listed
1
tiago2/cap:2.159f5ae4e261e
sqlite3@3.46.1-7
no fix listed
1
tianon/exim4:latestb489049cdbca
sqlite3@3.46.1-7+deb13u1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
sqlite3@3.46.1-7
no fix listed
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
sqlite3@3.46.1-7+deb13u1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
sqlite3@3.40.1-2+deb12u1
no fix listed
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
sqlite3@3.46.1-7
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
sqlite3@3.40.1-2+deb12u1
no fix listed
1
valkey/valkey:8.1.61f84517eca8e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
valkey/valkey:9.0.54c64dfeae602
sqlite3@3.46.1-7+deb13u1
no fix listed
1
vaultwarden/server:1.35.443498a94b22f
sqlite3@3.46.1-7
no fix listed
1
vaultwarden/server:1.35.79a8eec71f4a5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
vcnngr/telegram-login:latest1a849a997b6d
sqlite3@3.40.1-2+deb12u1
no fix listed
1
vcnngr/telegram-rebot:latest30f1f05e57a6
sqlite3@3.40.1-2+deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
sqlite3@3.40.1-2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
sqlite3@3.40.1-2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
sqlite3@3.40.1-2
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
wallarm/gateway-controller:0.4.09c6ed23e2f0e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
sqlite3@3.40.1-2+deb12u2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
sqlite3@3.40.1-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
sqlite3@3.40.1-2
no fix listed
1
ybucci/traefik-external-dns-controller:2.2.08d27ad8b5f73
sqlite3@3.46.1-7+deb13u1
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
sqlite3@3.46.1-7+deb13u1
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
sqlite3@3.46.1-7+deb13u1
no fix listed
1
yetiplatform/yeti-frontend:latest709064278c7e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
youssef11gaber10/flask-service:latest9c727fcfde76
sqlite3@3.46.1-7+deb13u1
no fix listed
1
zenmldocker/zenml-server:0.96.409027a6312ee
sqlite3@3.40.1-2+deb12u2
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
sqlite3@3.40.1-2+deb12u1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
sqlite3@3.40.1-2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.