StackRadar

CVE-2025-70873

High

Advisory

Published 12 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,133
of 17,787 indexed, latest versions
Container images
918
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.3-1.1 on GA media

Carried by container images the latest versions of 1,133 of 17,787 indexed charts deploy, on 918 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.46.1-7+4 more3.46.1-7+e2916
sqlite3rpm3.28.0-lp151.2.3.13.51.3-1.12
OSV records
DEBIAN-CVE-2025-70873ECHO-186e-750f-440bopenSUSE-SU-2026:10406-1

Charts affected

1,133 by stars
ChartLatestAffected imagesRadar Score
dawarichhelmforgeVerified publisher1.0.02 of 4See more

dawarich helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed
postgis/postgis:18-3.67e00e8c3539f
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,698
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
sqlite3@3.46.1-7
no fix listed

Open the chart page →

29,852
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

8,598
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,660
entehelmforgeVerified publisher1.0.22 of 4See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,227
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,294
generichelmforgeVerified publisher3.1.51 of 1See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:1.31.505b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,058
immichhelmforgeVerified publisher1.2.84 of 5See more

immich helmforge 1.2.8

4 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
sqlite3@3.40.1-2+deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,080
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,487
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,350
listmonkhelmforgeVerified publisher1.1.141 of 3See more

listmonk helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,852
matterbridgehelmforgeVerified publisher1.0.21 of 1See more

matterbridge helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
luligu/matterbridge:3.10.81ec50ecd0694
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

892
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,442
medikeephelmforgeVerified publisher2.0.02 of 3See more

medikeep helmforge 2.0.0

2 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,041
memcachedhelmforgeVerified publisher1.0.81 of 1See more

memcached helmforge 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,064
metabasehelmforgeVerified publisher1.2.281 of 3See more

metabase helmforge 1.2.28

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,805
middlewarehelmforgeVerified publisher1.2.63 of 4See more

middleware helmforge 1.2.6

3 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed
middlewareeng/middleware:0.3.1747d880812f1
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

9,704
moodlehelmforgeVerified publisher1.1.02 of 2See more

moodle helmforge 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,911
netboxhelmforgeVerified publisher2.0.12 of 4See more

netbox helmforge 2.0.1

2 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,321
nextcloudhelmforgeVerified publisher1.0.03 of 3See more

nextcloud helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
sqlite3@3.46.1-7+deb13u1
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

7,041
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,238
opencuthelmforgeVerified publisher1.1.92 of 5See more

opencut helmforge 1.1.9

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,751
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,536
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
sqlite3@3.46.1-7
no fix listed

Open the chart page →

4,741
qdranthelmforgeVerified publisher1.0.51 of 1See more

qdrant helmforge 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.19.112364fe851b9
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

818
reactive-resumehelmforgeVerified publisher1.0.01 of 4See more

reactive-resume helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,986
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,916
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,073
supersethelmforgeVerified publisher1.3.63 of 5See more

superset helmforge 1.3.6

3 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
sqlite3@3.40.1-2+deb12u2
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,649
twentyhelmforgeVerified publisher1.0.02 of 5See more

twenty helmforge 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,844
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

30,106
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,773
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,441
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,615
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,502
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed
openbas/caldera-server:5.1.0a277796d9724
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

25,099
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,054
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,629
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,137
paperlesshpVerified publisher0.1.12 of 5See more

paperless hp 0.1.1

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

26,579
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,038
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,749
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
iam-eks-user-mapperiam-eks-user-mapper1.6.01 of 1See more

iam-eks-user-mapper iam-eks-user-mapper 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
sqlite3@3.46.1-7
no fix listed

Open the chart page →

1,649
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,770
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

57,728
codex-poolericoretechVerified publisher0.8.61 of 1See more

codex-pooler icoretech 0.8.6

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

804

Container images carrying it

918 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
sqlite3@3.40.1-2
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.