StackRadar

CVE-2025-70873

High

Advisory

Published 12 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,133
of 17,790 indexed, latest versions
Container images
923
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.3-1.1 on GA media

Carried by container images the latest versions of 1,133 of 17,790 indexed charts deploy, on 923 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.46.1-7+4 more3.46.1-7+e2921
sqlite3rpm3.28.0-lp151.2.3.13.51.3-1.12
OSV records
DEBIAN-CVE-2025-70873ECHO-186e-750f-440bopenSUSE-SU-2026:10406-1

Charts affected

1,133 by stars
ChartLatestAffected imagesRadar Score
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,899
fluentd-kubernetes-daemonsetnovum-rgi-charts0.1.01 of 1See more

fluentd-kubernetes-daemonset novum-rgi-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,022
nai-corenutanix-helm-releasesVerified publisher2.8.01 of 14See more

nai-core nutanix-helm-releases 2.8.0

1 of the 14 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
nutanix/nai-jobs:v2.8.09c373718e1b1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

826
nai-operatorsnutanix-helm-releasesVerified publisher2.8.01 of 5See more

nai-operators nutanix-helm-releases 2.8.0

1 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
nutanix/nai-jobs:v2.8.09c373718e1b1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

826
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,297
firecrawlobeoneVerified publisher3.0.42 of 5See more

firecrawl obeone 3.0.4

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,060
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,008
ollamaobeoneVerified publisher0.3.11 of 2See more

ollama obeone 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,093
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

865
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,184
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
sqlite3@3.46.1-7
no fix listed

Open the chart page →

17,134
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,583
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
sqlite3@3.46.1-7
no fix listed

Open the chart page →

2,321
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,360
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,728
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,651
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

978
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,649
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

6,392
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,051
llm-stackopenproject-helm-chartsVerified publisher1.1.01 of 2See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/python:3.12-slim78387bc3881b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,992
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

7,866
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,781
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,046
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,550
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,021
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.07 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

7 of the 40 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
chromadb/chroma:1.5.7fc8dc8e11fb2
sqlite3@3.46.1-7+deb13u1
no fix listed
yetiplatform/yeti:2.9.09bcbe2650a14
sqlite3@3.46.1-7+deb13u1
no fix listed
yetiplatform/yeti-frontend:2.9.0873ef15d267b
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
sqlite3@3.40.1-2
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
sqlite3@3.40.1-2+deb12u2
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
sqlite3@3.40.1-2+deb12u2
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

72,547
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
sqlite3@3.46.1-7+deb13u1
no fix listed
yetiplatform/yeti-frontend:latest709064278c7e
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

6,679
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,440
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
sqlite3@3.40.1-2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
sqlite3@3.40.1-2
no fix listed

Open the chart page →

27,597
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,393
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
sqlite3@3.46.1-7
no fix listed

Open the chart page →

3,877
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
sqlite3@3.46.1-7
no fix listed

Open the chart page →

3,431
examplepauls-helm-charts0.1.21 of 1See more

example pauls-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
kubeconpauls-helm-charts0.1.01 of 1See more

kubecon pauls-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,101
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,778
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,262
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,321
pieeatpieeatOfficialVerified publisher0.9.31 of 1See more

pieeat pieeat 0.9.3

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,438
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,420
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,996
web-chartpjw-ktcloudlab0.1.01 of 1See more

web-chart pjw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed
library/node:208f693eaa7e0a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

26,118
playlist-mirrorplaylist-mirrorVerified publisher1.0.31 of 1See more

playlist-mirror playlist-mirror 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/itobey/playlist-mirror:1.0.0601082677a46
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,058
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
sqlite3@3.46.1-7
no fix listed

Open the chart page →

4,284

Container images carrying it

923 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
sqlite3@3.40.1-2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
sqlite3@3.40.1-2
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
sqlite3@3.40.1-2+deb12u1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
sqlite3@3.40.1-2
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.