StackRadar

CVE-2025-70873

High

Advisory

Published 12 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,133
of 17,787 indexed, latest versions
Container images
918
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.3-1.1 on GA media

Carried by container images the latest versions of 1,133 of 17,787 indexed charts deploy, on 918 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.46.1-7+4 more3.46.1-7+e2916
sqlite3rpm3.28.0-lp151.2.3.13.51.3-1.12
OSV records
DEBIAN-CVE-2025-70873ECHO-186e-750f-440bopenSUSE-SU-2026:10406-1

Charts affected

1,133 by stars
ChartLatestAffected imagesRadar Score
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,654
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,638
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,039
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

14,109
infrahubinfrahubVerified publisher4.33.22 of 5See more

infrahub infrahub 4.33.2

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
no fix listed
library/neo4j:2026.05.06c162e2432f8
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

10,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

97,040
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,833
libredb-studiolibredb-studioVerified publisher0.1.631 of 1See more

libredb-studio libredb-studio 0.1.63

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,220
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

19,363
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,753
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,568
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,201
changedetectionalekcVerified publisher0.14.41 of 1See more

changedetection alekc 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,448
vaultwardenandrenarchyVerified publisher6.27.01 of 1See more

vaultwarden andrenarchy 6.27.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,756
limesurveyarea-42Verified publisher0.3.941 of 2See more

limesurvey area-42 0.3.94

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.0f48962e1528c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,678
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,243
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,184
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
no fix listed

Open the chart page →

5,620
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
sqlite3@3.40.1-2+deb12u1
no fix listed
library/couchdb:3.4.22817ad50b5c5
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

17,475
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

27,984
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,803
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
sqlite3@3.46.1-7
no fix listed

Open the chart page →

9,348
defectdojodefectdojo1.9.521 of 4See more

defectdojo defectdojo 1.9.52

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.100c597abdbb535
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,340
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,244
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,563
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,729
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
no fix listed

Open the chart page →

5,627
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
sqlite3@3.46.1-7+deb13u1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,747
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,154
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,012
redishelmforgeVerified publisher3.0.01 of 1See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

968
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,245
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.22 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

2 of the 5 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
no fix listed
library/neo4j:2026.05.0-enterprise2caf944aa4a5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

10,563
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
sqlite3@3.46.1-7
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
sqlite3@3.46.1-7
no fix listed
instill/model-backend:611f0f2e980125e5ba5
sqlite3@3.46.1-7
no fix listed

Open the chart page →

30,920
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,693
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
sqlite3@3.46.1-7
no fix listed

Open the chart page →

1,705
mogenius-operatormogeniusOfficialVerified publisher2.29.01 of 2See more

mogenius-operator mogenius 2.29.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

945
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,066
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/observal/observal-api:1.13.1153b8b893232
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,839
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,224
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed

Open the chart page →

107,899
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,334
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,613
prometheus-prefect-exporterprefectVerified publisher2026.8.71410241 of 1See more

prometheus-prefect-exporter prefect 2026.8.7141024

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
prefecthq/prometheus-prefect-exporter:4.0.050d527a190ae
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,012
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,615
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
sqlite3@3.40.1-2
no fix listed

Open the chart page →

8,760
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
sqlite3@3.46.1-7
no fix listed

Open the chart page →

3,412
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,889
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
pretixtechwolf12Verified publisher2026.7.03 of 3See more

pretix techwolf12 2026.7.0

3 of the 3 container images this version deploys carry CVE-2025-70873.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
sqlite3@3.46.1-7+deb13u1
no fix listed
pretix/standalone:2026.7.05df3b7aa852e
sqlite3@3.46.1-7+deb13u1
no fix listed
valkey/valkey:9.1.08e8d64b405ce
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

9,825

Container images carrying it

918 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
sqlite3@3.40.1-2
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.