CVE-2025-7458
CriticalAdvisory
Published 29 Jul 2025In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.1
- base score, highest
- EPSS
- 0.002
- 15th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 460
- of 17,787 indexed, latest versions
- Container images
- 452
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 460 of 17,787 indexed charts deploy, on 452 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2 | no fix listed | 452 |
- OSV records
- DEBIAN-CVE-2025-7458
Charts affected
460 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| maybe-financevicsuferVerified publisher | 0.2.7 | 1 of 3See more | 10,795 |
| supersetwbstack | 0.1.0 | 1 of 1See more | 7,085 |
| web-dvwaweb-dvwa | 1.16.0 | 1 of 2See more | 10,001 |
| welcome-elos-webappwelcome-elos-webappVerified publisher | 2.0.0 | 1 of 1See more | 2,678 |
| giteawenerme | 12.7.0 | 1 of 4See more | 8,811 |
| juicefs-csi-driverwenerme | 0.32.5 | 1 of 5See more | 9,117 |
| keycloakwiremindVerified publisher | 25.3.1 | 1 of 2See more | 7,624 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,542 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,577 |
| xkopsxkops | 0.1.0 | 3 of 5See more | 13,677 |
Container images carrying it
452 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | 1eb5a85180a4 | sqlite3 | no fix listed | 1 |
| registry.k8s.io/ | ce5b5ccd5eb0 | sqlite3 | no fix listed | 1 |