StackRadar

CVE-2025-7458

Critical

Advisory

Published 29 Jul 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
460
of 17,787 indexed, latest versions
Container images
452
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 460 of 17,787 indexed charts deploy, on 452 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2no fix listed452
OSV records
DEBIAN-CVE-2025-7458

Charts affected

460 by stars
ChartLatestAffected imagesRadar Score
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,734
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

13,738
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
sqlite3@3.40.1-2+deb12u2
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
sqlite3@3.40.1-2+deb12u2
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

37,373
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,779
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,873
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,489
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,883
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

31,844
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

8,158
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
sqlite3@3.40.1-2
no fix listed

Open the chart page →

6,521
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,482
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,740
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

38,107
securosecuroVerified publisher0.15.11 of 4See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
pgvector/pgvector:pg16ccc6e83d6e35
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,436
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

16,449
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
sqlite3@3.40.1-2+deb12u1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,532
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
sigscale/cse:latest67d0c886516b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,280
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
sigscale/ocs:latest3c1bdc9732e2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,280
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,913
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,928
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,563
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,380
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
sqlite3@3.40.1-2+deb12u2
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

18,075
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,102
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

12,581
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,249
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,397
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,595
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
library/postgres:17.4304ab8135187
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,323
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

30,028
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

12,473
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,486
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,324
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

27,274
anchore-admission-controlleranchore-charts0.8.51See more

anchore-admission-controller anchore-charts 0.8.5

1 container image this version deploys carries CVE-2025-7458.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,239
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,991
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
sqlite3@3.40.1-2
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
sqlite3@3.40.1-2
no fix listed

Open the chart page →

25,669
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,352
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
sqlite3@3.40.1-2
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
no fix listed

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
no fix listed

Open the chart page →

32,501
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,412
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,145
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2025-7458.

Container imageDigestPackageFixed in
library/postgres:15.18-bookworme8db9bd3e9e1
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,521

Container images carrying it

452 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.