StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,790 indexed, latest versions
Container images
596
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 603 of 17,790 indexed charts deploy, on 596 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1591
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
sqlite3@3.40.1-2
no fix listed

Open the chart page →

5,548
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,592
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
sqlite3@3.40.1-2
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
sqlite3@3.40.1-2
no fix listed
murtazashah46/helmfile:latest4d11726cf803
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,197

Container images carrying it

596 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/caninehq/canine:latesta058034ca006
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
sqlite3@3.40.1-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.