StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,842
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

10,782
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
sqlite3@3.40.1-2+deb12u2
no fix listed
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,909
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

30,167
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,372
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,309
keycloakcloudpirates-keycloakVerified publisher0.21.371 of 3See more

keycloak cloudpirates-keycloak 0.21.37

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

4,365
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

5,378
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,948
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,362
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,331
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,648
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,761
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

2,660
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,717
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,808
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
sqlite3@3.40.1-2
no fix listed

Open the chart page →

19,497
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,663
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

3,645
difydify-helmVerified publisher0.38.03 of 11See more

dify dify-helm 0.38.0

3 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
sqlite3@3.40.1-2+deb12u2
no fix listed
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
sqlite3@3.40.1-2+deb12u2
no fix listed
langgenius/dify-api:1.16.1dcefa5f7c47c
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

22,115
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

19,998
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

11,402
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,952
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,700
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
sqlite3@3.40.1-2
no fix listed

Open the chart page →

6,550
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
sqlite3@3.45.1-1ubuntu2.4
3.45.1-1ubuntu2.5

Open the chart page →

5,278
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,012
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,574
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,896
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,679
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,448
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
sqlite3@3.40.1-2
no fix listed

Open the chart page →

23,263
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

8,530
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,810
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

31,447
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

3,645
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

5,396
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

23,289
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

5,665
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
sqlite3@3.40.1-2
no fix listed

Open the chart page →

17,306
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,510
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,484
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,039
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,915
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

8,685
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

16,161
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,266
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
sqlite3@3.40.1-2
no fix listed

Open the chart page →

17,346
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,915
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,154

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.