StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,329
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,152
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
sqlite3@3.40.1-2+deb12u2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

66,542
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
sqlite3@3.40.1-2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

31,447
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,699
endeavorrotationalVerified publisher1.3.11 of 2See more

endeavor rotational 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,092
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,318
quarterdeckrotationalVerified publisher0.16.01 of 1See more

quarterdeck rotational 0.16.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,087
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,406
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,612
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

10,492
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

27,282
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,429
linkdingrubxkubeVerified publisher1.2.31 of 1See more

linkding rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.46.20c0a9a04c7eb
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,063
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

29,870
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

9,421
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,374
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,792
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
sqlite3@3.40.1-2
no fix listed
santisbon/evworker:lateste807283f8d69
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,090
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
sqlite3@3.40.1-2+deb12u2
no fix listed
santisbon/speedtest:latest8ee3a1697227
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,314
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,340
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

9,687
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,065
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,345
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
sqlite3@3.40.1-2+deb12u2
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,009
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,983
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,019
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
sqlite3@3.45.1-1ubuntu2.4
3.45.1-1ubuntu2.5

Open the chart page →

6,154
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,630
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,196
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,770
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,570
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,386
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,934
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,972
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,815
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,990
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
sqlite3@3.40.1-2
no fix listed

Open the chart page →

5,571
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,243
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,636
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sqlite3@3.40.1-2
no fix listed

Open the chart page →

15,684
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,431
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,703
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,431
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,245
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,245
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,050
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
sqlite3@3.40.1-2
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,500
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,647

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.