StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,786
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,499
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

65,130
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
sqlite3@3.40.1-2
no fix listed

Open the chart page →

18,426
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,531
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,180
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

4,315
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,540
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,937
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,577
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,657
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,689
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,657
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

33,591
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,355
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,657
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,372
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
sqlite3@3.40.1-2
no fix listed

Open the chart page →

7,880
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

8,251
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
sqlite3@3.40.1-2
no fix listed

Open the chart page →

10,545
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,967
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
supabase/logflare:latest49bfe526f1b4
sqlite3@3.46.1-7
3.46.1-7+deb13u1
supabase/studio:latest94a2a9d2906e
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,469
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,624
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,674
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,176
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
sqlite3@3.40.1-2
no fix listed
opea/embedding-tei:1.05c9639de61c1
sqlite3@3.40.1-2
no fix listed
opea/llm-tgi:1.00c25aab3f106
sqlite3@3.40.1-2
no fix listed
opea/reranking-tei:1.0e48613afb191
sqlite3@3.40.1-2
no fix listed
opea/retriever-redis:1.0eb746b263705
sqlite3@3.40.1-2
no fix listed

Open the chart page →

36,661
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
sqlite3@3.40.1-2
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
sqlite3@3.40.1-2
no fix listed
opea/llm-tgi:1.00c25aab3f106
sqlite3@3.40.1-2
no fix listed

Open the chart page →

26,489
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
sqlite3@3.40.1-2
no fix listed
opea/codetrans-ui:1.03ef121f34610
sqlite3@3.40.1-2
no fix listed
opea/llm-tgi:1.00c25aab3f106
sqlite3@3.40.1-2
no fix listed

Open the chart page →

26,060
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
sqlite3@3.40.1-2
no fix listed
opea/docsum-ui:1.07f854e9bffaf
sqlite3@3.40.1-2
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
sqlite3@3.40.1-2
no fix listed

Open the chart page →

26,535
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,829
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,865
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,363
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,629
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,842
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
sqlite3@3.40.1-2
no fix listed

Open the chart page →

8,877
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,160
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,994
codeth-chartsVerified publisher0.1.01 of 1See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
collabora/code:24.04.13.2.101dc4ab83977
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,265
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,112
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

25,202
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,489
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

6,974
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
sqlite3@3.40.1-2
no fix listed

Open the chart page →

17,348
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,234
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

45,392
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,383
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
sqlite3@3.40.1-2+deb12u1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,830
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,801
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
sqlite3@3.45.1-1ubuntu2.4
3.45.1-1ubuntu2.5

Open the chart page →

7,696
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
sqlite3@3.40.1-2
no fix listed

Open the chart page →

6,540

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.