StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,176
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

2,578
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
sqlite3@3.40.1-2+deb12u2
no fix listed
library/memcached:1.6.40cc523a19da58
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

14,043
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,270
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,136
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
sqlite3@3.40.1-2
no fix listed

Open the chart page →

97,040
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,833
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

19,363
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,753
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,201
changedetectionalekcVerified publisher0.14.41 of 1See more

changedetection alekc 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,448
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,243
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,184
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

5,620
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
sqlite3@3.40.1-2+deb12u1
no fix listed
library/couchdb:3.4.22817ad50b5c5
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

17,475
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

27,984
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

9,348
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

4,194
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,244
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,563
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

5,627
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,154
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,563
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
sqlite3@3.46.1-7
3.46.1-7+deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
sqlite3@3.46.1-7
3.46.1-7+deb13u1
instill/model-backend:611f0f2e980125e5ba5
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

30,920
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

4,357
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,705
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,066
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,224
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

107,899
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,334
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,615
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
sqlite3@3.40.1-2
no fix listed

Open the chart page →

8,760
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,412
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,816
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

4,428
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestd3c209a5d531
sqlite3@3.40.1-2+deb12u2
no fix listed
valkey/valkey:9.0.1546304417fea
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

14,960
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.02 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
sqlite3@3.46.1-7
3.46.1-7+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

11,936
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
sqlite3@3.40.1-2
no fix listed
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
sqlite3@3.40.1-2
no fix listed

Open the chart page →

22,233
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,231
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,309
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

15,995
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

8,524
chromadbchromadb-helmVerified publisher0.2.21 of 1See more

chromadb chromadb-helm 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,444
cloudflared-ingress-operatorcloudflared-ingress-operatorVerified publisher0.3.21 of 1See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,736
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

10,076
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

11,236
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,924
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,298
dbrepodbrepo1.13.33 of 25See more

dbrepo dbrepo 1.13.3

3 of the 25 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
sqlite3@3.40.1-2
no fix listed
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
sqlite3@3.40.1-2
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

50,281

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.