StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

8,203
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

2,809
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
sqlite3@3.40.1-2
no fix listed

Open the chart page →

6,548
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,508
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,508
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,767
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,942
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,321
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

30,310
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

38,115
securosecuroVerified publisher0.15.11 of 4See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
pgvector/pgvector:pg16ccc6e83d6e35
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,350
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

16,194
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
sqlite3@3.40.1-2+deb12u1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,545
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sigscale/cse:latest67d0c886516b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,185
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sigscale/ocs:latest3c1bdc9732e2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,185
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,920
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,934
snappasssnappassVerified publisher0.4.31 of 3See more

snappass snappass 0.4.3

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

3,019
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

14,504
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

7,157
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,390
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

10,405
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
sqlite3@3.40.1-2+deb12u2
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

18,213
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,108
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,108
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

12,910
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

12,137
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

4,022
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

7,728
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,321
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,448
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:17.4304ab8135187
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,408
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,577
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

29,687
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

12,481
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,447
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,898
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

27,282
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,663
anchore-admission-controlleranchore-charts0.8.51 of 2See more

anchore-admission-controller anchore-charts 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

7,559
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,838
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,265
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,872
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

5,516
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
sqlite3@3.40.1-2
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
sqlite3@3.40.1-2
no fix listed

Open the chart page →

25,720
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,430
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

37,184
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

7,521
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

7,338
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
sqlite3@3.40.1-2+deb12u1
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

40,411

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.