StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
assemblylineassemblylineVerified publisher7.4.194 of 12See more

assemblyline assemblyline 7.4.19

4 of the 12 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable19c914f21a41d7
sqlite3@3.40.1-2+deb12u2
no fix listed
cccs/assemblyline-rust:4.7.4.stable19c2f9619d9bcd
sqlite3@3.40.1-2+deb12u2
no fix listed
cccs/assemblyline-socketio:4.7.4.stable19caf40394bd17
sqlite3@3.40.1-2+deb12u2
no fix listed
cccs/assemblyline-ui:4.7.4.stable190426ed7884a2
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

12,092
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,799
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
sqlite3@3.40.1-2
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
no fix listed

Open the chart page →

42,460
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
no fix listed

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
sqlite3@3.40.1-2
no fix listed

Open the chart page →

8,555
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,171
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:15.18-bookworme8db9bd3e9e1
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,405
colosseumbook-k8sinfra-v21.0.183 of 5See more

colosseum book-k8sinfra-v2 1.0.18

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
sqlite3@3.40.1-2+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
sqlite3@3.40.1-2+deb12u1
no fix listed
sysnet4admin/colosseum-rwd:log74ded2d92f07
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

26,266
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,063
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
sqlite3@3.40.1-2
no fix listed

Open the chart page →

7,627
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

27,282
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
sqlite3@3.40.1-2+deb12u2
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sqlite3@3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.5

Open the chart page →

14,446
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

88,377
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,318
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

13,363
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

14,865
getoutlinecfi20171.2.01 of 4See more

getoutline cfi2017 1.2.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

4,329
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
sqlite3@3.46.1-7
3.46.1-7+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

14,964
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,528
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,919
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,048
timetaggerchristianhuthVerified publisher2.2.01 of 1See more

timetagger christianhuth 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

1,902
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,006
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,021
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,994
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
sqlite3@3.40.1-2
no fix listed

Open the chart page →

7,521
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

8,806
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

7,136
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

6,926
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

4,616
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,378
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,378
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

13,286
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,236
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,188
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

14,587
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
sqlite3@3.40.1-2
no fix listed

Open the chart page →

4,436
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

59,131
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,206
cspconsolecspconsole1.3.113 of 5See more

cspconsole cspconsole 1.3.11

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
sqlite3@3.40.1-2+deb12u2
no fix listed
cspconsole/csp-control-center:1.0.1046dda4a31bd6
sqlite3@3.40.1-2+deb12u2
no fix listed
cspconsole/report-collector:1.0.15839750248193b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

11,891
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
sqlite3@3.40.1-2
no fix listed

Open the chart page →

16,632
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,749
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,914
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

6,028
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

10,116
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,952
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
sqlite3@3.40.1-2
no fix listed

Open the chart page →

5,656
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,214
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
sqlite3@3.40.1-2
no fix listed

Open the chart page →

9,152

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.