StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
608
of 17,787 indexed, latest versions
Container images
601
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 608 of 17,787 indexed charts deploy, on 601 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1596
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

608 by stars
ChartLatestAffected imagesRadar Score
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

6,425
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

16,969
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5

Open the chart page →

9,381
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,103
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

12,993
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,523
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

8,955
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

4,266
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
sqlite3@3.40.1-2
no fix listed

Open the chart page →

12,270
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,677
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
sqlite3@3.40.1-2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
sqlite3@3.40.1-2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
sqlite3@3.40.1-2
no fix listed

Open the chart page →

47,117
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
sqlite3@3.45.1-1ubuntu2
3.45.1-1ubuntu2.5

Open the chart page →

7,935
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

2,290
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

8,798
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,374
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,374
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
sqlite3@3.40.1-2
no fix listed

Open the chart page →

23,472
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,287
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

6,014
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
sqlite3@3.40.1-2
no fix listed

Open the chart page →

3,700
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
sqlite3@3.40.1-2
no fix listed

Open the chart page →

2,660
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,214
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.6-pg16-bookwormccc6e83d6e35
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,895
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,648
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

9,422
changedetectionhelmforgeVerified publisher1.1.151 of 1See more

changedetection helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.3ecacd9fd0c66
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,602
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,991
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

29,852
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

3,660
immichhelmforgeVerified publisher1.2.82 of 5See more

immich helmforge 1.2.8

2 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
sqlite3@3.40.1-2+deb12u2
no fix listed
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,080
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,350
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

6,041
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

9,704
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,911
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

4,741
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

5,649
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

30,106
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
sqlite3@3.40.1-2
no fix listed

Open the chart page →

11,441
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,502
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed
openbas/caldera-server:5.1.0a277796d9724
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

25,099
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,054
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlite3@3.40.1-2
no fix listed

Open the chart page →

14,629
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

3,137
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

9,038
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

7,749
iam-eks-user-mapperiam-eks-user-mapper1.6.01 of 1See more

iam-eks-user-mapper iam-eks-user-mapper 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

1,649
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

5,770
multicaicoretechVerified publisher0.4.421 of 5See more

multica icoretech 0.4.42

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17cf134a767f47
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,730
tolgeeicoretechVerified publisher0.46.11 of 3See more

tolgee icoretech 0.46.1

1 of the 3 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
sqlite3@3.46.1-7
3.46.1-7+deb13u1

Open the chart page →

2,715
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
sqlite3@3.45.1-1ubuntu2.4
3.45.1-1ubuntu2.5

Open the chart page →

9,032

Container images carrying it

601 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
sqlite3@3.40.1-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.