StackRadar

CVE-2025-7709

Medium

Advisory

Published 8 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
607
of 17,781 indexed, latest versions
Container images
599
deployed by those charts
Fix available
2 of 2
affected packages

lemon-3.51.2-1.1 on GA media

Carried by container images the latest versions of 607 of 17,781 indexed charts deploy, on 599 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.40.1-2, 3.40.1-2+deb12u1, 3.40.1-2+deb12u2, 3.45.1-1ubuntu2+4 more3.45.1-1ubuntu2.5, 3.46.1-7+deb13u1594
sqlite3rpm3.28.0-lp151.2.3.1, 3.50.2-150000.3.33.13.51.2-1.1, 3.51.2-150000.3.36.15
OSV records
DEBIAN-CVE-2025-7709UBUNTU-CVE-2025-7709openSUSE-SU-2026:10171-1SUSE-SU-2026:0432-1
Also known as
USN-7751-1

Charts affected

607 by stars
ChartLatestAffected imagesRadar Score
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
sqlite3@3.40.1-2
no fix listed

Open the chart page →

2,678
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

8,811
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

9,117
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

7,624
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
sqlite3@3.40.1-2
no fix listed

Open the chart page →

5,542
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
sqlite3@3.40.1-2+deb12u1
no fix listed

Open the chart page →

11,577
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-7709.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
sqlite3@3.40.1-2
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
sqlite3@3.40.1-2
no fix listed
murtazashah46/helmfile:latest4d11726cf803
sqlite3@3.40.1-2
no fix listed

Open the chart page →

13,677

Container images carrying it

599 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
sqlite3@3.40.1-2
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
sqlite3@3.40.1-2
no fix listed
1
athou/commafeed:6.2.0-postgresql5e388351df1a
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
atlassian/jira-software:9.7.264a75aa4ec4e
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5
1
avinash263/pyredis263:latestaa2b8727f1a6
sqlite3@3.40.1-2
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
sqlite3@3.40.1-2+deb12u1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
sqlite3@3.40.1-2+deb12u1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
sqlite3@3.40.1-2
no fix listed
1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
sqlite3@3.40.1-2
no fix listed
1
blockstream/bitcoind:27.29472492530e3
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bmeares/meerschaum:2.8.48e9c5bacaa82
sqlite3@3.40.1-2+deb12u1
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
sqlite3@3.40.1-2+deb12u1
no fix listed
1
boky/postfix:5.1.0aafc77238423
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
boky/postfix:4.4.0f3f247fd4252
sqlite3@3.40.1-2+deb12u1
no fix listed
1
budibase/database:2.1.0d90f656261c9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
sqlite3@3.40.1-2+deb12u1
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
sqlite3@3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.5
1
castopod/castopod:1.12.101fd37280cbb2
sqlite3@3.40.1-2
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
sqlite3@3.40.1-2+deb12u2
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable17468326853ec5
sqlite3@3.40.1-2+deb12u2
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
sqlite3@3.40.1-2+deb12u2
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
sqlite3@3.40.1-2+deb12u2
no fix listed
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
sqlite3@3.28.0-lp151.2.3.1
3.51.2-1.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
sqlite3@3.28.0-lp151.2.3.1
3.51.2-1.1
1
ckan/ckan-base:2.12.087ecf3f27ad6
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
sqlite3@3.40.1-2+deb12u1
no fix listed
1
cloudtooling/moodle:5.2.3f4f04e0fc401
sqlite3@3.40.1-2+deb12u2
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
sqlite3@3.40.1-2+deb12u2
no fix listed
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
sqlite3@3.40.1-2+deb12u2
no fix listed
1
cm2network/squad:latest8cba47f53df5
sqlite3@3.46.1-7
3.46.1-7+deb13u1
1
codedesignplus/ms-emails-grpc:lateste336012bc781
sqlite3@3.40.1-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.