CVE-2025-6965 libsqlite3-0
- Dominant language
- Shell
- Stars
- 151
- Forks
- 279
- PR merge metrics
- No merged PRs in 30d
Description
Our CI Trivy scan fails on the CKAN Docker image due to a CRITICAL vulnerability in libsqlite3-0 (CVE-2025-6965). The image currently contains 3.40.1-2+deb12u1; Debian security provides a fixed version 3.40.1-2+deb12u2.
**What broke**
Trivy finds 1 critical OS vuln in the image and exits with code 1, failing the workflow.
`Running Trivy with options: trivy image ghcr.io/genomicdatainfrastructure/gdi-userportal-ckan-docker:sha-734100e
INFO Detected OS family="debian" version="12.10"
...
Total: 1 (CRITICAL: 1)
Library: libsqlite3-0
Vulnerability: CVE-2025-6965
Severity: CRITICAL
Status: fixed
Installed Version: 3.40.1-2+deb12u1
Fixed Version: 3.40.1-2+deb12u2`
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.