StackRadar

CVE-2022-35737

High

Advisory

Published 3 Aug 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.215
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
473
of 17,787 indexed, latest versions
Container images
413
deployed by those charts
Fix available
4 of 4
affected packages

`libsqlite3-sys` via C SQLite improperly validates array index

Carried by container images the latest versions of 473 of 17,787 indexed charts deploy, on 413 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more291
libsqlite3-syscargo0.23.20.25.11
sqliterpm3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1119
sqlite3rpm3.28.0-lp151.2.3.13.39.2-1.12
OSV records
GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
Also known as
BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2

Charts affected

473 by stars
ChartLatestAffected imagesRadar Score
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5

Open the chart page →

8,556
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7

Open the chart page →

10,583
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7

Open the chart page →

10,529
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
sqlite3@3.37.2-2
3.37.2-2ubuntu0.1

Open the chart page →

17,561
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7

Open the chart page →

20,233
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2

Open the chart page →

11,012
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7

Open the chart page →

20,233
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7

Open the chart page →

20,233
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
sqlite@3.26.0-13.el8
0:3.26.0-17.el8_7

Open the chart page →

12,454
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7

Open the chart page →

4,960
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm2

Open the chart page →

15,345
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7

Open the chart page →

20,233
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7

Open the chart page →

20,233
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5

Open the chart page →

11,167
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7

Open the chart page →

9,748
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
sqlite@3.26.0-13.el8
0:3.26.0-17.el8_7

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
sqlite@3.26.0-11.el8
0:3.26.0-17.el8_7

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7

Open the chart page →

6,138
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7

Open the chart page →

11,592
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-35737.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5

Open the chart page →

9,250

Container images carrying it

413 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
rundeck/rundeck:3.0.16b13e8059ad72
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
sarwansharma/minio:v359d1da9385d1
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7
1
scrapinghub/splash:3.4.1a5f89bc84606
sqlite3@3.22.0-1ubuntu0.2
3.22.0-1ubuntu0.7
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
libsqlite3-sys@0.23.2
0.25.1
1
seafileltd/seafile-mc:9.0.106693911bcc40
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
seafileltd/seafile-mc:9.0.97ac833196f60
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
seldonio/locust-core:0.81d0da98a2d76
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm2
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
sqlite@3.26.0-13.el8
0:3.26.0-17.el8_7
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7
1
sismics/docs:v1.10f4b0ef019cf1
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7
1
slagattollas/weatherservice-practica:latest68e7f56393fc
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
snipe/snipe-it:v6.0.1455fb7636a98c
sqlite3@3.31.1-4ubuntu0.4
3.31.1-4ubuntu0.5
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
sqlite3@3.31.1-4ubuntu0.3
3.31.1-4ubuntu0.5
1
splunk/splunk-operator:2.0.0c4e0d3146226
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7
1
stakater/workshop-operator:v0.0.3897bf456cc97c
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7
1
stashapp/stash:latest24dbd7607174
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
statcan/ckan:2.93921305425b8
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
sqlite3@3.37.2-2
3.37.2-2ubuntu0.1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
tpdock/freeradius:2.2.93da600c95a49
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
sqlite@3.26.0-15.el8
0:3.26.0-17.el8_7
1
voltha/voltha-cli:1.6.0c4e41e92f046
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
voltha/voltha-envoy:1.6.059ab2a00f712
sqlite3@3.8.2-1ubuntu2.1
3.8.2-1ubuntu2.2+esm3
1
voltha/voltha-netconf:1.6.037f80524c207
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
voltha/voltha-onos:5.1.8e038acb950d3
sqlite3@3.22.0-1ubuntu0.5
3.22.0-1ubuntu0.7
1
voltha/voltha-tester:1.7.0655c3048a602
sqlite3@3.11.0-1ubuntu1.2
3.11.0-1ubuntu1.5+esm2
1
voltha/voltha-voltha:1.6.0ff596b62de59
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
wavefronthq/proxy:9.2d1064d28f6eb
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
woojoong/wowza:latestec230db19652
sqlite3@3.22.0-1
3.22.0-1ubuntu0.7
1
xeladock/mysql_dns:latest4baf531453f1
sqlite3@3.37.2-2
3.37.2-2ubuntu0.1
1
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
yandex/clickhouse-server:latest1cbf75aabe1e
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
yandex/clickhouse-server:19.17ab1738a64b70
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
sqlite3@3.22.0-1ubuntu0.4
3.22.0-1ubuntu0.7
1
yandex/clickhouse-server:19.16d210dc69321e
sqlite3@3.22.0-1ubuntu0.3
3.22.0-1ubuntu0.7
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
sqlite3@3.31.1-4ubuntu0.2
3.31.1-4ubuntu0.5
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
sqlite3@3.37.2-2
3.37.2-2ubuntu0.1
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
sqlite3@3.37.2-2
3.37.2-2ubuntu0.1
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
sqlite3@3.22.0-1ubuntu0.2
3.22.0-1ubuntu0.7
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
sqlite3@3.11.0-1ubuntu1
3.11.0-1ubuntu1.5+esm2
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sqlite3@3.11.0-1ubuntu1.1
3.11.0-1ubuntu1.5+esm2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.