CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
improwised/proxysql :master-6b26e59-1717650638	28940522e8b7	sqlite3@3.40.1-2	no fix listed	1
inseefrlab/shelly :cloudshell	31f04ca7436b	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
instill/artifact-backend :b28766a	c4a393e601ed	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
instill/mgmt-backend :d0933d4	ebe12f77a3f9	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
instill/model-backend :611f0f2	e980125e5ba5	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
instructure/kinesalite :latest	34400d82f28f	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	sqlite3@3.40.1-2	no fix listed	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
inventree/inventree :1.5.4	a946ec09da3e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
iofog/router :2.0.1	7260cf861479	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
iomesh/csi-driver :v2.8.0	1a151f602451	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
ispras/svacer :11-2-0	42aa9fa9f189	sqlite3@3.37.2-2ubuntu0.4	3.37.2-2ubuntu0.6	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
istio/examples-helloworld-v1 :latest	328b237e4fb1	sqlite3@3.40.1-2	no fix listed	1
istio/examples-helloworld-v2 :latest	0a7f02b2c7c9	sqlite3@3.40.1-2	no fix listed	1
istio/install-cni :1.10.3	2232f365aed6	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/node-agent-k8s :1.2.9	268ab879ea51	sqlite3@3.11.0-1ubuntu1.1	no fix listed	1
istio/operator :1.10.3	655eefa11c84	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/operator :1.12.0	6cfce8a071b9	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
istio/pilot :1.10.0	294ca55bd1cc	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/pilot :1.2.9	c09319753454	sqlite3@3.11.0-1ubuntu1.1	no fix listed	1
istio/pilot :1.10.3	e7e110a421c2	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/proxyv2 :1.2.9	0c78be035e98	sqlite3@3.11.0-1ubuntu1.1	no fix listed	1
istio/proxyv2 :1.9.6	87a9db561d2e	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/proxyv2 :1.10.0	88c6c693e67a	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
istio/proxyv2 :1.14.1	df69c1a7af7c	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
ixsystems/truecommand :3.2.0	19c218455cd2	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
jacobalberty/unifi :v7.1.66	4a3616625dda	sqlite3@3.22.0-1ubuntu0.5	no fix listed	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	sqlite3@3.22.0-1ubuntu0.7	no fix listed	1
jacobalberty/unifi :5.10.19	c409924e2463	sqlite3@3.11.0-1ubuntu1.1	no fix listed	1
jaedb/iris :latest	048cfbf58d57	sqlite3@3.40.1-2+deb12u1	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
jbtronics/part-db1 :latest	5db71f6db59d	sqlite3@3.40.1-2+deb12u2	no fix listed	1
jedi132000/nextapp :latest	dc2a81e92f23	sqlite3@3.31.1-4ubuntu0.4	no fix listed	1
jellyfin/jellyfin :10.11.8	1694ff069f0c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
jellyfin/jellyfin :10.11.7	17285f9cce63	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
jellyfin/jellyfin :10.11.6	333b64771663	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	sqlite3@3.40.1-2	no fix listed	1
jenkins/jenkins :2.440.3-jdk17	de4fea113221	sqlite3@3.40.1-2	no fix listed	1
jertel/elastalert2 :2.31.0	3cbf63f9b7dc	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
jhipster/jhipster-registry :latest	7184525acd4d	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	sqlite3@3.40.1-2	no fix listed	1
jingking/geonetwork-hnap :4.2.8	43e74ab234e1	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1