CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
langgenius/dify-plugin-daemon :0.6.3-local	3c694329357b	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
langgenius/dify-sandbox :0.2.15	750e1111426e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/buildpack-deps :scm	ac978b783657	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/cassandra :4.0	093ee8ee5eb2	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/cassandra :3.11.10	b095ff3248c6	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/couchdb :3.4.2	2817ad50b5c5	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/debian :latest	f324c7ff5432	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/drupal :11.4.6-php8.5-apache-bookworm	28f7931ecbcb	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/elasticsearch :8.17.3	2cc40b15dff8	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
library/elasticsearch :8.15.0	310b9fc03b06	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
library/elasticsearch :7.17.0	332c6d416808	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/elasticsearch :7.17.15	88c2ec10c7f2	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/elasticsearch :7.17.8	fdc73b3249c1	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/flink :1.14.6-scala_2.12	2461f02672b3	sqlite3@3.37.2-2	3.37.2-2ubuntu0.6	1
library/golang :latest	512690a56605	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/haproxy :3.4.1	0f597665a2a6	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/haproxy :2.8.28	8baa7d29a27a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/influxdb :2.8	571eb4514977	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/influxdb :1.12.3-meta	8812029260b5	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/influxdb :1.12.3-data	b0f9fc41ed79	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/influxdb :latest	f75e48af0598	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/kibana :7.17.15	0172f1c538e7	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/kibana :8.18.0	04c0fc150f3a	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
library/kibana :7.17.8	c5781ba340ef	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/kibana :7.17.3	e2e2031c15be	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/logstash :7.17.8	17a4f64e9cf5	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/mariadb :10.7.3	07e06f2e7ae9	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/mariadb :10.11.2	1c33370a599c	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/mariadb :10.4	22edfe1c7834	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
library/mariadb :10.8.2-focal	490f01279be1	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/mariadb :12.0.2	5b6a1eac15b8	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
library/mariadb :10.6.21	8a16204dc96c	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
library/mariadb :10.7	9a48ac9f196f	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/mariadb :12.2.2	b1cb255a9939	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
library/mariadb :10.10.2	bfc25a68e113	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/mariadb :10.6.15	e22328f4d714	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/mariadb :10.9.4	fbb8456ebdb1	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/mariadb :11.7.2	fcc7fcd7114a	sqlite3@3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.6	1
library/matomo :5.1.2-apache	2415789e1602	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/matomo :5.13.0-apache	8e6bdd396496	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/memcached :1.6.42	26983a43c918	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/memcached :1.6.40	9ae868852d0b	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/memcached :1.6.40	cc523a19da58	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/memcached :1.6.42-trixie	e2a8683c7fbb	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/mongo :4.4.13	05678ae4e5e1	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
library/mongo :5.0.32-focal	3b6c281e1c08	sqlite3@3.31.1-4ubuntu0.7	no fix listed	1
library/mongo :4.4-bionic	3d0e6df9fd5b	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
library/mongo :5.0.14-focal	50cae5081ab4	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1