CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :6.0.12	646902910d6a	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
library/mongo :4.2	699d652ed674	sqlite3@3.22.0-1ubuntu0.7	no fix listed	1
library/mongo :4.2.1	6ca49afbcb2b	sqlite3@3.22.0-1ubuntu0.1	no fix listed	1
library/mongo :6.0.2	71a63fc2438e	sqlite3@3.31.1-4ubuntu0.4	no fix listed	1
library/mongo :5.0.21	7c81758cb295	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/mongo :4.2.21-bionic	9cb28f7291d9	sqlite3@3.22.0-1ubuntu0.5	no fix listed	1
library/mongo :4.4.18	d23ec07162ca	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/mysql :8.0-debian	9382e4f6f7f0	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/neo4j :2026.02.2	5ab4ab0358cf	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/neo4j :2026.05.0	6c162e2432f8	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nextcloud :31.0.6-apache	588609d76b21	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nextcloud :34.0.4-apache	de4ad9389386	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nginx :1.29	1881968aff6f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nginx :1.31	a53fc6c27208	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/node :20	8f693eaa7e0a	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/node :latest	f5d1cc40abc1	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/php :8.4-fpm	59fa733c9af6	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :18.0	073e7c8b84e2	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :17.4	304ab8135187	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :16.11	468e1f126ca5	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :16.6	557fea37a744	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/postgres :18.3	69e8582b781c	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :15.18	6eb0add3b77c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :15.3	8775adb39f0d	sqlite3@3.40.1-2	no fix listed	1
library/postgres :18.4	8ff36f3c6637	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :18.3	a9abf4275f9e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.5	aadf2c0696f5	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :13.12	ced3ba927f4c	sqlite3@3.40.1-2	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/postgres :14.22	eba8ddbdd837	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.10	ebba4f4de37f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.5-bookworm	fbcea1bd13b6	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/python :3.10	70c9cc675605	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/python :3.11-slim	9534e5a8e315	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/python :3.8	d41127070014	sqlite3@3.40.1-2	no fix listed	1
library/python :3.9	da5aee29682d	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/python :3.14.3-alpine3.23	faee120f7885	sqlite@3.51.2-r0	3.53.4-r0	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
library/redis :8.6.2	009cc37796fb	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.8.0	234c902a2db4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.8.1-trixie	3eafabb4c93f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.6.3	4d25e2fe601f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.4	8df317692c59	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redmine :6.1.2	04ac44a2595b	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1