CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/sonarqube :10.0.0-community	ef9723cf4fe4	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/telegraf :1.27	507a3eecf809	sqlite3@3.40.1-2	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/wordpress :6.4.3-apache	8ae66efb09a2	sqlite3@3.40.1-2	no fix listed	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/wordpress :php8.1-apache	f73396626d2f	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/zookeeper :3.8-temurin	55d1e5b2e601	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/zookeeper :3.9.4	dfa9ba46d14b	sqlite3@3.37.2-2ubuntu0.5	3.37.2-2ubuntu0.6	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	sqlite3@3.40.1-2+deb12u2	no fix listed	1
lightbend/curl :7.47.0	b0c9894ac8dd	sqlite3@3.11.0-1ubuntu1	no fix listed	1
linode/linode-blockstorage-csi-driver :v1.1.4	09f3282bf53d	sqlite@3.51.2-r0	3.53.4-r0	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
linuxserver/calibre-web :0.6.24	241009026e6f	sqlite3@3.45.1-1ubuntu2.4	3.45.1-1ubuntu2.6	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
linuxserver/cloud9 :latest	45c5fe102ff3	sqlite3@3.22.0-1ubuntu0.5	no fix listed	1
linuxserver/code-server :4.10.1	a5e43a05ae79	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
linuxserver/codimd :latest	b801bbcf6386	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
linuxserver/deluge :18.04.1	0ac871624394	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
linuxserver/foldingathome :7.6.21	9a997426d71e	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.6	1
linuxserver/jellyfin :10.7.7	2427dde159a2	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
linuxserver/ombi :3.0.4572-ls45	2fbb21fb4903	sqlite3@3.22.0-1	no fix listed	1
linuxserver/plex :1.25.2	4a13ced2326c	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
linuxserver/prowlarr :2.4.0.5397-ls149	a46d0ce0a823	sqlite@3.51.2-r0	3.53.4-r0	1
linuxserver/qbittorrent :5.2.2	dd24a5f3db32	sqlite@3.51.2-r0	3.53.4-r0	1
linuxserver/sonarr :version-4.0.17.2952	02bc962946fe	sqlite@3.51.2-r0	3.53.4-r0	1
linuxserver/unifi-controller :8.0.24	0ae315a3a456	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
linuxserver/unifi-controller :7.3.83	ab105cc50322	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
litmuschaos/mongo :4.2.8	99961210d467	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
livekit/ingress :v1.2.2	1ab01641b366	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
lmacka/snappass :2.1.2	93f5c048b7d4	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
localstack/localstack :latest	4abc29e923e5	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
localstack/localstack :3.1	9d278167f2b7	sqlite3@3.40.1-2	no fix listed	1
locustio/locust :2.24.1	51d866285170	sqlite3@3.40.1-2	no fix listed	1
loeken/jellyfin :10.11.8	7efbc24e47b0	sqlite@3.51.2-r0	3.53.4-r0	1
loeken/sonarr :4.0.18	ad0528ab7ba0	sqlite@3.51.2-r0	3.53.4-r0	1
logiqai/flash :v3.10.2	65b996bc7bdc	sqlite3@3.40.1-2	no fix listed	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
louislam/its-mytabs :1.7.0	2e478d3170bd	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
louislam/uptime-kuma :2.2.1-slim	059b49d64739	sqlite3@3.40.1-2+deb12u2	no fix listed	1
louislam/uptime-kuma :2.0.2	4c364ef96aad	sqlite3@3.40.1-2+deb12u2	no fix listed	1
louislam/uptime-kuma :2.4.0	91e963bfda56	sqlite3@3.40.1-2+deb12u2	no fix listed	1
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	sqlite3@3.40.1-2+deb12u2	no fix listed	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
luligu/matterbridge :3.10.9	c01108d904ec	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
lumenvox/cloud-binary-storage :2.0.0	53decadc102d	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
machines/filestash :latest	0b8fc005e52e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
makeplane/plane-mcp-server :v0.3.0	71b7252adef0	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1