CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
theradius/loggia :0.4	63ba348546ec	sqlite3@3.40.1-2	no fix listed	1
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
thijsvanloef/palworld-server-docker :v2.5.0	b4ac9ee22483	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
thingsboard/tbmq-integration-executor :2.4.0	b5a9c1addf80	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
thingsboard/tbmq-node :2.4.0	70661025dba5	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
thingsboard/tb-postgres :latest	2d17e4e36edc	sqlite3@3.40.1-2+deb12u2	no fix listed	1
thongngo3301/stakefish :latest	a341af5976e3	sqlite3@3.40.1-2	no fix listed	1
tiago2/cap :2.1	59f5ae4e261e	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
tianon/exim4 :latest	b489049cdbca	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
timescale/timescaledb :latest-pg16	289d55704b1b	sqlite@3.51.2-r0	3.53.4-r0	1
timescale/timescaledb :latest-pg17	bc8527e62f70	sqlite@3.51.2-r0	3.53.4-r0	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	sqlite3@3.37.2-2	3.37.2-2ubuntu0.6	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	sqlite3@3.11.0-1ubuntu1	no fix listed	1
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
tock/gen-ai-orchestrator-server :25.10.7	abf7880e0449	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
tombursch/kitchenowl-backend :v0.7.8	b48e4ab727cd	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
tomsquest/docker-radicale :3.6.1.0	a594c624c5a6	sqlite@3.51.2-r0	3.53.4-r0	1
tpdock/freeradius :2.2.9	3da600c95a49	sqlite3@3.11.0-1ubuntu1	no fix listed	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	sqlite3@3.40.1-2+deb12u1	no fix listed	1
trinodb/trino :405	ee80ab5eeab2	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
trueosiris/vrising :latest	9356f98ad561	sqlite3@3.37.2-2ubuntu0.5	3.37.2-2ubuntu0.6	1
tussanakorndev/kube-pod-alerts :1.0.5	216fdadadf9a	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
tykling/dns_exporter :1.2.3	cd6d650c01c1	sqlite@3.51.2-r0	3.53.4-r0	1
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	sqlite3@3.40.1-2+deb12u1	no fix listed	1
valkey/valkey :8.1.6	1f84517eca8e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
valkey/valkey :9.0.5	4c64dfeae602	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
vaultwarden/server :1.35.4	43498a94b22f	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
vaultwarden/server :1.35.7	9a8eec71f4a5	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
vcnngr/telegram-login :latest	1a849a997b6d	sqlite3@3.40.1-2+deb12u1	no fix listed	1
vcnngr/telegram-rebot :latest	30f1f05e57a6	sqlite3@3.40.1-2+deb12u1	no fix listed	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	sqlite3@3.22.0-1ubuntu0.7	no fix listed	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	sqlite3@3.40.1-2	no fix listed	1
vlebediantsev/notes-project-front :latest	945675fd2636	sqlite3@3.40.1-2	no fix listed	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	sqlite3@3.40.1-2	no fix listed	1
voltha/voltha-cli :1.6.0	c4e41e92f046	sqlite3@3.11.0-1ubuntu1	no fix listed	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	sqlite3@3.8.2-1ubuntu2.1	no fix listed	1
voltha/voltha-netconf :1.6.0	37f80524c207	sqlite3@3.11.0-1ubuntu1	no fix listed	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	sqlite3@3.11.0-1ubuntu1	no fix listed	1
voltha/voltha-onos :5.1.8	e038acb950d3	sqlite3@3.22.0-1ubuntu0.5	no fix listed	1
voltha/voltha-tester :1.7.0	655c3048a602	sqlite3@3.11.0-1ubuntu1.2	no fix listed	1
voltha/voltha-voltha :1.6.0	ff596b62de59	sqlite3@3.11.0-1ubuntu1	no fix listed	1
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
wallarm/gateway-controller :0.4.0	9c6ed23e2f0e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
wavefronthq/proxy :9.2	d1064d28f6eb	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1