CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
apachepulsar/pulsar :3.0.7	9c9947de139d	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
apachepulsar/pulsar :2.9.0	d056c89b7131	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
apache/ranger :2.7.0	76c176e8a0e4	sqlite3@3.37.2-2ubuntu0.4	3.37.2-2ubuntu0.6	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
apache/skywalking-ui :8.9.1	80530f0308a5	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
apache/superset :4.0.1	ab9467fd712c	sqlite3@3.40.1-2	no fix listed	1
apache/tika :3.3.1.0	90b7fa1dc018	sqlite3@3.46.1-9	3.46.1-9ubuntu0.1	1
apache/tika :2.9.0.0	92d055a84e9e	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
appwrite/appwrite :1.9.0	1aaa70127114	sqlite@3.51.2-r0	3.53.4-r0	1
appwrite/new :1.1.96-self-hosted	af65a77db50e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
archivebox/archivebox :0.7.4	1a5a37331091	sqlite3@3.40.1-2+deb12u2	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	sqlite3@3.40.1-2	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	sqlite3@3.40.1-2	no fix listed	1
artifacthub/tracker :v1.23.0	5368d21a6e5c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	sqlite3@3.40.1-2	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	sqlite3@3.45.1-1ubuntu2.4	3.45.1-1ubuntu2.6	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
assistiot/identity-manager_db :latest	0d3e6d35f168	sqlite3@3.40.1-2	no fix listed	1
assistiot/open_api_backend :1.1.2	30812ba93555	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	sqlite3@3.40.1-2	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	sqlite3@3.40.1-2	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	sqlite3@3.40.1-2	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
atlassian/jira-software :8.14.0	37bc46cbec1a	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	sqlite3@3.45.1-1ubuntu2.1	3.45.1-1ubuntu2.6	1
avinash263/pyredis263 :latest	aa2b8727f1a6	sqlite3@3.40.1-2	no fix listed	1
baserow/backend :2.3.3	7c00549b3a6f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
baserow/backend :1.31.1	e0b3c8130b91	sqlite3@3.40.1-2+deb12u1	no fix listed	1
baserow/baserow :1.30.1	df0c42eb67e8	sqlite3@3.40.1-2+deb12u1	no fix listed	1
baserow/web-frontend :2.3.3	566d24c7d9f5	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :16.4.0-debian-12-r11	02e2f47a405e	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/postgresql :17.5.0-debian-12-r16	687034f33da6	sqlite3@3.40.1-2+deb12u1	no fix listed	1