CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r14	cc55da2fa366	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :17.2.0-debian-12-r2	e6fa49bb0347	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	sqlite3@3.40.1-2	no fix listed	1
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	sqlite3@3.40.1-2	no fix listed	1
bitnami/minideb :latest	835e5f8392c3	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
blackducksoftware/bdba-fluentd :2026.6.3	c14bbbf45536	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
blackducksoftware/bdba-frontend :2026.6.3	b10eaea94fd3	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
blockstream/bitcoind :27.2	9472492530e3	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bmeares/meerschaum :2.8.4	8e9c5bacaa82	sqlite3@3.40.1-2+deb12u1	no fix listed	1
bnjbvr/kresus :0.22.1	37e216b182c8	sqlite3@3.40.1-2+deb12u1	no fix listed	1
boky/postfix :5.1.0	aafc77238423	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
boky/postfix :4.4.0	f3f247fd4252	sqlite3@3.40.1-2+deb12u1	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
budibase/database :2.1.0	d90f656261c9	sqlite3@3.40.1-2+deb12u2	no fix listed	1
budibase/proxy :3.41.3	8d780b6ee602	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
bugsink/bugsink :2	ecdd84587746	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
burakince/mlflow :3.16.0	ab4b566644b9	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
carbone/carbone-ee :full-5.11.0	518172cbad49	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	sqlite3@3.40.1-2+deb12u1	no fix listed	1
castai/hibernate :v0.14	da62858c8381	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
castlemock/castlemock :latest	b7f3f1527ba9	sqlite3@3.45.1-1ubuntu2.1	3.45.1-1ubuntu2.6	1
castopod/castopod :1.12.10	1fd37280cbb2	sqlite3@3.40.1-2	no fix listed	1
castopod/castopod :1.15.5	4e4f0440520f	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
cccs/assemblyline-core :4.7.4.stable20	098127270065	sqlite3@3.40.1-2+deb12u2	no fix listed	1
cccs/assemblyline-rust :4.7.4.stable20	2be5e6a57427	sqlite3@3.40.1-2+deb12u2	no fix listed	1
cccs/assemblyline-socketio :4.7.4.stable20	2b88493b62f7	sqlite3@3.40.1-2+deb12u2	no fix listed	1
cccs/assemblyline-ui :4.7.4.stable20	efa75509b854	sqlite3@3.40.1-2+deb12u2	no fix listed	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	sqlite3@3.37.2-2ubuntu0.5	3.37.2-2ubuntu0.6	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	sqlite3@3.8.2-1ubuntu2.2	no fix listed	1
chetangautamm/repo :sipp.v3	e7f7049e1544	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
cheyang/distributed-tf :1.6.0	46cc34755493	sqlite3@3.11.0-1ubuntu1	no fix listed	1
chiefonboarding/chiefonboarding :v2.5.0	d0964135ea82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
chocobozzz/peertube :v8.1.5	052712130691	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
chriseaton/adventureworks :latest	54c3384ce701	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
chromadb/chroma :1.5.7	fc8dc8e11fb2	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
circleci/runner :launch-agent	9bdc62f02162	sqlite3@3.31.1-4ubuntu0.6	no fix listed	1
citizenstig/httpbin :latest	b81c818ccb86	sqlite3@3.11.0-1ubuntu1	no fix listed	1
ckan/ckan-base :2.12.0	87ecf3f27ad6	sqlite3@3.40.1-2+deb12u2	no fix listed	1
ckulka/baikal :0.10.1-nginx	434bdd162247	sqlite3@3.40.1-2+deb12u1	no fix listed	1
cloudreve/cloudreve :4.18.0	f7a464100bf6	sqlite@3.51.2-r0	3.53.4-r0	1
cloudtooling/moodle :5.2.3	f4f04e0fc401	sqlite3@3.40.1-2+deb12u2	no fix listed	1
cloudve/janis-terminal :latest	af56e77ca587	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1