CVE-2026-11822

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,811; of 17,797 indexed, latest versions
Container images: 1,559; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,811 of 17,797 indexed charts deploy, on 1,559 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,482
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	77

OSV records: ALPINE-CVE-2026-11822 DEBIAN-CVE-2026-11822 UBUNTU-CVE-2026-11822 ECHO-acfd-ccab-2f14
Also known as: USN-8480-1

Charts affected

1,811 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sqlite3@3.40.1-2+deb12u1	no fix listed

Open the chart page →

11,622

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sqlite3@3.40.1-2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	sqlite3@3.40.1-2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	sqlite3@3.40.1-2	no fix listed

Open the chart page →

13,813

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-11822.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	sqlite3@3.40.1-2+deb12u2	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-11822.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

Container images carrying it

1,559 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
dolibarr/dolibarr :24.0.0	69ec52e3b7ef	sqlite3@3.40.1-2+deb12u2	no fix listed	1
dolibarr/dolibarr :22.0.4	7ad88fc9b13c	sqlite3@3.40.1-2+deb12u2	no fix listed	1
domainmod/domainmod :4.23.0	4017bfe4c597	sqlite3@3.40.1-2	no fix listed	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	sqlite3@3.31.1-4ubuntu0.7	no fix listed	1
dpage/pgadmin4 :9.11.0	50700ac17936	sqlite@3.51.1-r0	3.53.4-r0	1
dragonflyoss/client :v1.5.5	9fe2a1d6206f	sqlite3@3.40.1-2+deb12u2	no fix listed	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	sqlite3@3.40.1-2	no fix listed	1
drumsergio/duplicacy-exporter :0.3.4	ca3476077215	sqlite@3.51.2-r0	3.53.4-r0	1
drumsergio/genieacs :1.2.16.0	28244054e1bf	sqlite3@3.40.1-2+deb12u2	no fix listed	1
dserio83/velero-api :0.3.1	6b3d9115fee2	sqlite3@3.40.1-2+deb12u1	no fix listed	1
dserio83/velero-watchdog :0.1.8	d5deae589229	sqlite3@3.40.1-2+deb12u1	no fix listed	1
dzikoysk/reposilite :3.5.26	4128c2d7a6ba	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6	1
eclipseaerios/aerios-k8s-shim :v1.0.0	d4ed3d8e5db4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
eclipseaerios/entrypoint-balancer :1.3.0	43cd999a008d	sqlite@3.51.2-r0	3.53.4-r0	1
eclipseaerios/hlo-allocator :v3.0.0	3cc1d94cfe96	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
eclipseaerios/hlo-data-aggregator :v3.0.0	b433c2b9f5dc	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
eclipseaerios/hlo-deployment-engine :v3.0.0	d582d39208c7	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
eclipseaerios/hlo-fe-engine :v3.0.0	8ed2df4ca692	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
eclipseaerios/management-portal-backend :1.2.2	15fba526a4f8	sqlite@3.51.2-r0	3.53.4-r0	1
eclipseaerios/self-awareness-hardware-info :1.4.4	34b72f45b46a	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
eclipseaerios/trust-manager :1.0.0	f55442e2c0ed	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
elastic/apm-server :7.17.6	c7a1c63257d0	sqlite3@3.31.1-4ubuntu0.3	no fix listed	1
elastictranscoder/media :627e21dc	963ab3858c6b	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
elastictranscoder/media-storage :f6d861a0	26208b8c2359	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
elautoestopista/aeneabot :4.2.1	125ba620d528	sqlite@3.51.2-r0	3.53.4-r0	1
electriccoinco/lightwalletd :v0.5.4	2ae3a551e111	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
emqx/emqx :5.8.9	35b46f7aa7a0	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
emqx/emqx-enterprise :6.3.0	3b6d9c0c4199	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1
epamedp/edp-gerrit :3.14.2	49e8fe9c4855	sqlite@3.51.2-r0	3.53.4-r0	1
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	sqlite3@3.22.0-1ubuntu0.7	no fix listed	1
erenozcan17/flask_analytics :v3.1	c9b6f0dfbffc	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
escaping/core-keeper-dedicated :latest	87fa79255962	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
esphome/esphome :2026.7.4	4866347cb5b4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
esphome/esphome :2026.9.0	9959730a04c7	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
esphome/esphome :2024.3.0	9ab8cc88b28c	sqlite3@3.40.1-2	no fix listed	1
esphome/esphome :2024.12.2	b2c6322700ac	sqlite3@3.40.1-2+deb12u1	no fix listed	1
esphome/esphome :2025.3.0	def8b6e4f517	sqlite3@3.40.1-2+deb12u1	no fix listed	1
espocrm/espocrm :9.3.10	1b5a24504ed9	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	sqlite3@3.11.0-1ubuntu1	no fix listed	1
ethpandaops/assertoor :latest	1efa2fba6711	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
ethpandaops/buildoor :main	a51b9a1a770c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
ethpandaops/dora :master	2381ea793a12	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
ethpandaops/forky :debian-latest	c937f4ba737c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
ethpandaops/rpc-snooper :latest	c0b30fcf64bc	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1