CVE-2026-11824

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,797; of 17,792 indexed, latest versions
Container images: 1,544; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,797 of 17,792 indexed charts deploy, on 1,544 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+37 more	3.37.2-2ubuntu0.6, 3.45.1-1ubuntu2.6, 3.46.1-7+deb13u2, 3.46.1-7+e3+2 more	1,468
sqliteapk	3.41.2-r4, 3.51.1-r0, 3.51.2-r0	3.53.4-r0	76

OSV records: ALPINE-CVE-2026-11824 DEBIAN-CVE-2026-11824 UBUNTU-CVE-2026-11824 ECHO-3be4-5309-fe51
Also known as: USN-8480-1

Charts affected

1,797 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

1,544 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nextcloud :31.0.10-apache	b7faa1653c39	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nextcloud :34.0.4-apache	de4ad9389386	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nginx :1.29	1881968aff6f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/nginx :1.31	a53fc6c27208	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/node :20	8f693eaa7e0a	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/node :latest	f5d1cc40abc1	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/php :8.4-fpm	59fa733c9af6	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :18.0	073e7c8b84e2	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :17.4	304ab8135187	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :16.11	468e1f126ca5	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :16.6	557fea37a744	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/postgres :18.3	69e8582b781c	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :15.18	6eb0add3b77c	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :15.3	8775adb39f0d	sqlite3@3.40.1-2	no fix listed	1
library/postgres :18.4	8ff36f3c6637	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :18.3	a9abf4275f9e	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.5	aadf2c0696f5	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/postgres :13.12	ced3ba927f4c	sqlite3@3.40.1-2	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	sqlite3@3.40.1-2+deb12u2	no fix listed	1
library/postgres :14.22	eba8ddbdd837	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.10	ebba4f4de37f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/postgres :17.5-bookworm	fbcea1bd13b6	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/python :3.10	70c9cc675605	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/python :3.11-slim	9534e5a8e315	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/python :3.8	d41127070014	sqlite3@3.40.1-2	no fix listed	1
library/python :3.9	da5aee29682d	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/python :3.14.3-alpine3.23	faee120f7885	sqlite@3.51.2-r0	3.53.4-r0	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	sqlite3@3.31.1-4ubuntu0.5	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1
library/redis :8.6.2	009cc37796fb	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.8.0	234c902a2db4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.8.1-trixie	3eafabb4c93f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.6.3	4d25e2fe601f	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redis :8.4	8df317692c59	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/redmine :6.1.2	04ac44a2595b	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/telegraf :1.27	507a3eecf809	sqlite3@3.40.1-2	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	sqlite3@3.40.1-2+deb12u1	no fix listed	1
library/wordpress :6.4.3-apache	8ae66efb09a2	sqlite3@3.40.1-2	no fix listed	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2	1
library/wordpress :php8.1-apache	f73396626d2f	sqlite3@3.46.1-7	3.46.1-7+deb13u2	1
library/zookeeper :3.8-temurin	55d1e5b2e601	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.6	1
library/zookeeper :3.9.4	dfa9ba46d14b	sqlite3@3.37.2-2ubuntu0.5	3.37.2-2ubuntu0.6	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	sqlite3@3.40.1-2+deb12u2	no fix listed	1
lightbend/curl :7.47.0	b0c9894ac8dd	sqlite3@3.11.0-1ubuntu1	no fix listed	1
linode/linode-blockstorage-csi-driver :v1.1.4	09f3282bf53d	sqlite@3.51.2-r0	3.53.4-r0	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	sqlite3@3.22.0-1ubuntu0.4	no fix listed	1