StackRadar

CVE-2026-39113

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,404
of 17,790 indexed, latest versions
Container images
1,100
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,404 of 17,790 indexed charts deploy, on 1,100 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more3.46.1-7+e61,100
OSV records
DEBIAN-CVE-2026-39113UBUNTU-CVE-2026-39113ECHO-ba17-0503-20ce

Charts affected

1,404 by stars
ChartLatestAffected imagesRadar Score
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,201
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

19,784
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

4,002
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
sqlite3@3.37.2-2ubuntu0.3
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
sqlite3@3.37.2-2ubuntu0.1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

15,707
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
sqlite3@3.37.2-2ubuntu0.3
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

17,110
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
sqlite3@3.46.1-7
no fix listed

Open the chart page →

37,184
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
sqlite3@3.46.1-7
no fix listed

Open the chart page →

7,521
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
sqlite3@3.45.1-1ubuntu2.1
no fix listed

Open the chart page →

7,338
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,819
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,423
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

23,407
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
sqlite3@3.22.0-1ubuntu0.4
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
sqlite3@3.31.1-4ubuntu0.5
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

22,677
assemblylineassemblylineVerified publisher7.4.191 of 12See more

assemblyline assemblyline 7.4.19

1 of the 12 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

12,092
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

9,407
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

8,042
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

7,982
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
sqlite3@3.22.0-1ubuntu0.5
no fix listed

Open the chart page →

5,368
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

42,460
videoaugmentationassist-iot-video-augmentation0.1.02 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
sqlite3@3.31.1-4ubuntu0.5
no fix listed
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

13,986
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

31,807
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,394
bamboo-agentatlassian-data-centerVerified publisher2.0.151 of 1See more

bamboo-agent atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

1,628
autopushautopushVerified publisher0.0.491 of 4See more

autopush autopush 0.0.49

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,822
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

7,166
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,021
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,238
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
valkey/valkey:83fbd2e3e4b6e
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,860
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,750
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
sqlite3@3.31.1-4ubuntu0.3
no fix listed
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
sqlite3@3.31.1-4ubuntu0.3
no fix listed
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

20,785
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,042
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,176
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,233
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
sqlite3@3.37.2-2ubuntu0.3
no fix listed

Open the chart page →

7,239
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
sqlite3@3.45.1-1ubuntu2.5
no fix listed

Open the chart page →

5,108
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

22,916
bdbablackduck2026.6.33 of 9See more

bdba blackduck 2026.6.3

3 of the 9 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
sqlite3@3.46.1-7+deb13u1
no fix listed
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
sqlite3@3.46.1-7+deb13u1
no fix listed
library/memcached:1.6.42-trixiee2a8683c7fbb
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

9,405
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

13,499
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

15,299
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-rwd:log74ded2d92f07
sqlite3@3.46.1-7
no fix listed

Open the chart page →

26,266
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
sqlite3@3.37.2-2ubuntu0.3
no fix listed
library/cassandra:3.11.65aa8400b4b3b
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

19,291
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,839
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,233
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,233
pagesbrixton-pages1.0.02 of 3See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,233
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
sqlite3@3.22.0-1
no fix listed

Open the chart page →

10,782
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

6,746

Container images carrying it

1,100 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-39113.

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.