StackRadar

CVE-2026-39113

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,418
of 17,790 indexed, latest versions
Container images
1,119
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,418 of 17,790 indexed charts deploy, on 1,119 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more3.46.1-7+e61,119
OSV records
DEBIAN-CVE-2026-39113UBUNTU-CVE-2026-39113ECHO-ba17-0503-20ce

Charts affected

1,418 by stars
ChartLatestAffected imagesRadar Score
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,603
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

16,134
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

14,304
postgresqlcloudve4.0.01 of 2See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
bitnami/minideb:latest835e5f8392c3
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

829
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

13,166
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

3,752
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,509
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,856
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
sqlite3@3.46.1-7
no fix listed

Open the chart page →

7,193
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
sqlite3@3.46.1-7
no fix listed

Open the chart page →

6,982
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

3,935
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
sqlite3@3.45.1-1ubuntu2.1
no fix listed

Open the chart page →

4,648
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
sqlite3@3.45.1-1ubuntu2.5
no fix listed

Open the chart page →

13,312
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,797
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

3,840
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

8,011
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

8,011
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.12 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

2 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
sqlite3@3.31.1-4ubuntu0.5
no fix listed
library/redis:latest298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

10,157
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
sqlite3@3.31.1-4ubuntu0.6
no fix listed

Open the chart page →

4,691
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
sqlite3@3.46.1-7
no fix listed

Open the chart page →

2,220
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

9,296
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,242
csghubcsghubVerified publisher2.4.33 of 34See more

csghub csghub 2.4.3

3 of the 34 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
sqlite3@3.46.1-7+deb13u1
no fix listed
opencsghq/label-studio:v2.4.0b4e849fcf94a
sqlite3@3.46.1-7+deb13u1
no fix listed
opencsghq/postgres:15.1842578c9d3ebd
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

59,452
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

11,544
dataflowcsghubVerified publisher2.5.02 of 7See more

dataflow csghub 2.5.0

2 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
sqlite3@3.46.1-7+deb13u1
no fix listed
opencsghq/postgres:15.19b98600564e07
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

6,732
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
sqlite3@3.31.1-4ubuntu0.5
no fix listed
wazuh/wazuh-manager:4.4.121994f40e0da
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

13,944
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

7,548
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,983
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,242
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
sqlite3@3.22.0-1ubuntu0.3
no fix listed

Open the chart page →

20,242
damap-chartdamapVerified publisher0.3.04 of 5See more

damap-chart damap 0.3.0

4 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
sqlite3@3.46.1-7+deb13u1
no fix listed
library/postgres:16f1c3376c26f2
sqlite3@3.46.1-7+deb13u1
no fix listed
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
sqlite3@3.45.1-1ubuntu2.5
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

14,322
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,598
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
sqlite3@3.22.0-1
no fix listed

Open the chart page →

27,768
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,649
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

18,881
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
no fix listed

Open the chart page →

6,184
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
sqlite3@3.45.1-1ubuntu2
no fix listed

Open the chart page →

6,035
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
sqlite3@3.22.0-1
no fix listed

Open the chart page →

22,445
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
sqlite3@3.37.2-2ubuntu0.4
no fix listed

Open the chart page →

6,230
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
sqlite3@3.22.0-1
no fix listed

Open the chart page →

24,375
cloudpremdatadogVerified publisher0.5.21 of 1See more

cloudprem datadog 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

1,170
observability-pipelines-workerdatadogVerified publisher2.21.21 of 1See more

observability-pipelines-worker datadog 2.21.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gcr.io/datadoghq/observability-pipelines-worker:2.21.1de6ff0f1a854
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

838
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
sqlite3@3.45.1-1ubuntu2.5
no fix listed

Open the chart page →

2,169
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

15,861

Container images carrying it

1,119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
sqlite3@3.37.2-2
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
no fix listed
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
sqlite3@3.45.1-1ubuntu2.4
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
sqlite3@3.37.2-2ubuntu0.1
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/groundcover/tools:20260719b705e0cbe171
sqlite3@3.46.1-7+e5
3.46.1-7+e6
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
sqlite3@3.45.1-1ubuntu2.5
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
sqlite3@3.45.1-1ubuntu2.6
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
sqlite3@3.31.1-4ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.