StackRadar

CVE-2026-39113

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,418
of 17,790 indexed, latest versions
Container images
1,119
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,418 of 17,790 indexed charts deploy, on 1,119 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more3.46.1-7+e61,119
OSV records
DEBIAN-CVE-2026-39113UBUNTU-CVE-2026-39113ECHO-ba17-0503-20ce

Charts affected

1,418 by stars
ChartLatestAffected imagesRadar Score
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

10,570
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,691
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
sqlite3@3.46.1-7
no fix listed

Open the chart page →

3,493
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
sqlite3@3.37.2-2ubuntu0.3
no fix listed

Open the chart page →

6,161
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sqlite3@3.45.1-1ubuntu2.3
no fix listed

Open the chart page →

8,899
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
sqlite3@3.46.1-7
no fix listed

Open the chart page →

9,135
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,877
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

9,835
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

14,872
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
sqlite3@3.31.1-4ubuntu0.7
no fix listed

Open the chart page →

7,360
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

3,617
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

7,319
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
sqlite3@3.46.1-7
no fix listed

Open the chart page →

4,591
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,498
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

16,484
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

32,812
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
kestra-starterkestraOfficialVerified publisher2.0.21 of 5See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
sqlite3@3.46.1-7
no fix listed

Open the chart page →

5,455
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat56490ac14a31
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

1,640
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
sqlite3@3.22.0-1ubuntu0.4
no fix listed

Open the chart page →

12,538
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

10,297
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

12,206
klagklagVerified publisher0.3.141 of 1See more

klag klag 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
themoah/klag:0.2.16610579160052
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

719
csa-exporterklicktippVerified publisher0.1.41 of 1See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,022
proxysqlklicktippVerified publisher1.3.01 of 1See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.8947a7abad45b
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,543
rspamdklicktippVerified publisher1.6.01 of 1See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,843
snds-exporterklicktippVerified publisher0.2.51 of 1See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,031
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
sqlite3@3.22.0-1
no fix listed

Open the chart page →

14,846
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,649
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

8,927
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
sqlite3@3.37.2-2ubuntu0.3
no fix listed

Open the chart page →

4,491
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

9,698
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,684
aapm-servicekron-pam-aapm-helmcharts1.2.51 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.1.39dd602db8baa
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

2,648
kron-aapm-agentkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.41cc7d5be6529
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

2,749
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,849
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
sqlite3@3.46.1-7
no fix listed

Open the chart page →

8,478
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

1,257
kubeintellectkubeintellectVerified publisher2.5.01 of 2See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,882
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

7,208
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
sqlite3@3.45.1-1ubuntu2.3
no fix listed

Open the chart page →

5,003
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
sqlite3@3.46.1-7
no fix listed

Open the chart page →

1,650
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,452
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,547
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,057

Container images carrying it

1,119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
sqlite3@3.37.2-2
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
sqlite3@3.45.1-1ubuntu2.1
no fix listed
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
sqlite3@3.45.1-1ubuntu2.4
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
sqlite3@3.37.2-2ubuntu0.1
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
sqlite3@3.22.0-1ubuntu0.6
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/groundcover/tools:20260719b705e0cbe171
sqlite3@3.46.1-7+e5
3.46.1-7+e6
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
sqlite3@3.45.1-1ubuntu2.5
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
sqlite3@3.45.1-1ubuntu2.6
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
sqlite3@3.31.1-4ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.