StackRadarChart IndexLive demo

CVE-2026-39113

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.0; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,413; of 17,797 indexed, latest versions
Container images: 1,108; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,413 of 17,797 indexed charts deploy, on 1,108 images.

Affected package	Affected versions	Fixed in	Images
sqlite3deb	3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more	3.46.1-7+e6	1,108

OSV records: DEBIAN-CVE-2026-39113 UBUNTU-CVE-2026-39113 ECHO-ba17-0503-20ce

Charts affected

1,413 by stars

Chart

Latest

Affected images

Radar Score

longhornwenerme

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

15,310

wikiwikijs

1 of 2 See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

5,497

jaegerwikimedia

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	sqlite3@3.37.2-2ubuntu0.3	no fix listed

Open the chart page →

9,340

kibanawiremind

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	sqlite3@3.31.1-4ubuntu0.6	no fix listed

Open the chart page →

6,336

wordpress-alpinewordpress-alpine

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	sqlite3@3.45.1-1ubuntu2.6	no fix listed
library/memcached :1.6.45	dc561d52bb8a	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

4,080

Wordpresswordpress-mariadb

2 of 2 See more

Wordpress wordpress-mariadb 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	sqlite3@3.45.1-1ubuntu2.7	no fix listed
library/wordpress :latest	5a93c470ae82	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sqlite3@3.37.2-2ubuntu0.3	no fix listed

Open the chart page →

14,218

nginx-chartxxoznge-nginx

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

1,861

NEW_APPzekker6

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	sqlite3@3.46.1-7+deb13u1	no fix listed

Open the chart page →

1,861

clickhousezloi-space

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sqlite3@3.22.0-1ubuntu0.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sqlite3@3.31.1-4ubuntu0.2	no fix listed

Open the chart page →

9,272

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-39113.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	sqlite3@3.37.2-2ubuntu0.7	no fix listed

Open the chart page →

7,936

Container images carrying it

1,108 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	sqlite3@3.45.1-1ubuntu2.5	no fix listed	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	sqlite3@3.46.1-7	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	166a06f73d8c	sqlite3@3.45.1-1ubuntu2.6	no fix listed	1
registry.gitlab.com/dyff/workflows-aggregator :0.16.9	b7984253b128	sqlite3@3.46.1-9ubuntu0.2	no fix listed	1
registry.gitlab.com/egos-tech/smtp :latest	df842ed79211	sqlite3@3.46.1-7+deb13u1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	sqlite3@3.46.1-7+deb13u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.5.5-gitlab2	5b7636dfba3f	sqlite3@3.46.1-7+deb13u1	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	sqlite3@3.31.1-4ubuntu0.2	no fix listed	1