StackRadar

CVE-2026-39113

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,417
of 17,787 indexed, latest versions
Container images
1,113
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,417 of 17,787 indexed charts deploy, on 1,113 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more3.46.1-7+e61,113
OSV records
DEBIAN-CVE-2026-39113UBUNTU-CVE-2026-39113ECHO-ba17-0503-20ce

Charts affected

1,417 by stars
ChartLatestAffected imagesRadar Score
cortexcortex3.3.82 of 4See more

cortex cortex 3.3.8

2 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
sqlite3@3.46.1-7+deb13u1
no fix listed
library/nginx:1.3105b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,921
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

1,539
valkeygroundhog2k2.3.41 of 1See more

valkey groundhog2k 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2475ee65cc75c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

818
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

4,951
docmosthelmforgeVerified publisher1.2.112 of 4See more

docmost helmforge 1.2.11

2 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/redis:8.10.1298e5b3bc566
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,602
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,179
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,913
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
sqlite3@3.45.1-1ubuntu2.1
no fix listed

Open the chart page →

8,685
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,232
passboltpassbolt2.1.13 of 6See more

passbolt passbolt 2.1.1

3 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/haproxy:3.4.10f597665a2a6
sqlite3@3.46.1-7+deb13u1
no fix listed
library/mariadb:latestdd9b303aed4f
sqlite3@3.45.1-1ubuntu2.7
no fix listed
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

13,455
reposilitereposilite1.4.21 of 1See more

reposilite reposilite 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

1,028
selenium-gridselenium-grid0.59.13 of 4See more

selenium-grid selenium-grid 0.59.1

3 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
selenium/hub:4.48.0-20260905d47c27474cb4
sqlite3@3.45.1-1ubuntu2.7
no fix listed
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
sqlite3@3.45.1-1ubuntu2.7
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

7,168
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
sqlite3@3.37.2-2ubuntu0.6
no fix listed

Open the chart page →

2,927
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,392
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

8,907
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

2,716
bambooatlassian-data-centerVerified publisher2.0.151 of 2See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.114af4bb6c8d46
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

2,079
baserowbaserow-chartVerified publisher1.0.562 of 6See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
sqlite3@3.46.1-7+deb13u1
no fix listed
baserow/web-frontend:2.3.3566d24c7d9f5
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

17,346
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
sqlite3@3.31.1-4ubuntu0.2
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

53,012
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
headwindmdm/hmdm:0.1.93550b4840840
sqlite3@3.37.2-2ubuntu0.7
no fix listed

Open the chart page →

5,915
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

930
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
sqlite3@3.37.2-2ubuntu0.5
no fix listed

Open the chart page →

27,358
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
sqlite3@3.46.1-7
no fix listed

Open the chart page →

2,176
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,615
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
sqlite3@3.45.1-1ubuntu2.1
no fix listed

Open the chart page →

2,578
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
sqlite3@3.37.2-2ubuntu0.5
no fix listed
library/memcached:1.6.40cc523a19da58
sqlite3@3.46.1-7
no fix listed

Open the chart page →

14,043
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,800
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
sqlite3@3.45.1-1ubuntu2.7
no fix listed
library/phpmyadmin:latest3a8a8d6b5289
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

12,270
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

9,535
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

3,654
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,638
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

2,039
hertzbeathertzbeatOfficialVerified publisher1.8.13 of 4See more

hertzbeat hertzbeat 1.8.1

3 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
sqlite3@3.45.1-1ubuntu2.5
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
sqlite3@3.45.1-1ubuntu2.5
no fix listed
library/postgres:159b1d34adbce1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

14,109
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/neo4j:2026.05.06c162e2432f8
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

10,460
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
sqlite3@3.31.1-4ubuntu0.7
no fix listed

Open the chart page →

6,354
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
sqlite3@3.22.0-1ubuntu0.4
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
sqlite3@3.31.1-4ubuntu0.3
no fix listed

Open the chart page →

97,040
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

10,569
testkubekubeshop2.13.21 of 5See more

testkube kubeshop 2.13.2

1 of the 5 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
sqlite3@3.45.1-1ubuntu2.7
no fix listed

Open the chart page →

5,012
libredb-studiolibredb-studioVerified publisher0.1.631 of 1See more

libredb-studio libredb-studio 0.1.63

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,220
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

8,767
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

10,536
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
sqlite3@3.46.1-9ubuntu0.2
no fix listed

Open the chart page →

820
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
sqlite3@3.37.2-2ubuntu0.7
no fix listed

Open the chart page →

2,364
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
sqlite3@3.45.1-1ubuntu2.5
no fix listed

Open the chart page →

2,996
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

5,568
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
sqlite3@3.22.0-1ubuntu0.7
no fix listed

Open the chart page →

19,805
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
sqlite3@3.37.2-2ubuntu0.1
no fix listed

Open the chart page →

8,251
vaultwardenandrenarchyVerified publisher6.27.01 of 1See more

vaultwarden andrenarchy 6.27.0

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,756
limesurveyarea-42Verified publisher0.3.941 of 2See more

limesurvey area-42 0.3.94

1 of the 2 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.0f48962e1528c
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

4,678
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39113.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
sqlite3@3.31.1-4ubuntu0.5
no fix listed

Open the chart page →

8,007

Container images carrying it

1,113 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/groundcover/tools:20260719b705e0cbe171
sqlite3@3.46.1-7+e5
3.46.1-7+e6
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
quay.io/maxiv/pieeat:0.9.3099715479210
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
sqlite3@3.46.1-7+deb13u1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
sqlite3@3.45.1-1ubuntu2.5
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
sqlite3@3.46.1-7
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
sqlite3@3.45.1-1ubuntu2.6
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
sqlite3@3.46.1-9ubuntu0.2
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
sqlite3@3.46.1-7+deb13u1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
sqlite3@3.31.1-4ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.