CVE-2026-39113
MediumAdvisory
Published 25 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.0
- base score, highest
- EPSS
- 0.002
- 11th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,417
- of 17,787 indexed, latest versions
- Container images
- 1,113
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 1,417 of 17,787 indexed charts deploy, on 1,113 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3+33 more | 3.46.1-7+e6 | 1,113 |
Charts affected
1,417 by stars
Container images carrying it
1,113 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 05b8cb60c354 | sqlite3 | no fix listed | 106 |
| dellcloud/ | 6ba7b22caacd | sqlite3 | no fix listed | 79 |
| flyway/ | 22d97ceb0c47 | sqlite3 | no fix listed | 79 |
| library/ | 4ef4dbc939d6 | sqlite3 | no fix listed | 69 |
| library/ | 298e5b3bc566 | sqlite3 | no fix listed | 40 |
| library/ | d5792f71a949 | sqlite3 | no fix listed | 23 |
| jenkins/ | c1e4c349365f | sqlite3 | no fix listed | 13 |
| library/ | dd9b303aed4f | sqlite3 | no fix listed | 12 |
| library/ | f1c3376c26f2 | sqlite3 | no fix listed | 12 |
| library/ | 8e70544b6c76 | sqlite3 | no fix listed | 10 |
| library/ | 67f41722b7a8 | sqlite3 | no fix listed | 10 |
| library/ | 8a279e9396a8 | sqlite3 | no fix listed | 10 |
| library/ | e582c0bc7766 | sqlite3 | no fix listed | 8 |
| jellyfin/ | aefb67e6a7ff | sqlite3 | no fix listed | 7 |
| library/ | 3a8a8d6b5289 | sqlite3 | no fix listed | 7 |
| library/ | 156f0b253fd6 | sqlite3 | no fix listed | 7 |
| vaultwarden/ | 094b5689ed81 | sqlite3 | no fix listed | 7 |
| ghcr.io/ | aa810a36942c | sqlite3 | no fix listed | 7 |
| library/ | ce66c7be32a0 | sqlite3 | no fix listed | 6 |
| library/ | 9b1d34adbce1 | sqlite3 | no fix listed | 6 |
| library/ | a02db8cac496 | sqlite3 | no fix listed | 6 |
| library/ | 5a93c470ae82 | sqlite3 | no fix listed | 6 |
| valkey/ | 64e361b630ec | sqlite3 | no fix listed | 6 |
| library/ | 979c38c2228d | sqlite3 | no fix listed | 5 |
| library/ | 75c93cc91e76 | sqlite3 | no fix listed | 5 |
| library/ | 4be76f674fc4 | sqlite3 | no fix listed | 5 |
| valkey/ | c123e3715db6 | sqlite3 | no fix listed | 5 |
| artifacthub/ | 4fd34fa635cc | sqlite3 | no fix listed | 4 |
| jaegertracing/ | d48d6dab2c65 | sqlite3 | no fix listed | 4 |
| library/ | 5e15a3f014ed | sqlite3 | no fix listed | 4 |
| library/ | 628741415fc9 | sqlite3 | no fix listed | 4 |
| library/ | 6efa05203990 | sqlite3 | no fix listed | 4 |
| library/ | 4689940c6838 | sqlite3 | no fix listed | 4 |
| library/ | c3f70098e01d | sqlite3 | no fix listed | 4 |
| oscarsotosanchez/ | 911ec961d10b | sqlite3 | no fix listed | 4 |
| valkey/ | 930b41430fb7 | sqlite3 | no fix listed | 4 |
| ghcr.io/ | 7f9a1d574958 | sqlite3 | no fix listed | 4 |
| cloudve/ | 4a3d7fae90bb | sqlite3 | no fix listed | 3 |
| dgraph/ | 3b55ea83fffe | sqlite3 | no fix listed | 3 |
| gchq/ | 5ec58edbb2db | sqlite3 | no fix listed | 3 |
| guacamole/ | f344085e618b | sqlite3 | no fix listed | 3 |
| jacobalberty/ | 896c0ab82d33 | sqlite3 | no fix listed | 3 |
| library/ | 78387bc3881b | sqlite3 | no fix listed | 3 |
| selenium/ | 02f251d48d5f | sqlite3 | no fix listed | 3 |
| vaultwarden/ | ebdfe70701c6 | sqlite3 | no fix listed | 3 |
| xenondb/ | 0e26872a2b67 | sqlite3 | no fix listed | 3 |
| quay.io/ | dd3f47d5a5e4 | sqlite3 | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | sqlite3 | no fix listed | 3 |
| apache/ | 319cd8a81ed1 | sqlite3 | no fix listed | 2 |
| apache/ | ae0b86d3c4d0 | sqlite3 | no fix listed | 2 |