StackRadar

CVE-2026-50812

Medium

Advisory

Published 8 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,753
of 17,803 indexed, latest versions
Container images
1,512
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,753 of 17,803 indexed charts deploy, on 1,512 images.

Affected packageAffected versionsFixed inImages
sqlite3deb3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+42 more3.37.2-2ubuntu0.7, 3.45.1-1ubuntu2.7, 3.46.1-7+e4, 3.46.1-9ubuntu0.21,512
OSV records
DEBIAN-CVE-2026-50812UBUNTU-CVE-2026-50812ECHO-f08c-2b40-760b
Also known as
USN-8565-1

Charts affected

1,753 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-50812.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
sqlite3@3.40.1-2+deb12u2
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-50812.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
sqlite3@3.46.1-7+deb13u1
no fix listed

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-50812.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
sqlite3@3.22.0-1ubuntu0.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
sqlite3@3.31.1-4ubuntu0.2
no fix listed

Open the chart page →

9,280

Container images carrying it

1,512 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
sqlite3@3.45.1-1ubuntu2.5
3.45.1-1ubuntu2.7
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
sqlite3@3.22.0-1ubuntu0.2
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
sqlite3@3.11.0-1ubuntu1
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
sqlite3@3.11.0-1ubuntu1
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sqlite3@3.11.0-1ubuntu1.1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sqlite3@3.31.1-4ubuntu0.2
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sqlite3@3.11.0-1ubuntu1.1
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sqlite3@3.31.1-4ubuntu0.2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
sqlite3@3.40.1-2
no fix listed
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/aeharding/voyager:latest779759172676
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
sqlite3@3.45.1-1ubuntu2.5
3.45.1-1ubuntu2.7
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
sqlite3@3.46.1-7
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.0aa679ddf5c3a
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/backstage/backstage:latest792e262ea504
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
sqlite3@3.45.1-1ubuntu2.5
3.45.1-1ubuntu2.7
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
sqlite3@3.37.2-2ubuntu0.3
3.37.2-2ubuntu0.7
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
sqlite3@3.37.2-2ubuntu0.1
3.37.2-2ubuntu0.7
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
sqlite3@3.31.1-4ubuntu0.5
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
sqlite3@3.45.1-1ubuntu2.5
3.45.1-1ubuntu2.7
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sqlite3@3.40.1-2
no fix listed
1
ghcr.io/camptocamp/pgbouncer:latest19dc5663cac4
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
sqlite3@3.46.1-7
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
sqlite3@3.46.1-7
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
sqlite3@3.46.1-7
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sqlite3@3.40.1-2+deb12u1
no fix listed
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
sqlite3@3.40.1-2+deb12u2
no fix listed
1
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
sqlite3@3.45.1-1ubuntu2.5
3.45.1-1ubuntu2.7
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
sqlite3@3.46.1-7+deb13u1
no fix listed
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
sqlite3@3.46.1-7+deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.