StackRadar

CVE-2018-12020

High

Advisory

Published 8 Jun 2018In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.085
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
99
deployed by those charts
Fix available
2 of 2
affected packages

gnupg2 - security update

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 99 images.

Affected packageAffected versionsFixed inImages
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.18-7+deb8u1, 1.4.18-7+deb8u3+2 more1.4.16-1ubuntu2.5, 1.4.18-7+deb8u5, 1.4.20-1ubuntu3.268
gnupg2deb2.1.18-6, 2.1.18-8~deb9u1, 2.2.4-1ubuntu12.1.18-8~deb9u2, 2.2.4-1ubuntu1.131
OSV records
UBUNTU-CVE-2018-12020DSA-4222-1DSA-4224-1
Also known as
USN-3675-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

3,533
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

11,422
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

2,939
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

10,967
Wordresssix0.2.01 of 2See more

Wordress six 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

9,436
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
rabbitmqstakaterVerified publisher1.0.11 of 1See more

rabbitmq stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
jorgeacetozi/rabbitmq-stomp:latestb851dab88101
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

559
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

11,841
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,632
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

11,007
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,329
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339

Container images carrying it

99 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:9.6.25284ba74a106
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
7
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
6
bde2020/hive:2.3.2-postgresql-metastore620267768985
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
4
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
4
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
4
osixia/phpldapadmin:0.7.11ab629698ae0
gnupg2@2.1.18-6
2.1.18-8~deb9u2
4
mautic/mautic:2.13-apachea954c5868d76
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
3
danisla/hadoop:2.9.0255ba2dd739b
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
2
jfindley/newrelic-exporter:latest8dbae22f4fe7
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
2
library/mongo:3.6.3d969194a7c4d
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
2
library/nginx:1.13.12b1d09e971889
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
2
migmartri/prerender:latest486aacfd5aa9
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
2
neilpeterson/azure-vote-front:v384062718347c
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnupg2@2.2.4-1ubuntu1
2.2.4-1ubuntu1.1
2
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
2
wurstmeister/zookeeper:latest7a7fd44a7210
gnupg@1.4.16-1ubuntu2.1
1.4.16-1ubuntu2.5
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
2
a5huynh/oauth2_proxy:2.20c7307d31ca8
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
billimek/sb6183-for-influxdb:latestbf8158556035
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
bivas/presto:0.19605545994f806
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
buoyantio/linkerd:1.1.2f4048edaca6f
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
camptocamp/ldap-search-exporter:latest5e55370dd292
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
camptocamp/r10k-dashboard:0.2.6073be594d145
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
cheyang/distributed-tf:1.6.046cc34755493
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
citizenstig/httpbin:latestb81c818ccb86
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
codylundquist/helm-rethinkdb-cluster:0.1.0630ab586b8c1
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
conduction/agendaservice-nginx:lateste1c176458aaf
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/balance-registration-nginx:dev9e24264ea8f3
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/betaalservice-nginx:latestd3577ddd5c67
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/cgrc-nginx:devd8e23f10e882
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/checkin-component-nginx:dev583d2cd8476c
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/conduction-ui-nginx:devd9b38e234de9
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/contactmoment-component-nginx:dev353dc46303ac
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/docparser-nginx:dev08524d8327b8
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/kvk-nginx:devcf163d2b95b5
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
conduction/pan-nginx:devaf3e9f551ad1
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
datalust/seq:5.0.832-pre9c731bb207a6
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
dstacademy/dontstarvetogether:latest46487aa079b0
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
galaxy/galaxy-init:v18.010267bad550e6
gnupg@1.4.16-1ubuntu2.4
1.4.16-1ubuntu2.5
1
galaxy/galaxy-stable:v18.018e577a626dfd
gnupg@1.4.16-1ubuntu2.4
1.4.16-1ubuntu2.5
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
grafana/grafana:5.1.0a6b37f9afdd9
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
graylog2/server:2.4.3-38ff28c66e6c1
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
hickey/puppet_forge:1.10.0c1148a09ef20
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.