StackRadar

CVE-2019-14855

Medium

Advisory

Published 20 Mar 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.011
63rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
208
of 17,781 indexed, latest versions
Container images
120
deployed by those charts
Fix available
1 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 120 images.

Affected packageAffected versionsFixed inImages
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 moreno fix listed76
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.22.2.4-1ubuntu1.339
gnupg1deb1.4.23-1.1build1no fix listed6
OSV records
UBUNTU-CVE-2019-14855
Also known as
USN-4516-1

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnupg@1.4.20-1ubuntu3.1
no fix listed

Open the chart page →

11,007
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3

Open the chart page →

20,190
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
gnupg@1.4.20-1ubuntu3.3
no fix listed

Open the chart page →

15,330
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
gnupg1@1.4.23-1.1build1
no fix listed

Open the chart page →

13,459
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3

Open the chart page →

20,190
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2019-14855.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3

Open the chart page →

10,843

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
79
oomk8s/readiness-check:2.0.2875814cc853d
gnupg@1.4.20-1ubuntu3.3
no fix listed
11
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
no fix listed
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
gnupg@1.4.20-1ubuntu3.2
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
gnupg@1.4.20-1ubuntu3.3
no fix listed
4
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
gnupg@1.4.20-1ubuntu3.3
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
gnupg@1.4.20-1ubuntu3.3
no fix listed
3
freeradius/freeradius-server:3.0.2121c8bfa904d8
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
istio/kubectl:1.5.10dbb7726d1bf0
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
2
library/cassandra:3.11.65aa8400b4b3b
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
2
library/mongo:4.2.358b25d51baa1
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
2
library/ubuntu:16.04:xenial1f1a2d56de1d
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnupg2@2.2.4-1ubuntu1
2.2.4-1ubuntu1.3
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
gnupg@1.4.20-1ubuntu3.3
no fix listed
2
wurstmeister/zookeeper:latest7a7fd44a7210
gnupg@1.4.16-1ubuntu2.1
no fix listed
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
gnupg@1.4.20-1ubuntu3.1
no fix listed
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
gnupg@1.4.16-1ubuntu2.6
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
citizenstig/httpbin:latestb81c818ccb86
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
cloudve/janis-terminal:latestaf56e77ca587
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
cloudve/ttyd:latestd79c1c5881c0
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
gnupg2@2.2.4-1ubuntu1.1
2.2.4-1ubuntu1.3
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
daskdev/dask-notebook:1.1.0052630f5ca04
gnupg2@2.2.4-1ubuntu1.1
2.2.4-1ubuntu1.3
1
datalust/seq:5.0.832-pre9c731bb207a6
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
dniel/api-posts:master45a667852f2a
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
gnupg@1.4.16-1ubuntu2.4
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
gnupg@1.4.16-1ubuntu2.4
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
gnupg@1.4.20-1ubuntu3.2
no fix listed
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
hyperledger/fabric-peer:1.3.06756c7c48234
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
gnupg@1.4.20-1ubuntu3.3
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
gnupg@1.4.20-1ubuntu3.1
no fix listed
1
ibmcom/skydive:0.22.0395e60cc6e3d
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
iofog/router:2.0.17260cf861479
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.3
1
istio/node-agent-k8s:1.2.9268ab879ea51
gnupg@1.4.20-1ubuntu3.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.