StackRadar

CVE-2022-34903

Medium

Advisory

Published 1 Jul 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.028
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
917
of 17,787 indexed, latest versions
Container images
832
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 917 of 17,787 indexed charts deploy, on 832 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+10 more2.1.11-6ubuntu2.1+esm1, 2.2.4-1ubuntu1.6, 2.2.12-1+deb10u2, 2.2.19-3ubuntu2.2+2 more670
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more1.4.16-1ubuntu2.6+esm1, 1.4.20-1ubuntu3.3+esm276
gnupgapk2.2.27-r0, 2.2.31-r0, 2.2.31-r12.2.31-r1, 2.2.31-r25
gnupg2rpm2.2.9-1.el8, 2.2.20-2.el80:2.2.20-3.el8_672
gpg2rpm2.2.5-4.14.4, 2.2.5-lp151.6.3.12.2.5-150000.4.22.1, 2.3.7-1.110
OSV records
ALPINE-CVE-2022-34903RHSA-2022:6463UBUNTU-CVE-2022-34903DSA-5174-1openSUSE-SU-2024:12215-1SUSE-SU-2022:3144-1
Also known as
USN-5503-1, USN-5503-2

Charts affected

917 by stars
ChartLatestAffected imagesRadar Score
tool-widarwbstack0.4.01 of 1See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
ghcr.io/wbstack/widar:1.31702fc9df79f
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

1,480
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6

Open the chart page →

9,748
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

2,671
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

5,462
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
gnupg2@2.2.20-2.el8
0:2.2.20-3.el8_6

Open the chart page →

28,699
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u2

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
gnupg2@2.2.20-2.el8
0:2.2.20-3.el8_6

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
gnupg2@2.2.20-2.el8
0:2.2.20-3.el8_6

Open the chart page →

6,138
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
gnupg2@2.2.20-2.el8
0:2.2.20-3.el8_6

Open the chart page →

11,592
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

1,138
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

1,138
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6
yandex/clickhouse-server:21.3.204eccfffb01d7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2

Open the chart page →

9,250
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-34903.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2

Open the chart page →

1,636

Container images carrying it

832 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
wavefronthq/proxy:9.2d1064d28f6eb
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6
1
weblate/weblate:3.11.3-182848df56ecd
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
wekanteam/wekan:v4.2268a51f0327df
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.2
1
wiremind/pghoard:12-2019-11-264dea42c8166c
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
wolveix/satisfactory-server:v1.2.4db00d63f4791
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
woojoong/wowza:latestec230db19652
gnupg2@2.2.4-1ubuntu1.1
2.2.4-1ubuntu1.6
1
xeladock/mysql_dns:latest4baf531453f1
gnupg2@2.2.27-3ubuntu2
2.2.27-3ubuntu2.1
1
xeladock/nginx2:latestc259a67b1dff
gnupg2@2.2.27-3ubuntu2
2.2.27-3ubuntu2.1
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm2
1
xtrendence/cryptofolio:V.2.2.0e6e6612bb94c
gnupg2@2.2.27-2
2.2.27-2+deb11u2
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u2
1
yandex/clickhouse-client:21.3863f94a0f607
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6
1
yandex/clickhouse-server:latest1cbf75aabe1e
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
yandex/clickhouse-server:21.3.204eccfffb01d7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
yandex/clickhouse-server:19.17ab1738a64b70
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6
1
yandex/clickhouse-server:19.16d210dc69321e
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u2
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
zbalogh/reservation-dotnet-auth-server:1.0.909a51b809674
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6
1
gcr.io/gke-release/gcp-compute-persistent-disk-csi-driver:v0.6.2-gke.0cf3c3af0187e
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.3+esm2
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.3+esm2
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm2
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm2
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.2
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm2
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
gnupg@2.2.27-r0
2.2.31-r1
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
gnupg2@2.2.27-2
2.2.27-2+deb11u2
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u2
1
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
gpg2@2.2.5-4.14.4
2.2.5-150000.4.22.1
1
ghcr.io/conductionnl/adresservice-nginx:latest849af80ab017
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u2
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
gnupg2@2.2.12-1+deb10u1
2.2.12-1+deb10u2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.