StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,150
of 17,797 indexed, latest versions
Container images
2,132
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,150 of 17,797 indexed charts deploy, on 2,132 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,088
libgcryptrpm1.8.2-lp151.9.4.1, 1.10.0-8.el9_0, 1.10.0-10.el9_2, 1.11.1-160000.2.20:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.137
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,150 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,132 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
galaxy/galaxy-init:v18.010267bad550e6
libgcrypt11@1.5.3-2ubuntu4.5
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
libgcrypt11@1.5.3-2ubuntu4.5
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
libgcrypt20@1.10.1-3
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
geopython/pycsw:3.0.0-beta284662ea6b78b
libgcrypt20@1.10.1-3
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
gethue/hue:4.11.011b649636e68
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
getsentry/relay:24.10.0ba7bf9163219
libgcrypt20@1.10.1-3
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
libgcrypt20@1.10.1-3
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
libgcrypt20@1.11.0-7+deb13u1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
glasskube/operator:0.12.2be5133100d63
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
libgcrypt20@1.10.1-3
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
libgcrypt20@1.10.1-3
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
libgcrypt20@1.10.1-3
no fix listed
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
libgcrypt20@1.6.5-2ubuntu0.4
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
libgcrypt20@1.11.0-7
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
libgcrypt20@1.11.0-7+deb13u1
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/agent:v0.44.23364714a2f64
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.5.101a63f4e032c
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.4.306bdcbb51fc2
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.18.10f4434c92b3e
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.18.0491b0578c049
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.16.384b76d56c594
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.11.38c7256f412fe
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.19.2b8ec653c4423
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
grafana/alloy:v1.14.0f50931848bd8
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
grafana/beyla:1.3.336d07f8d276e
libgcrypt20@1.10.1-3
no fix listed
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
libgcrypt20@1.10.1-3
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
libgcrypt20@1.10.1-3
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.