CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,181; of 17,828 indexed, latest versions
Container images: 2,180; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,181 of 17,828 indexed charts deploy, on 2,180 images.

Affected package	Affected versions	Fixed in	Images
libgcrypt20deb	1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more	1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.1	2,131
libgcryptrpm	1.8.2-lp151.9.4.1, 1.8.2-lp152.16.8, 1.10.0-8.el9_0, 1.10.0-10.el9_2+1 more	0:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.1	42
libgcrypt11deb	1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6	no fix listed	7
libgpg-errorrpm	1.54-160000.2.2	1.58-160000.1.1	1

OSV records: DEBIAN-CVE-2024-2236 RHSA-2024:9404 RLSA-2024:9404 UBUNTU-CVE-2024-2236 openSUSE-SU-2025:15239-1 SUSE-FU-2026:21213-1
Also known as: RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,181 by stars

Chart

Latest

Affected images

Radar Score

backendzymtrace

26.9.2

3 of 6 See more

backend zymtrace 26.9.2

3 of the 6 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.3.14.14	b627d7a9bc0e	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
library/postgres :17.4	304ab8135187	libgcrypt20@1.10.1-3	no fix listed
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.2	ae9ae0925ff8	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3

Open the chart page →

9,248

acos-prometheus-exporter-helm-charta10-prometheus-exporter

0.1.0

1 of 1 See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	libgcrypt20@1.8.1-4ubuntu1.1	no fix listed

Open the chart page →

78,855

abstract-nodeabstract-node

0.1.49

1 of 2 See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
matterlabs/external-node :9734bf2-1787057993929	5dadc06bdf3b	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

4,527

active-mqactivemq-helm-chart

1.8.2

1 of 3 See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
apache/activemq-artemis :2.44.0	0305c26f19ed	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2

Open the chart page →

3,307

open5gsadaptivenetlab

1.0.3

2 of 3 See more

open5gs adaptivenetlab 1.0.3

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
free5gmano/nextepc-mongodb :latest	36f806935519	libgcrypt20@1.6.5-2ubuntu0.5	no fix listed
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libgcrypt20@1.8.5-5ubuntu1	no fix listed

Open the chart page →

104,094

gotenbergadnoctem

0.5.0

1 of 1 See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.37.0	f29984bd1e22	libgcrypt20@1.11.0-7+deb13u1	no fix listed

Open the chart page →

6,300

lhciadnoctem

0.1.0

1 of 1 See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/adnoctem/lhci :1.0.1	19553e4b4033	libgcrypt20@1.10.1-3+deb12u1	no fix listed

Open the chart page →

1,306

linkwardenadnoctem

0.5.1

1 of 2 See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/linkwarden/linkwarden :v2.16.3	0664c28a039b	libgcrypt20@1.10.1-3+deb12u1	no fix listed

Open the chart page →

3,913

uptime-kumaadnoctem

0.4.1

1 of 1 See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

30,728

bootaerokube

1.0.1

2 of 4 See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
quay.io/aerokube/keygen :1.0.1	578934444f04	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3

Open the chart page →

7,964

msockperfaetrius

2.0.8

2 of 2 See more

msockperf aetrius 2.0.8

2 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/aetrius/msockperf-client/msockperf-client :main	820af919c5e2	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2
ghcr.io/aetrius/msockperf-server/msockperf-server :main	46ae4ea003e0	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2

Open the chart page →

4,297

kourierahhhh

0.18.1

1 of 1 See more

kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.34-latest	cfc0678bc03c	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3

Open the chart page →

1,832

airbyte-keycloakairbyte

0.1.2

1 of 2 See more

airbyte-keycloak airbyte 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
library/postgres :17	f4c66b820c6f	libgcrypt20@1.11.0-7+deb13u1	no fix listed

Open the chart page →

1,272

pod-sweeperairbyte

1.5.1

1 of 1 See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
airbyte/pod-sweeper :1.5.1	98d2c39d512e	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

5,021

airbyteairbyte-v2

2.3.0

1 of 10 See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
airbyte/manifest-server :7.28.2	deec511b51c3	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

12,189

akeyless-gatewayakeyless-services-helm

3.5.6

1 of 2 See more

akeyless-gateway akeyless-services-helm 3.5.6

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
akeyless/gateway :5.4.0	d4768a9b089c	libgcrypt20@1.10.3-2ubuntu0.2	no fix listed

Open the chart page →

1,415

aktoakto

0.2.0

2 of 7 See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-dashboard :latest	b53a854bd7c1	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2
public.ecr.aws/aktosecurity/akto-api-testing :latest	97d830d5538a	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2

Open the chart page →

13,802

akto-ai-guardrails-v2akto

0.3.0

2 of 6 See more

akto-ai-guardrails-v2 akto 0.3.0

2 of the 6 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
aktosecurity/data-ingestion-service :1.4.9	46ed5bcb04b2	libgcrypt20@1.12.0-2ubuntu0.1	1.12.0-2ubuntu1.1
redis/redis-stack-server :7.4.0-v1	72035434f455	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3

Open the chart page →

42,391

akto-central-setupakto

1.1.10

3 of 5 See more

akto-central-setup akto 1.1.10

3 of the 5 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
aktosecurity/akto-threat-detection-backend :1.15.7	a6c1b933517f	libgcrypt20@1.12.0-2ubuntu1	1.12.0-2ubuntu1.1
public.ecr.aws/aktosecurity/akto-api-security-dashboard :1.69.2	b53a854bd7c1	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :1.66.9	138c8b82c398	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2

Open the chart page →

5,258

akto-dashboardakto

0.1.7

1 of 1 See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
aktosecurity/akto-api-security-dashboard :latest	3aeaee66bc66	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2

Open the chart page →

1,231

akto-dbabsakto

0.1.9

1 of 1 See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :latest	f669a6eacf8c	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2

Open the chart page →

1,194

akto-mini-runtime-shaakto

0.7.23

1 of 3 See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/redisdigest-pinned	47200b041382	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

3,310

akto-mini-testingakto

1.45.7

1 of 5 See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.72.6_local	43316f900242	libgcrypt20@1.12.0-2ubuntu1	1.12.0-2ubuntu1.1

Open the chart page →

6,660

akto-regional-setupakto

1.4.0

4 See more

akto-regional-setup akto 1.4.0

4 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
aktosecurity/data-ingestion-service :1.5.3	5d4eab1c36b9	libgcrypt20@1.12.0-2ubuntu0.1	1.12.0-2ubuntu1.1
aktosecurity/mini-runtime :1.72.15	498e3e35ecc2	libgcrypt20@1.12.0-2ubuntu1	1.12.0-2ubuntu1.1
redis/redis-stack-server :7.4.0	72035434f455	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
public.ecr.aws/aktosecurity/akto-threat-detection :1.16.2	a47eb6cc17ea	libgcrypt20@1.12.0-2ubuntu1	1.12.0-2ubuntu1.1

Open the chart page →

—

akto-testing-db-layerakto

1.42.17

1 of 2 See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2

Open the chart page →

36,090

data-ingestion-serviceakto

0.1.6

1 of 1 See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
aktosecurity/data-ingestion-servicedigest-pinned	213aded7adc5	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2

Open the chart page →

58,289

browserlessalekc

1.2.7

1 of 1 See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chrome :v2.56.7	d600eac6283f	libgcrypt20@1.10.3-2ubuntu0.2	no fix listed

Open the chart page →

2,138

esphomealexmorbo-esphome

1.0.0

1 of 1 See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
esphome/esphome :2024.12.2	b2c6322700ac	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

6,401

flaresolverralexmorbo-flaresolverr

0.2.0

1 of 1 See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
flaresolverr/flaresolverr :v3.5.0	139dfee1c6f8	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

27,831

slskdalexmorbo-slskd

0.3.0

1 of 1 See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2

Open the chart page →

1,756

nginx-sni-proxyalexpresso

1.0.2

1 of 1 See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	libgcrypt20@1.11.0-7+deb13u1	no fix listed

Open the chart page →

1,593

redisalexvanderberkel

2.2.0

1 of 1 See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
library/redis :8.2.1	5fa2edb1e408	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

1,903

alibaba-rsocket-brokeralibaba-rsocket-broker

0.1.3

1 of 1 See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
linuxchina/alibaba-rsocket-broker :1.1.3-k8s	f758e2e567ee	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed

Open the chart page →

92,754

allure-docker-helm-chartallure-service-chart

0.1.0

1 of 2 See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :latest	dc171ec796d5	libgcrypt20@1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2

Open the chart page →

3,718

katalogalpineworks

0.1.2

1 of 5 See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

4,577

pagesalstom-pages-app

1.0.0

2 of 3 See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libgcrypt20@1.8.5-5ubuntu1	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	libgcrypt20@1.8.1-4ubuntu1.2	no fix listed

Open the chart page →

20,287

amorphieamorphie

0.1.2

2 of 18 See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
camunda/zeebe :8.4.5	ab5abc09e407	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3

Open the chart page →

28,438

anchore-admission-controlleranchore-charts

0.9.0

1 of 2 See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
cfssl/cfssl :v1.6.5	c9018c2ddf0b	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

7,547

music-assistant-serverandibraeu

2.1.2

1 of 1 See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	libgcrypt20@1.10.1-3+deb12u1	no fix listed

Open the chart page →

5,814

pagesandrei-pages

1.0.0

2 of 3 See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libgcrypt20@1.8.5-5ubuntu1	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	libgcrypt20@1.8.1-4ubuntu1.2	no fix listed

Open the chart page →

20,287

omada-controllerandrelote-k8s

4.5.0

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed

Open the chart page →

11,623

mathesarandrenarchy

1.8.0

1 of 1 See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
mathesar/mathesar :0.12.0	091757cb01fe	libgcrypt20@1.10.1-3+deb12u1	no fix listed

Open the chart page →

7,330

speech-to-phraseandrenarchy

1.3.0

1 of 1 See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-speech-to-phrase :1.4.3	e532f0dbc6b2	libgcrypt20@1.10.1-3	no fix listed

Open the chart page →

4,107

games-on-whalesangelnu

2.0.0

4 of 7 See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libgcrypt20@1.8.5-5ubuntu1	no fix listed
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libgcrypt20@1.8.5-5ubuntu1	no fix listed
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libgcrypt20@1.8.5-5ubuntu1	no fix listed

Open the chart page →

118,418

ansible-inspecansible-inspec

0.2.17

1 of 2 See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ghcr.io/htunn/ansible-inspec :0.2.12	cd25a5cc3f1b	libgcrypt20@1.11.0-7	no fix listed

Open the chart page →

5,697

ddosifyanteon

1.7.5

2 of 13 See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2024-2236.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	libgcrypt20@1.10.1-3	no fix listed
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	libgcrypt20@1.10.1-3	no fix listed