StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,188
of 17,821 indexed, latest versions
Container images
2,182
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,188 of 17,821 indexed charts deploy, on 2,182 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,133
libgcryptrpm1.8.2-lp151.9.4.1, 1.8.2-lp152.16.8, 1.10.0-8.el9_0, 1.10.0-10.el9_2+1 more0:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.142
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,188 by stars
ChartLatestAffected imagesRadar Score
iomeshkubesphere-stable1.1.04 of 25See more

iomesh kubesphere-stable 1.1.0

4 of the 25 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
iomesh/node-disk-exporter:1.8.0f03148764f38
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
iomesh/node-disk-manager:1.8.0002c4b92fd34
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
iomesh/node-disk-operator:1.8.0f6c76380db34
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

49,068
IOMeshkubesphere-stable1.2.04 of 25See more

IOMesh kubesphere-stable 1.2.0

4 of the 25 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
iomesh/node-disk-exporter:1.8.0f03148764f38
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
iomesh/node-disk-manager:1.8.0-2292ad270082e
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2

Open the chart page →

46,758
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
libgcrypt20@1.8.5-5ubuntu1
no fix listed

Open the chart page →

91,524
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

6,724
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed

Open the chart page →

18,553
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed

Open the chart page →

9,651
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
libgcrypt20@1.8.5-5ubuntu1
no fix listed

Open the chart page →

7,406
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed

Open the chart page →

9,424
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
libgcrypt20@1.8.5-5ubuntu1
no fix listed

Open the chart page →

7,406
vector-controllerkubevela0.2.31 of 2See more

vector-controller kubevela 0.2.3

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
oamdev/vector-controller:v0.2.39dd8be44ffc9
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed

Open the chart page →

4,820
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0.4ca08b7d2df5b
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

2,694
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
penpotapp/exporter:2.2.15c835ffd87ab
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

17,074
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
libgcrypt20@1.11.0-7
no fix listed
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

20,582
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

3,489
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

63,775
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

2,523
dynatrace-operatorkvalitetsitVerified publisher1.3.01 of 1See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
libgcrypt@1.10.0-10.el9_2
0:1.10.0-11.el9

Open the chart page →

1,320
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2

Open the chart page →

3,172
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2

Open the chart page →

3,403
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

16,733
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

7,863
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

26,562
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,285
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,285
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed

Open the chart page →

34,371
kubernetes-dashboardlbenicio-communityVerified publisher7.14.91 of 5See more

kubernetes-dashboard lbenicio-community 7.14.9

1 of the 5 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/kong:3.912972ce1ab63
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed

Open the chart page →

2,330
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

33,925
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

4,297
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,094
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,677
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

4,481
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
libgcrypt20@1.10.1-3
no fix listed
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

5,471
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

38,692
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

3,143
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

10,844
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,285
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

1,988
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

7,581
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

33,925
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
libgcrypt20@1.9.4-3ubuntu3.2
1.9.4-3ubuntu3.3

Open the chart page →

2,546
nightingalelogic3579Verified publisher0.3.12 of 6See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
library/redis:6.2e7b96daa9a18
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

9,172
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

6,692
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

6,610
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

23,806
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

5,932
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

65,433
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

2,018

Container images carrying it

2,182 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2024-2236.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.