StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,211
of 17,813 indexed, latest versions
Container images
2,207
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,211 of 17,813 indexed charts deploy, on 2,207 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,158
libgcryptrpm1.8.2-lp151.9.4.1, 1.8.2-lp152.16.8, 1.10.0-8.el9_0, 1.10.0-10.el9_2+1 more0:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.142
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,211 by stars
ChartLatestAffected imagesRadar Score
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,677
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

4,481
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
libgcrypt20@1.10.1-3
no fix listed
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

5,471
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

38,692
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

3,143
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

10,844
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,285
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

1,988
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

7,581
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

33,925
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
libgcrypt20@1.9.4-3ubuntu3.2
1.9.4-3ubuntu3.3

Open the chart page →

2,546
nightingalelogic3579Verified publisher0.3.12 of 6See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
library/redis:6.2143f7bfc2358
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

9,172
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

6,692
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

6,610
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

23,806
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

5,932
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

65,433
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

2,018
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/redis:7.0.15352c1fdadc91
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

5,909
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2

Open the chart page →

5,245
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
libgcrypt20@1.9.4-3ubuntu3.2
1.9.4-3ubuntu3.3
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
libgcrypt20@1.9.4-3ubuntu3.2
1.9.4-3ubuntu3.3

Open the chart page →

4,563
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

5,084
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

91,568
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

6,675
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

58,348
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

27,938
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1

Open the chart page →

876
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

9,858
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

24,771
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

11,554
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

4,665
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

7,393
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

4,172
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libgcrypt20@1.11.0-7+deb13u1
no fix listed

Open the chart page →

1,956
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
libgcrypt20@1.10.1-3
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

8,526
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

21,494
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3

Open the chart page →

29,889
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,108
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

10,724
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

5,712
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,603
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

4,172
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

8,409
mcroutermcrouterVerified publisher0.2.01 of 2See more

mcrouter mcrouter 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2

Open the chart page →

2,363
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libgcrypt20@1.11.0-7
no fix listed
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
libgcrypt20@1.10.1-3
no fix listed

Open the chart page →

9,918
cleanuparrmedia-servarrVerified publisher0.19.21 of 1See more

cleanuparr media-servarr 0.19.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.68136c3beda7a
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed

Open the chart page →

1,460
flaresolverrmedia-servarrVerified publisher0.18.21 of 1See more

flaresolverr media-servarr 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libgcrypt20@1.10.1-3+deb12u1
no fix listed

Open the chart page →

6,795
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2024-2236.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

18,713

Container images carrying it

2,207 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
libgcrypt20@1.10.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
libgcrypt20@1.10.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
libgcrypt20@1.10.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
libgcrypt20@1.10.1-3
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.