CVE-2025-68972
MediumAdvisory
Published 27 Dec 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 944
- of 17,787 indexed, latest versions
- Container images
- 947
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 944 of 17,787 indexed charts deploy, on 947 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.2.40-1.1, 2.2.40-1.1+deb12u1, 2.2.40-1.1+deb12u2, 2.4.7-21+b3+7 more | no fix listed | 932 |
| gnupgapk | 2.4.5-r0, 2.4.7-r0 | 2.4.9-r0 | 15 |
- OSV records
- ALPINE-CVE-2025-68972DEBIAN-CVE-2025-68972
Charts affected
944 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 8,798 |
| hatchet-apihatchetOfficialVerified publisher | 0.18.0 | 1 of 4See more | 1,678 |
| hatchet-hahatchetOfficialVerified publisher | 0.18.0 | 3 of 8See more | 7,374 |
| hatchet-stackhatchetOfficialVerified publisher | 0.18.0 | 3 of 8See more | 7,374 |
| heliconehelicone | 0.1.42 | 1 of 14See more | 23,472 |
| helixhelix | 1.4.3 | 1 of 2See more | 5,287 |
| hello-worldhello-world-pponyVerified publisher | 0.3.0 | 1 of 1See more | 5,851 |
| esphomehelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 6,014 |
| home-assistant-matter-hubhelm-chart-roeiVerified publisher | 3.0.2 | 1 of 1See more | 3,818 |
| kube-downscalerhelm-charts-nr | 0.7.6 | 1 of 1See more | 3,700 |
| locusthelm-charts-nr | 0.32.4 | 1 of 1See more | 2,660 |
| node-problem-detectorhelm-charts-nr | 2.3.17 | 1 of 1See more | 2,349 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 2,214 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 8,618 |
| affinehelmforgeVerified publisher | 1.0.0 | 2 of 3See more | 3,895 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,103 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,648 |
| automatischhelmforgeVerified publisher | 1.3.7 | 1 of 4See more | 5,794 |
| changedetectionhelmforgeVerified publisher | 1.1.15 | 1 of 1See more | 2,602 |
| chiefonboardinghelmforgeVerified publisher | 1.1.14 | 2 of 3See more | 10,898 |
| ckanhelmforgeVerified publisher | 1.3.8 | 2 of 6See more | 9,991 |
| dawarichhelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 4,698 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 29,852 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,598 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,660 |
| entehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,227 |
| ghosthelmforgeVerified publisher | 1.2.6 | 1 of 3See more | 2,475 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,058 |
| immichhelmforgeVerified publisher | 1.2.8 | 2 of 5See more | 11,080 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,350 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 1 of 3See more | 2,852 |
| medikeephelmforgeVerified publisher | 2.0.0 | 2 of 3See more | 6,041 |
| metabasehelmforgeVerified publisher | 1.2.28 | 1 of 3See more | 1,805 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 2 of 4See more | 9,704 |
| moodlehelmforgeVerified publisher | 1.1.0 | 2 of 2See more | 5,911 |
| netboxhelmforgeVerified publisher | 2.0.1 | 1 of 4See more | 4,321 |
| nextcloudhelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 7,041 |
| opencuthelmforgeVerified publisher | 1.1.9 | 1 of 5See more | 3,751 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,741 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 2,986 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 5,916 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,073 |
| supersethelmforgeVerified publisher | 1.3.6 | 2 of 5See more | 5,649 |
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 2,402 |
| twentyhelmforgeVerified publisher | 1.0.0 | 1 of 5See more | 2,844 |
| uptime-kumahelmforgeVerified publisher | 1.5.12 | 1 of 1See more | 30,106 |
| wallabaghelmforgeVerified publisher | 1.3.6 | 1 of 3See more | 2,773 |
| myapphelmingapp | 0.1.0 | 1 of 1See more | 11,441 |
| openaevhelm-openbasVerified publisher | 2.0.5 | 2 of 7See more | 7,502 |
| openbashelm-openbasVerified publisher | 1.8.14 | 3 of 7See more | 25,099 |
Container images carrying it
947 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| tenureai/ | 5f5b222df9a5 | gnupg2 | no fix listed | 1 |
| testinprod/ | 0a125bd77a2d | gnupg2 | no fix listed | 1 |
| theradius/ | 63ba348546ec | gnupg2 | no fix listed | 1 |
| thingsboard/ | 2d17e4e36edc | gnupg2 | no fix listed | 1 |
| thongngo3301/ | a341af5976e3 | gnupg2 | no fix listed | 1 |
| tibyandocker/ | a4ad592cea84 | gnupg2 | no fix listed | 1 |
| treskon/ | a475d80e4ecf | gnupg2 | no fix listed | 1 |
| unitycatalog/ | 3a688197b218 | gnupg2 | no fix listed | 1 |
| v3xl/ | 6f62ca96be82 | gnupg2 | no fix listed | 1 |
| valkey/ | c5d4f082b76d | gnupg2 | no fix listed | 1 |
| vaultwarden/ | 84fd8a47f58d | gnupg2 | no fix listed | 1 |
| vcnngr/ | 1a849a997b6d | gnupg2 | no fix listed | 1 |
| vcnngr/ | 30f1f05e57a6 | gnupg2 | no fix listed | 1 |
| veecode/ | c69fd286b489 | gnupg2 | no fix listed | 1 |
| venturenox/ | 83b471c193ba | gnupg2 | no fix listed | 1 |
| visualregressiontracker/ | 941aeb8c8bf9 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 007c6670ff48 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 945675fd2636 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 54f69d116c50 | gnupg2 | no fix listed | 1 |
| wallarm/ | a3d4d2f780e8 | gnupg2 | no fix listed | 1 |
| wasmcloud/ | 5c7acfe7e8e1 | gnupg2 | no fix listed | 1 |
| wiktorn/ | 9bb5f4a9b54c | gnupg2 | no fix listed | 1 |
| xom4ekp2p/ | d0e0aa238b02 | gnupg2 | no fix listed | 1 |
| xom4ekp2p/ | 2745b5fd8785 | gnupg2 | no fix listed | 1 |
| youkadev/ | 4db0f9428e67 | gnupg2 | no fix listed | 1 |
| zenmldocker/ | 09027a6312ee | gnupg2 | no fix listed | 1 |
| zepai/ | 6ab0ee79926b | gnupg2 | no fix listed | 1 |
| gcr.io/ | 39661bd823e8 | gnupg2 | no fix listed | 1 |
| gcr.io/ | 9bcfd2abc361 | gnupg2 | no fix listed | 1 |
| gcr.io/ | a534a3170d03 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 19553e4b4033 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 766699daa9ac | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 18a81afcb249 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 62c44a384e13 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | c487ec5edcfe | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 18689773150d | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 744bc929a579 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | b6bf1888f9d5 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | f9104080d9a7 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | cb5f24732197 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | dffc6c719d86 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 6ba69487f1b0 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 4c8b42890035 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 5889bea38e56 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 1386b7b5e555 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 1f97d131b1d1 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 9c88e1aff357 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 44f82ee0b24c | gnupg2 | no fix listed | 1 |
| ghcr.io/ | 5f6c74993f08 | gnupg2 | no fix listed | 1 |
| ghcr.io/ | e953fa9e36ef | gnupg2 | no fix listed | 1 |