StackRadar

CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,054
of 17,828 indexed, latest versions
Container images
2,332
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more1,898
gnupg2rpm2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7335
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm376
gnupgapk2.4.5-r0, 2.4.7-r02.4.9-r015
gpg2rpm2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.12.4.4-150600.3.12.1, 2.5.16-1.19
OSV records
ALPINE-CVE-2025-68973DEBIAN-CVE-2025-68973RHSA-2026:0719RHSA-2026:0728RHSA-2026:1677RLSA-2026:0719RLSA-2026:0728UBUNTU-CVE-2025-68973DLA-4437-1openSUSE-SU-2026:10001-1SUSE-SU-2026:0215-1
Also known as
RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars
ChartLatestAffected imagesRadar Score
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

6,027
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

1,839
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

3,702
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
jingking/geonetwork-hnap:4.2.843e74ab234e1
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
jmferrer/azure-devops-agent:latest030f68ec6998
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm3
1
john19968010/fastapi-template:latest31a90f6bd69c
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
joplin/server:3.0-beta52af57880c0e
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
joplin/server:2.14.2-betab87564ef34e9
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
joseenrique/pip-cache:latest0bf21c50293c
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
josh5/unmanic:0.2.64d49c4816260
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.5+esm1
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.5+esm1
1
just1not2/streama:1.10.48a2305192dec
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
kadalu/kadalu-csi:1.2.0af8d470b0ef3
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kadalu/kadalu-operator:1.2.03726d7a805f2
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
gnupg2@2.4.4-2ubuntu17
2.4.4-2ubuntu17.4
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
kennethreitz/httpbin:latest599fe5e50731
gnupg2@2.2.4-1ubuntu1.1
2.2.4-1ubuntu1.6+esm2
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
kinseii/wazuh-agent:4.14.17160eb143728
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2
1
knspar/phronetis:0.1.4609499d2dc91a
gnupg2@2.4.4-2ubuntu17
2.4.4-2ubuntu17.4
1
knspar/phronetis-operator:0.1.60c4f0543ee58
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kobotoolbox/kobocat:2.022.24ab15679454415
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kong/httpbin:latesta6ac46531193
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
kong/kong:3.9.16addf50e6bd8
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
kserve/models-web-app:v0.13.073486345a602
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kubebb/hello-world:0.1.0b746824819f3
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
1
kubedex/helm-controller:v1.0.14f1008c51ef9
gnupg2@2.0.22-5.el7_5
0:2.0.22-5.el7_9.1
1
kubeflow/model-registry:v0.2.95783f6db428f
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kubegems/bitnami-shell:12-debian-12-r24e42e3aaacdd3
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kubegems/chatgpt-api:latestf3c492a938ad
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kubegems/mysql:8.0.33-debian-11-r019cb195b9a50
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2
1
kuberay/operator:v1.0.04e6ac8a3a2c4
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm3
1
kudobuilder/controller:v0.9.069072d979708
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.