CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
stackstorm/st2api :3.8	6f56d239d280	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2auth :3.8	33ecfda16608	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2notifier :3.8	f190a6212195	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2rulesengine :3.8	259503496ff9	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2scheduler :3.8	b1de2055c362	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2stream :3.8	1c8904a3bf67	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2web :3.8	09989a26c8b7	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	gnupg2@2.2.20-2.el8	0:2.2.20-4.el8_10	1
stashapp/stash :latest	24dbd7607174	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
stashapp/stash-box :latest	a534c8afdf39	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1
statcan/ckan :2.9	3921305425b8	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
stratospire/activityrelay :0.2.3	a4c34cb01117	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1
subsquid/substrate-gateway :firesquid	76a913993ed2	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
supabase/edge-runtime :v1.59.0	eff9c554d649	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
supabase/logflare :1.8.12	d429005429ce	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
supabase/postgres-meta :v0.84.2	d0a96973e9f1	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
supabase/realtime :v2.102.3	aa1c92c0cf32	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2	1
supabase/realtime :v2.33.8	d207e6e23ad3	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
supabase/studio :20241021-9f9b083	26d8070c55e9	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
swisscomcloud/esc-vm-scheduler-web :latest	b6639d1a922e	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
sysnet4admin/colosseum-cms :log	e74b43c7f492	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
sysnet4admin/colosseum-prm :log	5802bfcd7fed	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
t3nde/tideways :1.7.27	77e008f764db	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
taigaio/taiga-back :6.4.2	9f97323cc150	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
tautulli/tautulli :v2.7.7	c4da15f058ea	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	gnupg2@2.2.4-1ubuntu1.6	2.2.4-1ubuntu1.6+esm2	1
teknas09/bird-pod :latest	12a1fa85c4aa	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	gnupg@1.4.20-1ubuntu3.1	1.4.20-1ubuntu3.3+esm3	1
th0th/node-red :4.0.3-debian	d06fa39f7406	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
thecampagnards/trafficlight-api :main	7dca9d973837	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
thehiveproject/cortex :3.1.7	f4bc64fb8844	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
theradius/loggia :0.4	63ba348546ec	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
thesisrobot/bitcoind :v23.0	16b368e4d52c	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
thingsboard/tb-coap-transport :3.4.1	bd45a09d85d9	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
thingsboard/tb-http-transport :3.4.1	a06f53c5e2da	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
thingsboard/tb-js-executor :3.4.1	13e1eadf8ace	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1