StackRadar

CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,978
of 17,790 indexed, latest versions
Container images
2,258
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 1,978 of 17,790 indexed charts deploy, on 2,258 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more1,834
gnupg2rpm2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7329
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm376
gnupgapk2.4.5-r0, 2.4.7-r02.4.9-r015
gpg2rpm2.2.5-lp151.6.3.1, 2.4.4-150600.3.9.12.4.4-150600.3.12.1, 2.5.16-1.15
OSV records
ALPINE-CVE-2025-68973DEBIAN-CVE-2025-68973RHSA-2026:0719RHSA-2026:0728RHSA-2026:1677RLSA-2026:0719RLSA-2026:0728UBUNTU-CVE-2025-68973DLA-4437-1openSUSE-SU-2026:10001-1SUSE-SU-2026:0215-1
Also known as
RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

1,978 by stars
ChartLatestAffected imagesRadar Score
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4

Open the chart page →

2,815
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

7,474
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

2,675
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

3,959
repmanrepman-helmchartVerified publisher1.0.121 of 3See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/nginx:1.21.62bcabc23b454
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3

Open the chart page →

3,596
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

11,993
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
zbalogh/reservation-api-server:1.0.97c247e399a1f
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

6,640
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

7,489
rke2-canalrke2-charts3.13.32 of 2See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
gnupg2@2.0.22-5.el7_5
0:2.0.22-5.el7_9.1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
gnupg2@2.0.22-5.el7_5
0:2.0.22-5.el7_9.1

Open the chart page →

7,002
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

1,266
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

6,570
dev-feedrm3lVerified publisher3.1.22 of 3See more

dev-feed rm3l 3.1.2

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
rm3l/dev-feed-api:latest9a7f732245a3
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7

Open the chart page →

9,913
mac-ouirm3lVerified publisher1.25.01 of 1See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
rm3l/mac-oui:1.8.03a5e1f95c132
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

1,975
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

10,165
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

4,707
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

6,089
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2

Open the chart page →

7,814
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

6,921
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

2,684
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

7,570
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

13,018
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

5,332
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2

Open the chart page →

13,558
kyoorubxkubeVerified publisher0.1.104 of 9See more

kyoo rubxkube 0.1.10

4 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

30,428
conference-appsalaboy1.0.03 of 7See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

11,031
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2

Open the chart page →

38,166
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.4

Open the chart page →

2,184
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
gnupg2@2.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5
confluentinc/cp-kafka:7.6.683dbca3efd2a
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

16,599
seq-input-gelfseq-input-gelfVerified publisher0.3.11 of 2See more

seq-input-gelf seq-input-gelf 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
datalust/seq-input-gelf:3.0.441-x643de34aed5642
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

3,555
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
dserio83/velero-watchdog:0.1.8d5deae589229
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

11,578
clickhousesignoz24.1.181 of 3See more

clickhouse signoz 24.1.18

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

4,698
scaffoldsigstoreVerified publisher0.6.1151 of 15See more

scaffold sigstore 0.6.115

1 of the 15 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

7,686
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

6,885
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

4,277
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
altinity/metrics-exporter:0.20.01a46d104406d
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

6,420
gitlab-omnibusslamdev0.1.61 of 2See more

gitlab-omnibus slamdev 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
daedalusproject/base_kubectl:latest6f72b5119eda
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

2,851
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

2,945
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

46,047
artifact-hubsoftonic1.19.02 of 8See more

artifact-hub softonic 1.19.0

2 of the 8 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
gnupg2@2.4.7-21+b3
2.4.7-21+deb13u1
artifacthub/tracker:v1.19.06596c8c4d955
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

14,550
varnishsoftonic0.18.91 of 1See more

varnish softonic 0.18.9

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/varnish:7.2.14e7b912086b6
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

467
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

5,699
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2

Open the chart page →

10,450
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
gnupg2@2.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5

Open the chart page →

2,624
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

2,236
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10

Open the chart page →

11,459
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

4,694
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

13,536
ckanstatcan0.0.352 of 8See more

ckan statcan 0.0.35

2 of the 8 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
statcan/ckan:2.93921305425b8
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

25,005
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
gnupg2@2.2.27-2
2.2.27-2+deb11u3

Open the chart page →

3,333
supabasesupabse0.8.03 of 11See more

supabase supabse 0.8.0

3 of the 11 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.4
kong/kong:3.9.16addf50e6bd8
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4
supabase/realtime:v2.102.3aa1c92c0cf32
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2

Open the chart page →

18,327

Container images carrying it

2,258 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
gnupg2@2.4.7-21+b3
2.4.7-21+deb13u1
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
gnupg2@2.4.4-2ubuntu17
2.4.4-2ubuntu17.4
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.