StackRadar

CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,064
of 17,837 indexed, latest versions
Container images
2,330
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,064 of 17,837 indexed charts deploy, on 2,330 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more1,902
gnupg2rpm2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7329
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm376
gnupgapk2.4.5-r0, 2.4.7-r02.4.9-r015
gpg2rpm2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.12.4.4-150600.3.12.1, 2.5.16-1.19
OSV records
ALPINE-CVE-2025-68973DEBIAN-CVE-2025-68973RHSA-2026:0719RHSA-2026:0728RHSA-2026:1677RLSA-2026:0719RLSA-2026:0728UBUNTU-CVE-2025-68973DLA-4437-1openSUSE-SU-2026:10001-1SUSE-SU-2026:0215-1
Also known as
RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,064 by stars
ChartLatestAffected imagesRadar Score
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

11,355
akto-regional-setupakto1.4.01 of 9See more

akto-regional-setup akto 1.4.0

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

40,793
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
hotavneesh/eclipse-jdtls:latesta4579b163414
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3

Open the chart page →

4,919
mautrix-signalalexanderbadel0.1.11 of 2See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
signald/signald:0.18.20ffad7ccc2eb
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3

Open the chart page →

2,099
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

6,443
zunivers-ninjaalexpressoVerified publisher1.31.21 of 2See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/neo4j:5.18.18f01f7bb053e
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

1,167
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2

Open the chart page →

1,922
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2

Open the chart page →

89,991
katalogalpineworks0.1.22 of 5See more

katalog alpineworks 0.1.2

2 of the 5 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

4,595
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.5+esm1
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2

Open the chart page →

20,372
amorphieamorphie0.1.23 of 18See more

amorphie amorphie 0.1.2

3 of the 18 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
hazelcast/management-center:5.3.2f9d34300d330
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

28,549
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

7,681
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnupg2@2.2.19-3ubuntu2
2.2.19-3ubuntu2.5+esm1
flyway/flyway:6.4.422d97ceb0c47
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2

Open the chart page →

20,372
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
gnupg2@2.2.4-1ubuntu1.6
2.2.4-1ubuntu1.6+esm2

Open the chart page →

11,688
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gnupg2@2.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

116,204
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

26,403
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

2,345
apimap-apiapimapOfficialVerified publisher1.8.111 of 1See more

apimap-api apimap 1.8.11

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
apimap/api:v1.8.11ae2b3ab00177
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

2,237
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

2,359
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

2,402
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7

Open the chart page →

3,025
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

6,347
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
library/mongo:5.0.6-focal8e70544b6c76
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

20,267
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

12,595
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/postgres:14.32d1e636f0778
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3

Open the chart page →

3,170
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
gnupg2@2.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5

Open the chart page →

4,114
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
library/rabbitmq:3.12.1-managementf020c06da226
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
ghcr.io/appscode/inbox-server:latest536358d7b17e
gnupg2@2.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5

Open the chart page →

16,020
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
library/rabbitmq:3.12.1-managementf020c06da226
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

17,403
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

2,414
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

4,201
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

2,593
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gnupg2@2.4.7-21+b3
2.4.7-21+deb13u1

Open the chart page →

38,672
prom-proxyappscodeVerified publisher2023.3.231 of 1See more

prom-proxy appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

2,508
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5

Open the chart page →

3,377
cloud-portalappuio0.4.11 of 1See more

cloud-portal appuio 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
gnupg2@2.2.27-2
2.2.27-2+deb11u3

Open the chart page →

1,287
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

5,749
maxscaleappuio2.0.11 of 1See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

2,917
appwriteappwrite-helmVerified publisher1.3.23 of 8See more

appwrite appwrite-helm 1.3.2

3 of the 8 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
kubegems/bitnami-shell:12-debian-12-r24e42e3aaacdd3
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

9,862
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4

Open the chart page →

7,763
clickhouseargonaut-charts0.6.82 of 3See more

clickhouse argonaut-charts 0.6.8

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.16.1db7dde971407
gnupg2@2.0.22-5.el7_5
0:2.0.22-5.el7_9.1
altinity/metrics-exporter:0.16.185b4fdbae053
gnupg2@2.0.22-5.el7_5
0:2.0.22-5.el7_9.1

Open the chart page →

8,708
arlas-aiasarlas-stackVerified publisher28.9.09 of 22See more

arlas-aias arlas-stack 28.9.0

9 of the 22 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2

Open the chart page →

40,164
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

23,520
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
gnupg2@2.2.19-3ubuntu2.4
2.2.19-3ubuntu2.5+esm1

Open the chart page →

3,776
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
gnupg2@2.2.4-1ubuntu1.2
2.2.4-1ubuntu1.6+esm2
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

22,915
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

14,955
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
gnupg@1.4.20-1ubuntu3.2
1.4.20-1ubuntu3.3+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm3

Open the chart page →

188,331
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
gnupg@1.4.20-1ubuntu3.2
1.4.20-1ubuntu3.3+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
gnupg@1.4.20-1ubuntu3.3
1.4.20-1ubuntu3.3+esm3

Open the chart page →

188,331
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

3,807
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,483
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

4,388

Container images carrying it

2,330 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/projectquay/clair:4.7.28d38ffa8fad7
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
gnupg2@2.3.3-2.el9_0
0:2.3.3-5.el9_7
1
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
quay.io/strimzi/operator:0.45.158c727cd2e68
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
quay.io/strimzi/operator:0.32.0c5e0e5dca750
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
gnupg2@2.2.20-2.el8
0:2.2.20-4.el8_10
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
gnupg2@2.3.3-4.el9
0:2.3.3-5.el9_7
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
gnupg2@2.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.