StackRadar

CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,054
of 17,828 indexed, latest versions
Container images
2,332
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more1,898
gnupg2rpm2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7335
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm376
gnupgapk2.4.5-r0, 2.4.7-r02.4.9-r015
gpg2rpm2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.12.4.4-150600.3.12.1, 2.5.16-1.19
OSV records
ALPINE-CVE-2025-68973DEBIAN-CVE-2025-68973RHSA-2026:0719RHSA-2026:0728RHSA-2026:1677RLSA-2026:0719RLSA-2026:0728UBUNTU-CVE-2025-68973DLA-4437-1openSUSE-SU-2026:10001-1SUSE-SU-2026:0215-1
Also known as
RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars
ChartLatestAffected imagesRadar Score
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

6,027
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3

Open the chart page →

1,839
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10

Open the chart page →

3,702
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
artifacthub/tracker:v1.19.06596c8c4d955
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
arturisimo/planner:v1.0fff9de644941
gnupg2@2.2.27-2+deb11u1
2.2.27-2+deb11u3
1
arunvelsriram/utils:latest655ad18fd8d6
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.4
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
assistiot/identity-manager_db:latest0d3e6d35f168
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
assistiot/identity-manager_kc:latest0df4b4fa899a
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
assistiot/location_processing:lateste9bae124095f
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
assistiot/open_api_backend:1.1.230812ba93555
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
atlassian/confluence-server:7.10.03b9222ab32ef
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
atlassian/jira-software:8.14.037bc46cbec1a
gnupg2@2.2.27-3ubuntu2.1
2.2.27-3ubuntu2.5
1
atlassian/jira-software:9.7.264a75aa4ec4e
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.4
1
atmoz/sftp:latest0960390462a4
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
atomix/atomix:3.1.127738ff4f5c63
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
avinash263/pyredis263:latestaa2b8727f1a6
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
avzini/web-app:latestf40b30210ed0
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
azhar008/flaskapplication:latesta1e827b0adea
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
baserow/backend:1.31.1e0b3c8130b91
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
baserow/baserow:1.30.1df0c42eb67e8
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
1
bcgovimages/aries-cloudagent:py36-1.16-1_0.7.4faa2e2d21916
gnupg2@2.2.4-1ubuntu1.4
2.2.4-1ubuntu1.6+esm2
1
beastob/url-shortener:1.0.299a49885ab33
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
beopenit/door-helm:v3.0.1b4d9f9bee224
gnupg2@2.2.20-3.el8_6
0:2.2.20-4.el8_10
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
gnupg2@2.2.19-3ubuntu2.2
2.2.19-3ubuntu2.5+esm1
1
bicarus/mx-notifier:1.1.8bed688d16762
gnupg2@2.2.19-3ubuntu2.1
2.2.19-3ubuntu2.5+esm1
1
biospheere/promcord:latest16d4fd269e66
gnupg2@2.2.27-2
2.2.27-2+deb11u3
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/git:latest4b08d0c5af8d
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
gnupg2@2.2.40-1.1
2.2.40-1.1+deb12u2
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
gnupg2@2.2.27-2+deb11u2
2.2.27-2+deb11u3
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.