CVE-2026-24882
HighAdvisory
Published 27 Jan 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 34th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 208
- of 17,781 indexed, latest versions
- Container images
- 105
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Security update for gpg2
Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 105 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.4.7-21+b3, 2.4.7-21+deb13u1, 2.4.7-21+deb13u1+b1, 2.4.7-21+deb13u1+b2+4 more | no fix listed | 102 |
| gpg2rpm | 2.4.4-150600.3.9.1 | 2.4.4-150600.3.15.1 | 3 |
- OSV records
- DEBIAN-CVE-2026-24882SUSE-SU-2026:0434-1
Charts affected
208 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| artifact-hubartifact-hubVerified publisher | 1.23.0 | 1 of 7See more | 10,755 |
| zabbixzabbix-communityVerified publisher | 7.1.0 | 1 of 5See more | 13,664 |
| keycloakcloudpirates-keycloakVerified publisher | 0.21.37 | 2 of 3See more | 4,382 |
| postgrescloudpirates-postgresVerified publisher | 0.20.5 | 1 of 1See more | 1,626 |
| zammadzammadOfficialVerified publisher | 18.0.5 | 2 of 5See more | 6,887 |
| postgresgroundhog2k | 1.6.8 | 1 of 1See more | 1,626 |
| oktetooktetoOfficialVerified publisher | 0.0.0-2026-08-03 | 1 of 10See more | 5,750 |
| concourseconcourseVerified publisher | 20.3.0 | 1 of 2See more | 2,022 |
| openprojectopenproject-helm-chartsOfficialVerified publisher | 13.11.0 | 2 of 5See more | 19,926 |
| zabbixcetic | 3.1.3 | 1 of 5See more | 33,725 |
| netbirdjaconiVerified publisher | 0.15.1 | 1 of 4See more | 8,390 |
| gotenbergmaikumoriVerified publisher | 1.25.0 | 1 of 1See more | 9,683 |
| oneuptimeoneuptimeOfficialVerified publisher | 13.0.4 | 2 of 7See more | 11,192 |
| apim3graviteeioVerified publisher | 4.12.19 | 2 of 4See more | 4,806 |
| hedgedocadfinisVerified publisher | 0.6.1 | 1 of 2See more | 2,938 |
| lakekeeperlakekeeperVerified publisher | 0.12.0 | 1 of 2See more | 1,918 |
| paperless-ngxpaperless-ngxVerified publisher | 0.3.22 | 1 of 3See more | 8,489 |
| phpmyadminalekcVerified publisher | 0.3.1 | 1 of 1See more | 2,582 |
| docmosthelmforgeVerified publisher | 1.2.11 | 1 of 4See more | 5,564 |
| passboltpassbolt | 2.1.1 | 1 of 6See more | 13,350 |
| baserowbaserow-chartVerified publisher | 1.0.56 | 1 of 6See more | 17,263 |
| gitops-promotergitops-promoterOfficialVerified publisher | 0.17.0 | 1 of 2See more | 2,814 |
| glpiglpi-conteiner | 0.1.0 | 1 of 3See more | 12,170 |
| postgresqlhelmforgeVerified publisher | 2.0.5 | 1 of 1See more | 1,626 |
| umamihelmforgeVerified publisher | 2.3.3 | 1 of 3See more | 2,027 |
| hertzbeathertzbeatOfficialVerified publisher | 1.8.1 | 1 of 4See more | 14,000 |
| clowardenclowarden | 0.2.3 | 1 of 4See more | 5,606 |
| crossviewcrossviewOfficialVerified publisher | 4.6.0 | 1 of 2See more | 1,791 |
| dask-kubernetes-operatordask | 2026.3.0 | 1 of 1See more | 9,316 |
| gitvotegitvoteVerified publisher | 1.5.0 | 1 of 6See more | 5,613 |
| apimgraviteeioVerified publisher | 4.12.19 | 2 of 4See more | 4,806 |
| netbirdhelmforgeVerified publisher | 1.0.10 | 1 of 4See more | 2,962 |
| coreinstill-aiOfficialVerified publisher | 0.1.75 | 3 of 15See more | 30,816 |
| observalobservalVerified publisher | 1.13.1 | 1 of 8See more | 5,828 |
| phpmyadminphpmyadminVerified publisher | 1.0.3 | 1 of 1See more | 2,582 |
| lldapself-hosters-by-nightVerified publisher | 0.5.2 | 1 of 2See more | 3,400 |
| pretixtechwolf12Verified publisher | 2026.7.0 | 2 of 3See more | 9,770 |
| crossplaneupbound-stable | 2.4.0-up.1 | 1 of 5See more | 1,626 |
| wgerwgerOfficialVerified publisher | 1.0.0 | 1 of 8See more | 8,491 |
| windmillwindmill | 4.0.262 | 1 of 3See more | 1,626 |
| paperlesszekker6Verified publisher | 11.8.0 | 1 of 1See more | 4,626 |
| paperless-ngxadnoctemVerified publisher | 0.4.2 | 2 of 5See more | 19,691 |
| paperless-ngxalexmorbo-paperless-ngxVerified publisher | 0.2.0 | 1 of 2See more | 12,037 |
| aramid-indexerbiatec-repoVerified publisher | 3.9.0 | 1 of 5See more | 13,357 |
| pgcagriekinVerified publisher | 2.1.0 | 1 of 2See more | 2,280 |
| pgvectorcagriekinVerified publisher | 2.1.0 | 2 of 3See more | 4,004 |
| cert-vaultcert-vaultOfficialVerified publisher | 2.12.0 | 1 of 7See more | 15,863 |
| passbolt-hachristianhuthVerified publisher | 6.0.1 | 1 of 4See more | 10,817 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 11,205 |
| kubedashdevopstalesOfficialVerified publisher | 4.0.0 | 1 of 8See more | 9,205 |
Container images carrying it
105 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 4ef4dbc939d6 | gnupg2 | no fix listed | 68 |
| library/ | f1c3376c26f2 | gnupg2 | no fix listed | 12 |
| library/ | 67f41722b7a8 | gnupg2 | no fix listed | 10 |
| library/ | 3a8a8d6b5289 | gnupg2 | no fix listed | 7 |
| library/ | 156f0b253fd6 | gnupg2 | no fix listed | 7 |
| ghcr.io/ | aa810a36942c | gnupg2 | no fix listed | 7 |
| library/ | 9b1d34adbce1 | gnupg2 | no fix listed | 6 |
| library/ | a02db8cac496 | gnupg2 | no fix listed | 6 |
| artifacthub/ | 4fd34fa635cc | gnupg2 | no fix listed | 4 |
| library/ | 4689940c6838 | gnupg2 | no fix listed | 4 |
| cagriekin/ | 99e17aa165df | gnupg2 | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | gnupg2 | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | gnupg2 | no fix listed | 2 |
| graviteeio/ | 05fd67a93056 | gnupg2 | no fix listed | 2 |
| graviteeio/ | 27374522cd04 | gnupg2 | no fix listed | 2 |
| infisical/ | 02082bf13163 | gnupg2 | no fix listed | 2 |
| library/ | 04907bdd423b | gnupg2 | no fix listed | 2 |
| library/ | 1090bc3a8ccf | gnupg2 | no fix listed | 2 |
| library/ | 6f3e42ad37de | gnupg2 | no fix listed | 2 |
| opencsghq/ | b98600564e07 | gnupg2 | no fix listed | 2 |
| pgvector/ | 9d2e61c7352b | gnupg2 | no fix listed | 2 |
| polyaxon/ | eca6952b20e6 | gnupg2 | no fix listed | 2 |
| polyaxon/ | 024ff3fa775e | gnupg2 | no fix listed | 2 |
| proxysql/ | 0e95d1b7cc32 | gnupg2 | no fix listed | 2 |
| baserow/ | 7c00549b3a6f | gnupg2 | no fix listed | 1 |
| blackducksoftware/ | b10eaea94fd3 | gnupg2 | no fix listed | 1 |
| chiefonboarding/ | 59bc7aa60fe7 | gnupg2 | no fix listed | 1 |
| chocobozzz/ | 052712130691 | gnupg2 | no fix listed | 1 |
| cybrarist/ | e9e2447ac666 | gnupg2 | no fix listed | 1 |
| eclipseaerios/ | e7f5ba0bc64d | gnupg2 | no fix listed | 1 |
| electriccoinco/ | 2ae3a551e111 | gnupg2 | no fix listed | 1 |
| ethpandaops/ | 1efa2fba6711 | gnupg2 | no fix listed | 1 |
| ghusta/ | 879d0919fdcc | gnupg2 | no fix listed | 1 |
| gotenberg/ | 206a6c708fc6 | gnupg2 | no fix listed | 1 |
| gotenberg/ | 67097317623a | gnupg2 | no fix listed | 1 |
| instill/ | c4a393e601ed | gnupg2 | no fix listed | 1 |
| instill/ | ebe12f77a3f9 | gnupg2 | no fix listed | 1 |
| instill/ | e980125e5ba5 | gnupg2 | no fix listed | 1 |
| inventree/ | a946ec09da3e | gnupg2 | no fix listed | 1 |
| kitware/ | d7767d9b9da4 | gnupg2 | no fix listed | 1 |
| library/ | ac978b783657 | gnupg2 | no fix listed | 1 |
| library/ | 512690a56605 | gnupg2 | no fix listed | 1 |
| library/ | f5d1cc40abc1 | gnupg2 | no fix listed | 1 |
| library/ | 073e7c8b84e2 | gnupg2 | no fix listed | 1 |
| library/ | 3a82e1f56c8f | gnupg2 | no fix listed | 1 |
| library/ | 468e1f126ca5 | gnupg2 | no fix listed | 1 |
| library/ | 69e8582b781c | gnupg2 | no fix listed | 1 |
| library/ | 6eb0add3b77c | gnupg2 | no fix listed | 1 |
| library/ | 8ff36f3c6637 | gnupg2 | no fix listed | 1 |
| library/ | a9abf4275f9e | gnupg2 | no fix listed | 1 |