StackRadar

CVE-2026-24882

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
208
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
1 of 2
affected packages

Security update for gpg2

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.4.7-21+b3, 2.4.7-21+deb13u1, 2.4.7-21+deb13u1+b1, 2.4.7-21+deb13u1+b2+4 moreno fix listed102
gpg2rpm2.4.4-150600.3.9.12.4.4-150600.3.15.13
OSV records
DEBIAN-CVE-2026-24882SUSE-SU-2026:0434-1

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

10,755
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

13,664
keycloakcloudpirates-keycloakVerified publisher0.21.372 of 3See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
gnupg2@2.4.7-21+b3
no fix listed
library/postgres:18.64ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,382
postgrescloudpirates-postgresVerified publisher0.20.51 of 1See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
zammadzammadOfficialVerified publisher18.0.52 of 5See more

zammad zammad 18.0.5

2 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,887
postgresgroundhog2k1.6.81 of 1See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
oktetooktetoOfficialVerified publisher0.0.0-2026-08-031 of 10See more

okteto okteto 0.0.0-2026-08-03

1 of the 10 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-033e56bdd1b90d
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

5,750
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,022
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
openproject/openproject:17.8.0-slim48952034215d
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

19,926
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

33,725
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,390
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.42 of 7See more

oneuptime oneuptime 13.0.4

2 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
oneuptime/runner:release4accc516d800
gnupg2@2.4.7-21+deb13u1+b5
no fix listed

Open the chart page →

11,192
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,806
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

2,938
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,918
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,489
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,582
docmosthelmforgeVerified publisher1.2.111 of 4See more

docmost helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,564
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

13,350
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

17,263
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,814
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

12,170
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,027
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

14,000
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

5,606
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,791
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

9,316
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

5,613
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,806
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,962
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
gnupg2@2.4.7-21+deb13u1+b1
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
gnupg2@2.4.7-21+deb13u1+b1
no fix listed
instill/model-backend:611f0f2e980125e5ba5
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

30,816
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,828
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,582
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

3,400
pretixtechwolf12Verified publisher2026.7.02 of 3See more

pretix techwolf12 2026.7.0

2 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
pretix/standalone:2026.7.05df3b7aa852e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

9,770
crossplaneupbound-stable2.4.0-up.11 of 5See more

crossplane upbound-stable 2.4.0-up.1

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:15.186eb0add3b77c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,491
windmillwindmill4.0.2621 of 3See more

windmill windmill 4.0.262

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

19,691
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

12,037
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

13,357
pgcagriekinVerified publisher2.1.01 of 2See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,280
pgvectorcagriekinVerified publisher2.1.02 of 3See more

pgvector cagriekin 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

4,004
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

15,863
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.110e95d1b7cc32
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

10,817
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

11,205
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
gnupg2@2.4.7-21+deb13u1+b2
no fix listed

Open the chart page →

9,205

Container images carrying it

105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.