StackRadar

CVE-2026-24882

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
208
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
1 of 2
affected packages

Security update for gpg2

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.4.7-21+b3, 2.4.7-21+deb13u1, 2.4.7-21+deb13u1+b1, 2.4.7-21+deb13u1+b2+4 moreno fix listed102
gpg2rpm2.4.4-150600.3.9.12.4.4-150600.3.15.13
OSV records
DEBIAN-CVE-2026-24882SUSE-SU-2026:0434-1

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

8,823
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

5,584
ferriskeyferriskey0.7.21 of 3See more

ferriskey ferriskey 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,262
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,716
backendikusi-bk-chart1.0.31 of 3See more

backend ikusi-bk-chart 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,940
odooimioVerified publisher3.0.21 of 3See more

odoo imio 3.0.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:17.10ebba4f4de37f
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,068
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

11,764
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,770
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,657
magentomagento3.2.33 of 12See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
gpg2@2.4.4-150600.3.9.1
2.4.4-150600.3.15.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
gpg2@2.4.4-150600.3.9.1
2.4.4-150600.3.15.1
longhornio/longhorn-ui:v1.10.0e60f36161511
gpg2@2.4.4-150600.3.9.1
2.4.4-150600.3.15.1

Open the chart page →

13,479
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

7,527
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

22,420
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,489
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

7,035
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

11,869
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
teamcityscalified-teamcityVerified publisher2026.2.01 of 3See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

16,449
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

14,491
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
gnupg2@2.4.7-21+deb13u1
no fix listed

Open the chart page →

7,126
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
gnupg2@2.4.7-21+deb13u1+dhi2
no fix listed

Open the chart page →

2,522
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,839
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14.22eba8ddbdd837
gnupg2@2.4.7-21+deb13u1+b2
no fix listed

Open the chart page →

2,610
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,835
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,582
airbyte-keycloakairbyteVerified publisher0.1.21 of 2See more

airbyte-keycloak airbyte 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

5,558
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

37,268
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
gnupg2@2.4.7-21+deb13u1+b5
no fix listed

Open the chart page →

4,923
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,032
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,495
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

9,521
getoutlinecfi20171.2.01 of 4See more

getoutline cfi2017 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

4,412
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

15,371
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,626
proxysqlchristianhuthVerified publisher3.1.11 of 1See more

proxysql christianhuth 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.110e95d1b7cc32
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,265
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,982
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

3,694
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.4.0b4e849fcf94a
gnupg2@2.4.7-21+deb13u1
no fix listed
opencsghq/postgres:15.1842578c9d3ebd
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.02 of 7See more

dataflow csghub 2.5.0

2 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
gnupg2@2.4.7-21+deb13u1
no fix listed
opencsghq/postgres:15.19b98600564e07
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,632
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

13,936
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,547
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
challengedeneme0.1.01 of 2See more

challenge deneme 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,675
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

7,459
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

10,270

Container images carrying it

105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.