StackRadar

CVE-2026-24882

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
208
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
1 of 2
affected packages

Security update for gpg2

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
gnupg2deb2.4.7-21+b3, 2.4.7-21+deb13u1, 2.4.7-21+deb13u1+b1, 2.4.7-21+deb13u1+b2+4 moreno fix listed102
gpg2rpm2.4.4-150600.3.9.12.4.4-150600.3.15.13
OSV records
DEBIAN-CVE-2026-24882SUSE-SU-2026:0434-1

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

3,455
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

13,391
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

2,891
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/node:latestf5d1cc40abc1
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,851
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,089
quickstartfeatureformVerified publisher0.1.11 of 3See more

quickstart featureform 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,529
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,704
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,078
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,704
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

6,412
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

12,170
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
hatchet-apihatchetOfficialVerified publisher0.18.01 of 4See more

hatchet-api hatchet 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,666
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

7,344
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,091
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,769
chiefonboardinghelmforgeVerified publisher1.1.142 of 3See more

chiefonboarding helmforge 1.1.14

2 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
gnupg2@2.4.7-21+deb13u1+b2
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

10,849
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

9,920
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,742
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
gnupg2@2.4.7-21+deb13u1+b3
no fix listed

Open the chart page →

29,817
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

8,541
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,201
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,046
listmonkhelmforgeVerified publisher1.1.141 of 3See more

listmonk helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,839
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,022
metabasehelmforgeVerified publisher1.2.281 of 3See more

metabase helmforge 1.2.28

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,793
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,103
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

4,243
opencuthelmforgeVerified publisher1.1.91 of 5See more

opencut helmforge 1.1.9

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,726
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

4,751
reactive-resumehelmforgeVerified publisher1.0.01 of 4See more

reactive-resume helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,025
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

6,012
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,061
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,714
twentyhelmforgeVerified publisher1.0.01 of 5See more

twenty helmforge 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,818
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,762
paperlesshpVerified publisher0.1.12 of 5See more

paperless hp 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
gnupg2@2.4.7-21+deb13u1+b3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

26,612
metamcpicoretechVerified publisher0.3.101 of 2See more

metamcp icoretech 0.3.10

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,626
tolgeeicoretechVerified publisher0.46.11 of 3See more

tolgee icoretech 0.46.1

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
gnupg2@2.4.7-21+deb13u1+b1
no fix listed

Open the chart page →

2,744
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

3,014
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,788
dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher0.1.01 of 1See more

dynamic-ip-loadbalancer-controller itsmethemojo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

1,680
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

2,166
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
gnupg2@2.4.7-21+deb13u1+b4
no fix listed

Open the chart page →

5,669
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
gnupg2@2.4.7-21+deb13u1+b2
no fix listed

Open the chart page →

9,103
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
gnupg2@2.4.7-21+deb13u1+b2
no fix listed

Open the chart page →

32,509
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry CVE-2026-24882.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
gnupg2@2.4.7-21+b3
no fix listed

Open the chart page →

5,455

Container images carrying it

105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.