CVE-2026-24882
HighAdvisory
Published 27 Jan 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 34th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 208
- of 17,781 indexed, latest versions
- Container images
- 105
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Security update for gpg2
Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 105 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.4.7-21+b3, 2.4.7-21+deb13u1, 2.4.7-21+deb13u1+b1, 2.4.7-21+deb13u1+b2+4 more | no fix listed | 102 |
| gpg2rpm | 2.4.4-150600.3.9.1 | 2.4.4-150600.3.15.1 | 3 |
- OSV records
- DEBIAN-CVE-2026-24882SUSE-SU-2026:0434-1
Charts affected
208 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| postgres-backup-localduck-helm | 0.1.5 | 1 of 1See more | 3,455 |
| iotaeclipse-aeriosVerified publisher | 1.0.2 | 1 of 4See more | 13,391 |
| postgresqleks-storageclass | 0.1.0 | 1 of 1See more | 1,626 |
| assertoorethereum-helm-chartsVerified publisher | 1.2.0 | 1 of 1See more | 2,891 |
| static-siteethersphereVerified publisher | 0.73.1 | 1 of 2See more | 6,851 |
| yelbfairwinds-incubator | 0.1.1 | 1 of 5See more | 5,089 |
| quickstartfeatureformVerified publisher | 0.1.1 | 1 of 3See more | 3,529 |
| flask-contactsfirst-idror-chart | 1.0.1 | 1 of 3See more | 5,704 |
| apm-hubflanksourceVerified publisher | 0.0.47 | 1 of 2See more | 6,078 |
| flask-contactsflask-contacts-generic | 1.0.1 | 1 of 3See more | 5,704 |
| guacamolegabibbo97 | 0.3.0 | 1 of 3See more | 6,412 |
| glpiglpi-chart | 0.1.1 | 1 of 3See more | 12,170 |
| googly-logingoogly-login | 0.1.0 | 1 of 2See more | 1,626 |
| hatchet-apihatchetOfficialVerified publisher | 0.18.0 | 1 of 4See more | 1,666 |
| hatchet-hahatchetOfficialVerified publisher | 0.18.0 | 1 of 8See more | 7,344 |
| hatchet-stackhatchetOfficialVerified publisher | 0.18.0 | 1 of 8See more | 7,344 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,091 |
| automatischhelmforgeVerified publisher | 1.3.7 | 1 of 4See more | 5,769 |
| chiefonboardinghelmforgeVerified publisher | 1.1.14 | 2 of 3See more | 10,849 |
| ckanhelmforgeVerified publisher | 1.3.8 | 1 of 6See more | 9,920 |
| dawarichhelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 4,742 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 29,817 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,541 |
| entehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,201 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,046 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 1 of 3See more | 2,839 |
| medikeephelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 6,022 |
| metabasehelmforgeVerified publisher | 1.2.28 | 1 of 3See more | 1,793 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 1 of 4See more | 9,653 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,103 |
| netboxhelmforgeVerified publisher | 2.0.1 | 1 of 4See more | 4,243 |
| opencuthelmforgeVerified publisher | 1.1.9 | 1 of 5See more | 3,726 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,751 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 3,025 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,012 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,061 |
| supersethelmforgeVerified publisher | 1.3.6 | 1 of 5See more | 5,714 |
| twentyhelmforgeVerified publisher | 1.0.0 | 1 of 5See more | 2,818 |
| wallabaghelmforgeVerified publisher | 1.3.6 | 1 of 3See more | 2,762 |
| paperlesshpVerified publisher | 0.1.1 | 2 of 5See more | 26,612 |
| metamcpicoretechVerified publisher | 0.3.10 | 1 of 2See more | 1,626 |
| tolgeeicoretechVerified publisher | 0.46.1 | 1 of 3See more | 2,744 |
| infisicalinfisical-charts | 0.4.2 | 1 of 3See more | 3,014 |
| inventreeinventreeOfficialVerified publisher | 0.4.28 | 1 of 2See more | 5,788 |
| dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher | 0.1.0 | 1 of 1See more | 1,680 |
| tekton-git-listeneritsmethemojoVerified publisher | 0.1.1 | 1 of 1See more | 2,166 |
| deltabadgerk8s-chartsVerified publisher | 2.0.0 | 1 of 1See more | 5,669 |
| paperlessk8s-home-lab-repo | 11.0.1 | 1 of 1See more | 9,103 |
| kbot-self-hostedkbot-self-hostedVerified publisher | 0.1.8 | 1 of 7See more | 32,509 |
| kestra-starterkestraOfficialVerified publisher | 2.0.1 | 1 of 5See more | 5,455 |
Container images carrying it
105 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 4ef4dbc939d6 | gnupg2 | no fix listed | 68 |
| library/ | f1c3376c26f2 | gnupg2 | no fix listed | 12 |
| library/ | 67f41722b7a8 | gnupg2 | no fix listed | 10 |
| library/ | 3a8a8d6b5289 | gnupg2 | no fix listed | 7 |
| library/ | 156f0b253fd6 | gnupg2 | no fix listed | 7 |
| ghcr.io/ | aa810a36942c | gnupg2 | no fix listed | 7 |
| library/ | 9b1d34adbce1 | gnupg2 | no fix listed | 6 |
| library/ | a02db8cac496 | gnupg2 | no fix listed | 6 |
| artifacthub/ | 4fd34fa635cc | gnupg2 | no fix listed | 4 |
| library/ | 4689940c6838 | gnupg2 | no fix listed | 4 |
| cagriekin/ | 99e17aa165df | gnupg2 | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | gnupg2 | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | gnupg2 | no fix listed | 2 |
| graviteeio/ | 05fd67a93056 | gnupg2 | no fix listed | 2 |
| graviteeio/ | 27374522cd04 | gnupg2 | no fix listed | 2 |
| infisical/ | 02082bf13163 | gnupg2 | no fix listed | 2 |
| library/ | 04907bdd423b | gnupg2 | no fix listed | 2 |
| library/ | 1090bc3a8ccf | gnupg2 | no fix listed | 2 |
| library/ | 6f3e42ad37de | gnupg2 | no fix listed | 2 |
| opencsghq/ | b98600564e07 | gnupg2 | no fix listed | 2 |
| pgvector/ | 9d2e61c7352b | gnupg2 | no fix listed | 2 |
| polyaxon/ | eca6952b20e6 | gnupg2 | no fix listed | 2 |
| polyaxon/ | 024ff3fa775e | gnupg2 | no fix listed | 2 |
| proxysql/ | 0e95d1b7cc32 | gnupg2 | no fix listed | 2 |
| baserow/ | 7c00549b3a6f | gnupg2 | no fix listed | 1 |
| blackducksoftware/ | b10eaea94fd3 | gnupg2 | no fix listed | 1 |
| chiefonboarding/ | 59bc7aa60fe7 | gnupg2 | no fix listed | 1 |
| chocobozzz/ | 052712130691 | gnupg2 | no fix listed | 1 |
| cybrarist/ | e9e2447ac666 | gnupg2 | no fix listed | 1 |
| eclipseaerios/ | e7f5ba0bc64d | gnupg2 | no fix listed | 1 |
| electriccoinco/ | 2ae3a551e111 | gnupg2 | no fix listed | 1 |
| ethpandaops/ | 1efa2fba6711 | gnupg2 | no fix listed | 1 |
| ghusta/ | 879d0919fdcc | gnupg2 | no fix listed | 1 |
| gotenberg/ | 206a6c708fc6 | gnupg2 | no fix listed | 1 |
| gotenberg/ | 67097317623a | gnupg2 | no fix listed | 1 |
| instill/ | c4a393e601ed | gnupg2 | no fix listed | 1 |
| instill/ | ebe12f77a3f9 | gnupg2 | no fix listed | 1 |
| instill/ | e980125e5ba5 | gnupg2 | no fix listed | 1 |
| inventree/ | a946ec09da3e | gnupg2 | no fix listed | 1 |
| kitware/ | d7767d9b9da4 | gnupg2 | no fix listed | 1 |
| library/ | ac978b783657 | gnupg2 | no fix listed | 1 |
| library/ | 512690a56605 | gnupg2 | no fix listed | 1 |
| library/ | f5d1cc40abc1 | gnupg2 | no fix listed | 1 |
| library/ | 073e7c8b84e2 | gnupg2 | no fix listed | 1 |
| library/ | 3a82e1f56c8f | gnupg2 | no fix listed | 1 |
| library/ | 468e1f126ca5 | gnupg2 | no fix listed | 1 |
| library/ | 69e8582b781c | gnupg2 | no fix listed | 1 |
| library/ | 6eb0add3b77c | gnupg2 | no fix listed | 1 |
| library/ | 8ff36f3c6637 | gnupg2 | no fix listed | 1 |
| library/ | a9abf4275f9e | gnupg2 | no fix listed | 1 |