CVE-2026-57062
LowAdvisory
Published 23 Jun 2026In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.9
- base score, highest
- EPSS
- 0.001
- 4th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,251
- of 17,787 indexed, latest versions
- Container images
- 1,301
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
dirmngr-2.5.21-1.1 on GA media
Carried by container images the latest versions of 1,251 of 17,787 indexed charts deploy, on 1,301 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gpg2rpm | 2.2.5-lp151.6.3.1, 2.4.4-150600.3.9.1, 2.4.4-150600.3.15.1, 2.5.5-160000.4.1+1 more | 2.4.4-150600.3.18.1, 2.5.5-160000.6.1, 2.5.21-1.1 | 11 |
| gnupg2deb | 2.2.40-1.1, 2.2.40-1.1+deb12u1, 2.2.40-1.1+deb12u2, 2.4.4-2ubuntu17+14 more | 2.4.4-2ubuntu17.6, 2.4.8-4ubuntu3.1 | 1,290 |
- OSV records
- DEBIAN-CVE-2026-57062UBUNTU-CVE-2026-57062openSUSE-SU-2026:11213-1SUSE-SU-2026:22825-1SUSE-SU-2026:3243-1
- Also known as
- USN-8720-1
Charts affected
1,251 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| federidfederidOfficialVerified publisher | 0.1.2 | 1 of 1See more | 2,076 |
| zabbix-server-mysqlfermosit | 3.0.2 | 3 of 4See more | 12,988 |
| ferriskeyferriskey | 0.7.2 | 2 of 3See more | 3,223 |
| rss-bridgegabe565Verified publisher | 0.5.2 | 1 of 1See more | 2,193 |
| gentrace-self-hostedgentrace-self-hostedVerified publisher | 0.1.3 | 1 of 9See more | 15,606 |
| ghostfolioghostfolioVerified publisher | 0.5.4 | 1 of 3See more | 3,135 |
| meta-monitoringgrafana | 1.3.0 | 1 of 2See more | 3,556 |
| greenkubegreenkubeVerified publisher | 0.3.0 | 1 of 3See more | 1,816 |
| ghostgroundhog2k | 0.212.12 | 1 of 1See more | 1,948 |
| IMgrycapOfficialVerified publisher | 1.8.0 | 1 of 3See more | 4,180 |
| castopodh2mVerified publisher | 1.12.10 | 1 of 3See more | 10,106 |
| haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher | 0.1.3 | 2 of 2See more | 4,295 |
| harp-proxyharp | 0.8.1 | 1 of 1See more | 6,092 |
| hawkhawk | 1.1.5 | 1 of 4See more | 13,656 |
| guacamolehelmforgeVerified publisher | 1.5.2 | 3 of 5See more | 8,773 |
| mariadbhelmforgeVerified publisher | 2.1.1 | 1 of 1See more | 1,919 |
| helmuphelmupVerified publisher | 0.1.0 | 3 of 3See more | 16,532 |
| hivemq-platform-operatorhivemqOfficialVerified publisher | 0.2.26 | 1 of 1See more | 920 |
| hivemq-swarmhivemqOfficialVerified publisher | 0.2.70 | 1 of 1See more | 1,388 |
| hiverhiverVerified publisher | 0.1.45 | 9 of 10See more | 21,779 |
| spoolmanideaplexusVerified publisher | 2.7.1 | 1 of 1See more | 1,786 |
| backendikusi-bk-chart | 1.0.3 | 1 of 3See more | 5,976 |
| odooimioVerified publisher | 3.0.2 | 1 of 3See more | 3,081 |
| immichimmich-helm | 0.3.0 | 2 of 4See more | 15,749 |
| valkey-clusterinnagoVerified publisher | 1.1.0 | 1 of 2See more | 2,634 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 11,794 |
| jenkinsjkimVerified publisher | 5.5.14 | 1 of 2See more | 7,393 |
| k8s-grafana-stackk8s-grafana-stackVerified publisher | 0.2.32 | 1 of 17See more | 15,459 |
| ombik8s-home-lab-repo | 12.2.1 | 1 of 1See more | 1,460 |
| kdiffkdiff-snapshotsVerified publisher | 0.0.203 | 1 of 2See more | 5,515 |
| kdiff-snapshotskdiff-snapshotsVerified publisher | 0.0.55 | 1 of 1See more | 5,795 |
| kenerkenerVerified publisher | 0.2.0 | 1 of 1See more | 5,234 |
| keycloak-reporterkeycloak-reporterVerified publisher | 1.4.15 | 1 of 1See more | 1,270 |
| kikplatekikplateVerified publisher | 0.22.0 | 1 of 3See more | 2,783 |
| netbirdkitstream-netbird | 0.7.0 | 1 of 3See more | 1,330 |
| glpikitsune-itopsVerified publisher | 1.0.7 | 1 of 3See more | 4,878 |
| difykubeblocksVerified publisher | 0.5.1 | 2 of 5See more | 20,424 |
| owncloudkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 9,975 |
| kubeseal-webguikubeseal-webgui | 6.0.4 | 1 of 2See more | 4,101 |
| kubesendkubesend | 0.1.9 | 1 of 1See more | 1,385 |
| kuma-ingress-watcherkuma-ingress-watcherVerified publisher | 1.4.0 | 1 of 1See more | 2,668 |
| overpass-apil4gVerified publisher | 0.1.2 | 1 of 1See more | 3,551 |
| auditflowlabs64io-helm-chartsVerified publisher | 0.12.1 | 1 of 3See more | 1,487 |
| checkoutlabs64io-helm-chartsVerified publisher | 0.8.0 | 1 of 3See more | 1,638 |
| payment-gatewaylabs64io-helm-chartsVerified publisher | 0.8.0 | 2 of 2See more | 2,708 |
| langflow-idelangflow | 0.1.2 | 1 of 2See more | 4,011 |
| lgtm-stacklgtm-stackVerified publisher | 0.1.3 | 1 of 8See more | 5,614 |
| flaresolverrlib42Verified publisher | 2.0.0 | 1 of 1See more | 35,058 |
| litlyxlitlyx | 0.2.0 | 1 of 5See more | 7,915 |
| music-assistant-serverlmatfyVerified publisher | 0.1.9 | 1 of 1See more | 7,216 |
Container images carrying it
1,301 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opencsghq/ | b6d87e1048c2 | gnupg2 | no fix listed | 1 |
| opencsghq/ | 47e22aa71870 | gnupg2 | no fix listed | 1 |
| opencsghq/ | b4e849fcf94a | gnupg2 | no fix listed | 1 |
| opencsghq/ | 42578c9d3ebd | gnupg2 | no fix listed | 1 |
| opendatacube/ | 120457ffcd69 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| openproject/ | 88dc1359dfb5 | gnupg2 | no fix listed | 1 |
| openproject/ | 48952034215d | gnupg2 | no fix listed | 1 |
| openthread/ | 7616b9d514de | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| openvino/ | 1e7cd1d70cc1 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| openvpn/ | 2253c10ec652 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| otwld/ | d1954b759e47 | gnupg2 | no fix listed | 1 |
| outlinewiki/ | 494dfb9249a6 | gnupg2 | no fix listed | 1 |
| passbolt/ | af3a620902a0 | gnupg2 | no fix listed | 1 |
| penpotapp/ | 72a8061e8806 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| penpotapp/ | 84f3f07ead11 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| pgvector/ | cf134a767f47 | gnupg2 | no fix listed | 1 |
| phan2410/ | 9c6ed6de26ca | gnupg2 | no fix listed | 1 |
| phan2410/ | 4a86d138832d | gnupg2 | no fix listed | 1 |
| photoprism/ | 650c6ad5a651 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| photoprism/ | 958642220223 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| photoprism/ | db16ee6b1ba3 | gnupg2 | no fix listed | 1 |
| photoprism/ | fc6fd632ca74 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| phpmyadmin/ | 42a200db07b4 | gnupg2 | no fix listed | 1 |
| pk910/ | 3dcae6a62896 | gnupg2 | no fix listed | 1 |
| plantuml/ | 5f6f99ec2fc1 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| plexinc/ | 83a425ae9e13 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| pococze/ | 7a1aab425e51 | gnupg2 | no fix listed | 1 |
| polyaxon/ | 2b55c3265a90 | gnupg2 | no fix listed | 1 |
| polyaxon/ | c186bd9834c0 | gnupg2 | no fix listed | 1 |
| postgis/ | 7e00e8c3539f | gnupg2 | no fix listed | 1 |
| praravind1801/ | f29d637b9ce1 | gnupg2 | no fix listed | 1 |
| prefecthq/ | 1df4b5b6238a | gnupg2 | no fix listed | 1 |
| pretix/ | 5df3b7aa852e | gnupg2 | no fix listed | 1 |
| probely/ | 741b34e8166f | gnupg2 | no fix listed | 1 |
| prodrigestivill/ | f70742ebe42b | gnupg2 | no fix listed | 1 |
| prom/ | 71c2e988af06 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| promzeus/ | 82f6d56e280b | gnupg2 | no fix listed | 1 |
| prowlercloud/ | 4f252d579be2 | gnupg2 | no fix listed | 1 |
| proxysql/ | 947a7abad45b | gnupg2 | no fix listed | 1 |
| proxysql/ | a4d6c35c2949 | gnupg2 | no fix listed | 1 |
| qdrant/ | 5f2a56b95266 | gnupg2 | no fix listed | 1 |
| qdrant/ | 66ee661d5241 | gnupg2 | no fix listed | 1 |
| qonstrukt/ | 089af7925aa1 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| quickwit/ | d29332bdadcc | gnupg2 | no fix listed | 1 |
| qxip/ | 77acc9c7a9fd | gnupg2 | no fix listed | 1 |
| radarbase/ | e1758508e033 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| radarbase/ | fcd973d4796d | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| rancher/ | f9099b5ef8cb | gpg2 | 2.5.5-160000.6.1 | 1 |
| rancher/ | 6cbc1e932b5b | gpg2 | 2.5.5-160000.6.1 | 1 |
| readysettech/ | 588f3507280e | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |