CVE-2026-57062
LowAdvisory
Published 23 Jun 2026In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.9
- base score, highest
- EPSS
- 0.001
- 4th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,251
- of 17,787 indexed, latest versions
- Container images
- 1,301
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
dirmngr-2.5.21-1.1 on GA media
Carried by container images the latest versions of 1,251 of 17,787 indexed charts deploy, on 1,301 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gpg2rpm | 2.2.5-lp151.6.3.1, 2.4.4-150600.3.9.1, 2.4.4-150600.3.15.1, 2.5.5-160000.4.1+1 more | 2.4.4-150600.3.18.1, 2.5.5-160000.6.1, 2.5.21-1.1 | 11 |
| gnupg2deb | 2.2.40-1.1, 2.2.40-1.1+deb12u1, 2.2.40-1.1+deb12u2, 2.4.4-2ubuntu17+14 more | 2.4.4-2ubuntu17.6, 2.4.8-4ubuntu3.1 | 1,290 |
- OSV records
- DEBIAN-CVE-2026-57062UBUNTU-CVE-2026-57062openSUSE-SU-2026:11213-1SUSE-SU-2026:22825-1SUSE-SU-2026:3243-1
- Also known as
- USN-8720-1
Charts affected
1,251 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| federidfederidOfficialVerified publisher | 0.1.2 | 1 of 1See more | 2,076 |
| zabbix-server-mysqlfermosit | 3.0.2 | 3 of 4See more | 12,988 |
| ferriskeyferriskey | 0.7.2 | 2 of 3See more | 3,223 |
| rss-bridgegabe565Verified publisher | 0.5.2 | 1 of 1See more | 2,193 |
| gentrace-self-hostedgentrace-self-hostedVerified publisher | 0.1.3 | 1 of 9See more | 15,606 |
| ghostfolioghostfolioVerified publisher | 0.5.4 | 1 of 3See more | 3,135 |
| meta-monitoringgrafana | 1.3.0 | 1 of 2See more | 3,556 |
| greenkubegreenkubeVerified publisher | 0.3.0 | 1 of 3See more | 1,816 |
| ghostgroundhog2k | 0.212.12 | 1 of 1See more | 1,948 |
| IMgrycapOfficialVerified publisher | 1.8.0 | 1 of 3See more | 4,180 |
| castopodh2mVerified publisher | 1.12.10 | 1 of 3See more | 10,106 |
| haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher | 0.1.3 | 2 of 2See more | 4,295 |
| harp-proxyharp | 0.8.1 | 1 of 1See more | 6,092 |
| hawkhawk | 1.1.5 | 1 of 4See more | 13,656 |
| guacamolehelmforgeVerified publisher | 1.5.2 | 3 of 5See more | 8,773 |
| mariadbhelmforgeVerified publisher | 2.1.1 | 1 of 1See more | 1,919 |
| helmuphelmupVerified publisher | 0.1.0 | 3 of 3See more | 16,532 |
| hivemq-platform-operatorhivemqOfficialVerified publisher | 0.2.26 | 1 of 1See more | 920 |
| hivemq-swarmhivemqOfficialVerified publisher | 0.2.70 | 1 of 1See more | 1,388 |
| hiverhiverVerified publisher | 0.1.45 | 9 of 10See more | 21,779 |
| spoolmanideaplexusVerified publisher | 2.7.1 | 1 of 1See more | 1,786 |
| backendikusi-bk-chart | 1.0.3 | 1 of 3See more | 5,976 |
| odooimioVerified publisher | 3.0.2 | 1 of 3See more | 3,081 |
| immichimmich-helm | 0.3.0 | 2 of 4See more | 15,749 |
| valkey-clusterinnagoVerified publisher | 1.1.0 | 1 of 2See more | 2,634 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 11,794 |
| jenkinsjkimVerified publisher | 5.5.14 | 1 of 2See more | 7,393 |
| k8s-grafana-stackk8s-grafana-stackVerified publisher | 0.2.32 | 1 of 17See more | 15,459 |
| ombik8s-home-lab-repo | 12.2.1 | 1 of 1See more | 1,460 |
| kdiffkdiff-snapshotsVerified publisher | 0.0.203 | 1 of 2See more | 5,515 |
| kdiff-snapshotskdiff-snapshotsVerified publisher | 0.0.55 | 1 of 1See more | 5,795 |
| kenerkenerVerified publisher | 0.2.0 | 1 of 1See more | 5,234 |
| keycloak-reporterkeycloak-reporterVerified publisher | 1.4.15 | 1 of 1See more | 1,270 |
| kikplatekikplateVerified publisher | 0.22.0 | 1 of 3See more | 2,783 |
| netbirdkitstream-netbird | 0.7.0 | 1 of 3See more | 1,330 |
| glpikitsune-itopsVerified publisher | 1.0.7 | 1 of 3See more | 4,878 |
| difykubeblocksVerified publisher | 0.5.1 | 2 of 5See more | 20,424 |
| owncloudkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 9,975 |
| kubeseal-webguikubeseal-webgui | 6.0.4 | 1 of 2See more | 4,101 |
| kubesendkubesend | 0.1.9 | 1 of 1See more | 1,385 |
| kuma-ingress-watcherkuma-ingress-watcherVerified publisher | 1.4.0 | 1 of 1See more | 2,668 |
| overpass-apil4gVerified publisher | 0.1.2 | 1 of 1See more | 3,551 |
| auditflowlabs64io-helm-chartsVerified publisher | 0.12.1 | 1 of 3See more | 1,487 |
| checkoutlabs64io-helm-chartsVerified publisher | 0.8.0 | 1 of 3See more | 1,638 |
| payment-gatewaylabs64io-helm-chartsVerified publisher | 0.8.0 | 2 of 2See more | 2,708 |
| langflow-idelangflow | 0.1.2 | 1 of 2See more | 4,011 |
| lgtm-stacklgtm-stackVerified publisher | 0.1.3 | 1 of 8See more | 5,614 |
| flaresolverrlib42Verified publisher | 2.0.0 | 1 of 1See more | 35,058 |
| litlyxlitlyx | 0.2.0 | 1 of 5See more | 7,915 |
| music-assistant-serverlmatfyVerified publisher | 0.1.9 | 1 of 1See more | 7,216 |
Container images carrying it
1,301 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| supabase/ | 26d8070c55e9 | gnupg2 | no fix listed | 1 |
| supabase/ | 606aca9fdaa7 | gnupg2 | no fix listed | 1 |
| supabase/ | 94a2a9d2906e | gnupg2 | no fix listed | 1 |
| svtechnmaa/ | 18394b08e6c3 | gnupg2 | no fix listed | 1 |
| swimmwatch/ | d48c705a58c8 | gnupg2 | no fix listed | 1 |
| sysnet4admin/ | e74b43c7f492 | gnupg2 | no fix listed | 1 |
| sysnet4admin/ | 5802bfcd7fed | gnupg2 | no fix listed | 1 |
| tchiotludo/ | c2824dc2ae44 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| teknas09/ | 12a1fa85c4aa | gnupg2 | no fix listed | 1 |
| tenureai/ | 5f5b222df9a5 | gnupg2 | no fix listed | 1 |
| testinprod/ | 0a125bd77a2d | gnupg2 | no fix listed | 1 |
| theradius/ | 63ba348546ec | gnupg2 | no fix listed | 1 |
| thingsboard/ | 2d17e4e36edc | gnupg2 | no fix listed | 1 |
| thongngo3301/ | a341af5976e3 | gnupg2 | no fix listed | 1 |
| tibyandocker/ | a4ad592cea84 | gnupg2 | no fix listed | 1 |
| treskon/ | 88e813f22347 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| treskon/ | a475d80e4ecf | gnupg2 | no fix listed | 1 |
| unitycatalog/ | 3a688197b218 | gnupg2 | no fix listed | 1 |
| v3xl/ | 6f62ca96be82 | gnupg2 | no fix listed | 1 |
| valkey/ | c5d4f082b76d | gnupg2 | no fix listed | 1 |
| vaultwarden/ | 84fd8a47f58d | gnupg2 | no fix listed | 1 |
| vcnngr/ | 1a849a997b6d | gnupg2 | no fix listed | 1 |
| vcnngr/ | 30f1f05e57a6 | gnupg2 | no fix listed | 1 |
| veecode/ | c69fd286b489 | gnupg2 | no fix listed | 1 |
| venturenox/ | 83b471c193ba | gnupg2 | no fix listed | 1 |
| visualregressiontracker/ | 941aeb8c8bf9 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 007c6670ff48 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 945675fd2636 | gnupg2 | no fix listed | 1 |
| vlebediantsev/ | 54f69d116c50 | gnupg2 | no fix listed | 1 |
| wallarm/ | a3d4d2f780e8 | gnupg2 | no fix listed | 1 |
| wasmcloud/ | 5c7acfe7e8e1 | gnupg2 | no fix listed | 1 |
| wger/ | 997ead43aabd | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| wiktorn/ | 9bb5f4a9b54c | gnupg2 | no fix listed | 1 |
| xom4ekp2p/ | d0e0aa238b02 | gnupg2 | no fix listed | 1 |
| xom4ekp2p/ | 2745b5fd8785 | gnupg2 | no fix listed | 1 |
| youkadev/ | 4db0f9428e67 | gnupg2 | no fix listed | 1 |
| zabbix/ | 7322a94c5d7a | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zabbix/ | 55d074b6b031 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zabbix/ | 7e8c8e059533 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zabbix/ | 0e5f69c4c54e | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zabbix/ | 7d4d58086515 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zabbix/ | 915b3183e054 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| zenmldocker/ | 09027a6312ee | gnupg2 | no fix listed | 1 |
| zepai/ | 6ab0ee79926b | gnupg2 | no fix listed | 1 |
| zer0tonin/ | 09872bae1554 | gnupg2 | 2.4.8-4ubuntu3.1 | 1 |
| gcr.io/ | 6efe04ba4e06 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| gcr.io/ | de6ff0f1a854 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| gcr.io/ | 5f5918f843a4 | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| gcr.io/ | ec6f9ea5757b | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |
| gcr.io/ | 8d4576f7b98f | gnupg2 | 2.4.4-2ubuntu17.6 | 1 |