CVE-2026-57062

Low

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.9; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,251; of 17,787 indexed, latest versions
Container images: 1,301; deployed by those charts
Fix available: 2 of 2; affected packages

dirmngr-2.5.21-1.1 on GA media

Carried by container images the latest versions of 1,251 of 17,787 indexed charts deploy, on 1,301 images.

Affected package	Affected versions	Fixed in	Images
gpg2rpm	2.2.5-lp151.6.3.1, 2.4.4-150600.3.9.1, 2.4.4-150600.3.15.1, 2.5.5-160000.4.1+1 more	2.4.4-150600.3.18.1, 2.5.5-160000.6.1, 2.5.21-1.1	11
gnupg2deb	2.2.40-1.1, 2.2.40-1.1+deb12u1, 2.2.40-1.1+deb12u2, 2.4.4-2ubuntu17+14 more	2.4.4-2ubuntu17.6, 2.4.8-4ubuntu3.1	1,290

OSV records: DEBIAN-CVE-2026-57062 UBUNTU-CVE-2026-57062 openSUSE-SU-2026:11213-1 SUSE-SU-2026:22825-1 SUSE-SU-2026:3243-1
Also known as: USN-8720-1

Charts affected

1,251 by stars

Chart

Latest

Affected images

Radar Score

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-57062.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnupg2@2.2.40-1.1	no fix listed

Open the chart page →

2,674

Container images carrying it

1,301 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	gnupg2@2.2.40-1.1	no fix listed	3
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	gnupg2@2.2.40-1.1+deb12u2	no fix listed	3
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	gnupg2@2.2.40-1.1	no fix listed	3
ghcr.io/smarter-project/hydra/crismux :main	673d5229df1f	gnupg2@2.2.40-1.1+deb12u2	no fix listed	3
quay.io/cilium/cilium :v1.20.1	ae9ea21f7427	gnupg2@2.4.8-4ubuntu3	2.4.8-4ubuntu3.1	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	gnupg2@2.2.40-1.1	no fix listed	3
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	gnupg2@2.2.40-1.1+deb12u1	no fix listed	3
actualbudget/actual-server :26.9.0	552beab3dec8	gnupg2@2.2.40-1.1+deb12u2	no fix listed	2
alazidis/kube-netlag :1.1.0	0e8c84152201	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
apache/apisix :3.18.0-ubuntu	9ee5df1611f9	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
apache/rocketmq :5.4.0	319cd8a81ed1	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.6	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/etcd :latest	99b408c15272	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/redis :latest	5927ff3702df	gnupg2@2.2.40-1.1	no fix listed	2
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	gnupg2@2.2.40-1.1	no fix listed	2
blockstack/stacks-core :3.2.0.0.0	f79944317326	gnupg2@2.2.40-1.1	no fix listed	2
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	gnupg2@2.2.40-1.1	no fix listed	2
cribl/cribl :4.19.2	044f9a5fac9a	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	gnupg2@2.2.40-1.1	no fix listed	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
gotson/komga :1.26.3	6c2a967bbe9a	gnupg2@2.4.8-4ubuntu3	2.4.8-4ubuntu3.1	2
grafana/alloy :v1.8.1	7790f6f7fbd8	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.6	2
grafana/alloy :v1.12.2	f94b1c82957a	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	gnupg2@2.2.40-1.1	no fix listed	2
homebridge/homebridge :latest	77c685a40911	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
ilum/marquez :0.54.0	6e1d709d41f8	gnupg2@2.2.40-1.1+deb12u2	no fix listed	2
infisical/infisical :latest :v0.165.6	02082bf13163	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	gnupg2@2.2.40-1.1	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.6	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	gnupg2@2.2.40-1.1	no fix listed	2
library/buildpack-deps :curl	04907bdd423b	gnupg2@2.4.7-21+deb13u1+b4	no fix listed	2
library/elasticsearch :8.19.12	89729a95066a	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6	2
library/ghost :6.63.0	e05bc1169fb2	gnupg2@2.2.40-1.1+deb12u2	no fix listed	2