StackRadar

CVE-2026-57062

Low

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,238
of 17,803 indexed, latest versions
Container images
1,287
deployed by those charts
Fix available
2 of 2
affected packages

dirmngr-2.5.21-1.1 on GA media

Carried by container images the latest versions of 1,238 of 17,803 indexed charts deploy, on 1,287 images.

Affected packageAffected versionsFixed inImages
gpg2rpm2.2.5-lp151.6.3.1, 2.4.4-150600.3.9.1, 2.4.4-150600.3.15.1, 2.5.5-160000.4.1+1 more2.4.4-150600.3.18.1, 2.5.5-160000.6.1, 2.5.21-1.111
gnupg2deb2.2.40-1.1, 2.2.40-1.1+deb12u1, 2.2.40-1.1+deb12u2, 2.4.4-2ubuntu17+14 more2.4.4-2ubuntu17.6, 2.4.8-4ubuntu3.11,276
OSV records
DEBIAN-CVE-2026-57062UBUNTU-CVE-2026-57062openSUSE-SU-2026:11213-1SUSE-SU-2026:22825-1SUSE-SU-2026:3243-1
Also known as
USN-8720-1

Charts affected

1,238 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,287 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
gnupg2@2.4.4-2ubuntu17.2
2.4.4-2ubuntu17.6
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.6
1
quay.io/argoprojlabs/gitops-promoter:v0.40.1daf2e7650d61
gnupg2@2.4.7-21+deb13u1+b4
no fix listed
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.6
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
gnupg2@2.4.4-2ubuntu17.4
2.4.4-2ubuntu17.6
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
gnupg2@2.4.4-2ubuntu17.4
2.4.4-2ubuntu17.6
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.6
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
gnupg2@2.2.40-1.1
no fix listed
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
gnupg2@2.2.40-1.1
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
gnupg2@2.4.4-2ubuntu17.4
2.4.4-2ubuntu17.6
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
gnupg2@2.4.8-4ubuntu3
2.4.8-4ubuntu3.1
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
gnupg2@2.2.40-1.1
no fix listed
1
quay.io/mittwald/kube-mail:latest04f1099241fc
gnupg2@2.2.40-1.1
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
gnupg2@2.4.4-2ubuntu17.3
2.4.4-2ubuntu17.6
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
gnupg2@2.4.8-4ubuntu3
2.4.8-4ubuntu3.1
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
gnupg2@2.2.40-1.1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
gnupg2@2.4.4-2ubuntu17.4
2.4.4-2ubuntu17.6
1
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
gnupg2@2.4.8-4ubuntu3
2.4.8-4ubuntu3.1
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
gnupg2@2.2.40-1.1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
gnupg2@2.2.40-1.1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
gnupg2@2.2.40-1.1+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gnupg2@2.2.40-1.1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
gnupg2@2.2.40-1.1+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnupg2@2.2.40-1.1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.