StackRadar

CVE-2026-54171

Medium

Advisory

Published 10 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

Excon does not redact additional sensitive/risky headers when following redirects

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
excongem0.62.0, 0.64.0, 0.71.1, 0.82.0+7 more1.5.016
OSV records
GHSA-48rx-c7pg-q66r

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
efkcryptexlabsVerified publisher7.17.31 of 3See more

efk cryptexlabs 7.17.3

1 of the 3 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
excon@0.82.0
1.5.0

Open the chart page →

1,299
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
excon@0.95.0
1.5.0

Open the chart page →

5,056
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
excon@0.88.0
1.5.0

Open the chart page →

6,810
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
excon@0.112.0
1.5.0

Open the chart page →

5,558
fluentdbryanalves0.1.01 of 1See more

fluentd bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
bryanalves/fluentd:0.5d3605be4b178
excon@0.62.0
1.5.0

Open the chart page →

723
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
excon@0.112.0
1.5.0

Open the chart page →

14,130
fluentd-kubernetes-awscloudposse0.2.11 of 2See more

fluentd-kubernetes-aws cloudposse 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
excon@0.64.0
1.5.0

Open the chart page →

1,305
coralogix-fluentddevtron1.0.31 of 1See more

coralogix-fluentd devtron 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
excon@0.71.1
1.5.0

Open the chart page →

750
coralogix-fluentddevtron-labs1.0.31 of 1See more

coralogix-fluentd devtron-labs 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
excon@0.71.1
1.5.0

Open the chart page →

750
fluentdhelm0.2.161 of 1See more

fluentd helm 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
excon@0.85.0
1.5.0

Open the chart page →

1,217
coralogix-fluentdhelmtest1.0.41 of 1See more

coralogix-fluentd helmtest 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
excon@0.71.1
1.5.0

Open the chart page →

750
fluentd-elasticsearchkfirfer13.9.11 of 1See more

fluentd-elasticsearch kfirfer 13.9.1

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
excon@0.94.0
1.5.0

Open the chart page →

1,178
gitlabkubesphereVerified publisher4.2.33 of 17See more

gitlab kubesphere 4.2.3

3 of the 17 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
excon@0.71.1
1.5.0
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
excon@0.71.1
1.5.0
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
excon@0.71.1
1.5.0

Open the chart page →

38,133
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
excon@0.95.0
1.5.0

Open the chart page →

6,026
coralogix-fluentdromholdings1.0.31 of 1See more

coralogix-fluentd romholdings 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
excon@0.71.1
1.5.0

Open the chart page →

750
fluentd-operatorstatcan0.5.11 of 1See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
vmware/kube-fluentd-operator:latestf028c138a5f4
excon@0.102.0
1.5.0

Open the chart page →

1,955
velero-notificationsvelero-notifications1.1.01 of 1See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54171.

Container imageDigestPackageFixed in
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
excon@0.92.3
1.5.0

Open the chart page →

1,285

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
excon@0.71.1
1.5.0
4
bryanalves/fluentd:0.5d3605be4b178
excon@0.62.0
1.5.0
1
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
excon@0.85.0
1.5.0
1
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
excon@0.82.0
1.5.0
1
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
excon@0.64.0
1.5.0
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
excon@0.71.1
1.5.0
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
excon@0.71.1
1.5.0
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
excon@0.71.1
1.5.0
1
openproject/community:12.0.2734743d11094
excon@0.88.0
1.5.0
1
vmware/kube-fluentd-operator:latestf028c138a5f4
excon@0.102.0
1.5.0
1
ghcr.io/caninehq/canine:latesta058034ca006
excon@0.112.0
1.5.0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
excon@0.112.0
1.5.0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
excon@0.95.0
1.5.0
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
excon@0.95.0
1.5.0
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
excon@0.92.3
1.5.0
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
excon@0.94.0
1.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.