StackRadar

CVE-2026-54291

High

Advisory

Published 12 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
89
deployed by those charts
Fix available
2 of 2
affected packages

Silent channel-binding authentication downgrade via unsupported certificate algorithms

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 89 images.

Affected packageAffected versionsFixed inImages
postgresqlmaven42.7.4, 42.7.5, 42.7.7, 42.7.8+3 more42.7.1289
postgresql-jdbc-driverbitnami42.7.7, 42.7.842.7.122
OSV records
BIT-postgresql-jdbc-driver-2026-54291GHSA-j92g-9f8w-j867

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
postgresql@42.7.11
42.7.12

Open the chart page →

1,733
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
postgresql@42.7.11
42.7.12

Open the chart page →

394
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
postgresql@42.7.11
42.7.12

Open the chart page →

571
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
postgresql@42.7.11
42.7.12

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
postgresql@42.7.11
42.7.12

Open the chart page →

1,733
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
postgresql@42.7.11
42.7.12

Open the chart page →

342
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
alfio/alf.io:2.0-M5-26060c836a081446
postgresql@42.7.10
42.7.12

Open the chart page →

2,091
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
postgresql@42.7.8
42.7.12

Open the chart page →

25,017
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
postgresql@42.7.11
42.7.12

Open the chart page →

15,089
kf-app-eaiit-at-mOfficialVerified publisher0.1.71 of 1See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
postgresql@42.7.7
42.7.12

Open the chart page →

1,947
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
postgresql@42.7.4
42.7.12

Open the chart page →

45,239
proxerajfwenischVerified publisher0.12.201 of 1See more

proxera jfwenisch 0.12.20

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
postgresql@42.7.11
42.7.12

Open the chart page →

185
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
postgresql@42.7.11
42.7.12

Open the chart page →

3,818
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
postgresql@42.7.9
42.7.12

Open the chart page →

1,937
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
postgresql@42.7.7
42.7.12

Open the chart page →

2,901
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
postgresql@42.7.8
42.7.12

Open the chart page →

5,191
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
postgresql@42.7.5
42.7.12

Open the chart page →

2,587
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
postgresql@42.7.11
42.7.12

Open the chart page →

2,024
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
postgresql@42.7.4
42.7.12

Open the chart page →

7,792
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
postgresql@42.7.4
42.7.12

Open the chart page →

2,097
unifiqaoruVerified publisher1.1.21 of 2See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
postgresql@42.7.10
42.7.12

Open the chart page →

3,642
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
postgresql@42.7.10
42.7.12

Open the chart page →

6,207
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
postgresql@42.7.4
42.7.12

Open the chart page →

2,590
keycloakself-hosters-by-nightVerified publisher0.1.11 of 1See more

keycloak self-hosters-by-night 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.60aae0de7fca8
postgresql@42.7.11
42.7.12

Open the chart page →

518
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
postgresql@42.7.7
42.7.12

Open the chart page →

1,690
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
postgresql@42.7.11
42.7.12

Open the chart page →

3,003
retail-store-sample-orders-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-orders-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
postgresql@42.7.7
42.7.12

Open the chart page →

1,223
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
postgresql@42.7.4
42.7.12

Open the chart page →

5,063
orchestratremolo3.1.551 of 5See more

orchestra tremolo 3.1.55

1 of the 5 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
postgresql@42.7.11
42.7.12

Open the chart page →

7,637
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
postgresql@42.7.7
42.7.12

Open the chart page →

1,527
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
postgresql@42.7.4
42.7.12

Open the chart page →

45,239
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-54291.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
postgresql@42.7.8
postgresql-jdbc-driver@42.7.8
42.7.12
42.7.12

Open the chart page →

7,624

Container images carrying it

89 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
openbas/platform:2.0.5d986d80b0a75
postgresql@42.7.8
42.7.12
1
opennms/sentinel:36.0.288869082a14f
postgresql@42.7.11
42.7.12
1
razzy10/product-service:latest702e411956db
postgresql@42.7.7
42.7.12
1
reportportal/service-api:5.15.4bf193091525a
postgresql@42.7.11
42.7.12
1
reportportal/service-authorization:5.15.16a954407b417
postgresql@42.7.11
42.7.12
1
reportportal/service-jobs:5.15.299d27d58d6b4
postgresql@42.7.11
42.7.12
1
rrobetti/ojp:0.1.0-beta1141bd88232b
postgresql@42.7.5
42.7.12
1
siakhooi/query:1.0.0f1f4b5b1b870
postgresql@42.7.10
42.7.12
1
softwaremill/bootzooka:latest845b5e8f8056
postgresql@42.7.11
42.7.12
1
thingsboard/tb-postgres:latest2d17e4e36edc
postgresql@42.7.7
42.7.12
1
traccar/traccar:6.7-alpine621c8d6d46fd
postgresql@42.7.5
42.7.12
1
ghcr.io/cosmo-tech/cosmotech-api:5.2.0269ee25c359b
postgresql@42.7.11
42.7.12
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
postgresql@42.7.10
42.7.12
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
postgresql@42.7.10
42.7.12
1
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
postgresql@42.7.10
42.7.12
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
postgresql@42.7.8
42.7.12
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
postgresql@42.7.11
42.7.12
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
postgresql@42.7.7
42.7.12
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
postgresql@42.7.11
42.7.12
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
postgresql@42.7.9
42.7.12
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
postgresql@42.7.11
42.7.12
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
postgresql@42.7.10
42.7.12
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
postgresql@42.7.11
42.7.12
1
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
postgresql@42.7.11
42.7.12
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
postgresql@42.7.8
postgresql-jdbc-driver@42.7.8
42.7.12
42.7.12
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
postgresql@42.7.7
42.7.12
1
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
postgresql@42.7.7
42.7.12
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
postgresql@42.7.8
42.7.12
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
postgresql@42.7.8
42.7.12
1
quay.io/keycloak/keycloak:26.009a381c715ab
postgresql@42.7.4
42.7.12
1
quay.io/keycloak/keycloak:26.60aae0de7fca8
postgresql@42.7.11
42.7.12
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
postgresql@42.7.4
42.7.12
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
postgresql@42.7.7
42.7.12
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
postgresql@42.7.7
42.7.12
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
postgresql@42.7.7
42.7.12
1
quay.io/keycloak/keycloak:26.6.39b0330756022
postgresql@42.7.11
42.7.12
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
postgresql@42.7.4
42.7.12
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
postgresql@42.7.8
42.7.12
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
postgresql@42.7.4
42.7.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.