StackRadar

CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,524
of 17,821 indexed, latest versions
Container images
2,520
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,524 of 17,821 indexed charts deploy, on 2,520 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,477
aclrpm2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el90:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-143
OSV records
DEBIAN-CVE-2026-54369RHSA-2026:67140RHSA-2026:67142RHSA-2026:67144UBUNTU-CVE-2026-54369AZL-91397ECHO-b5ce-94bd-9b5b

Charts affected

2,524 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,520 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flanksource/incident-manager-ui:v1.4.319953948a194c9
acl@2.3.1-3
no fix listed
1
flashcatcloud/nightingale:8.5.1421acb36181b
acl@2.3.2-2+b1
no fix listed
1
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
acl@2.3.1-3
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
acl@2.3.1-3
no fix listed
1
fluent/fluentd-kubernetes-daemonset:v1.19.3-debian-elasticsearch7-1.1de9cf5f1127a
acl@2.3.2-2+b1
no fix listed
1
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
acl@2.3.2-2+b1
no fix listed
1
flyway/flyway:9.1545b5d7cdc75a
acl@2.2.53-6
no fix listed
1
fnzv/dump1090:latestb3079b95c336
acl@2.3.1-1
no fix listed
1
foldingathome/fah-gpu:latest5ef7742d1eb4
acl@2.2.52-3build1
no fix listed
1
folioci/mod-z3950:latest2493041ce880
acl@2.3.2-2+b1
no fix listed
1
fosrl/pangolin:latest83a55f933b4d
acl@2.3.1-3
no fix listed
1
frankescobar/allure-docker-service:2.27.00815040339a9
acl@2.2.52-3build1
no fix listed
1
frankescobar/allure-docker-service:2.35.14154286c0209
acl@2.3.2-1build1.1
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
acl@2.2.52-3build1
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
acl@2.2.52-3build1
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
acl@2.3.2-1build1.1
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
acl@2.2.52-3
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
acl@2.3.1-3
no fix listed
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
acl@2.3.1-1
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
acl@2.2.53-6
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
acl@2.2.52-1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
acl@2.2.52-1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
acl@2.3.1-3
no fix listed
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
acl@2.3.2-2+b1
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
acl@2.3.2-1build1
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
acl@2.2.52-3build1
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
acl@2.3.1-1
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
acl@2.3.1-3
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
acl@2.2.52-3build1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
acl@2.3.2-2
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
acl@2.2.53-6
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
acl@2.3.2-2
no fix listed
1
gethue/hue:4.11.011b649636e68
acl@2.2.53-6
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
acl@2.2.52-3build1
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
acl@2.3.1-1
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
acl@2.3.1-3
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
acl@2.3.1-3
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
acl@2.3.2-2+b1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
acl@2.2.53-6
no fix listed
1
glasskube/operator:0.12.2be5133100d63
acl@2.3.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.