StackRadar

CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,494
of 17,813 indexed, latest versions
Container images
2,471
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,494 of 17,813 indexed charts deploy, on 2,471 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,429
aclrpm2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el90:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-142
OSV records
DEBIAN-CVE-2026-54369RHSA-2026:67140RHSA-2026:67142RHSA-2026:67144UBUNTU-CVE-2026-54369AZL-91397ECHO-b5ce-94bd-9b5b

Charts affected

2,494 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,471 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-mcp81db69cdd0b6
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-flagd-ui97a3d37e709f
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
acl@2.3.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
acl@2.3.2-1build1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
acl@2.3.1-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-accountingbfd9d13ac58a
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-agentd0f4ae0b32a8
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-addfd7a4697116
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-frontend-proxyfd4da88bfeaa
acl@2.3.1-1
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
acl@2.3.1-1
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
acl@2.3.1-3
no fix listed
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-webui/terminals:latest5d2fd44366a4
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
acl@2.2.53-6
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
acl@2.3.1-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
acl@2.3.1-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
acl@2.3.1-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
acl@2.3.1-1
no fix listed
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/paradigmxyz/reth:latest68e76b32ad9a
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
acl@2.3.1-3
no fix listed
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
acl@2.2.52-3build1
no fix listed
1
ghcr.io/platformrelay/kollect:v0.20.0c95fa31ead03
acl@2.3.1-3
no fix listed
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
acl@2.3.1-1
no fix listed
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
acl@2.3.2-2+b1
no fix listed
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
acl@2.3.2-2
no fix listed
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
acl@2.3.2-1build1.1
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
acl@2.3.2-1build1.1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.