StackRadar

CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,524
of 17,821 indexed, latest versions
Container images
2,520
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,524 of 17,821 indexed charts deploy, on 2,520 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,477
aclrpm2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el90:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-143
OSV records
DEBIAN-CVE-2026-54369RHSA-2026:67140RHSA-2026:67142RHSA-2026:67144UBUNTU-CVE-2026-54369AZL-91397ECHO-b5ce-94bd-9b5b

Charts affected

2,524 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,520 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
acl@2.3.2-1build1.1
no fix listed
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
acl@2.3.2-1build1.1
no fix listed
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
acl@2.3.1-3
no fix listed
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
acl@2.3.1-3
no fix listed
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
acl@2.3.1-1
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
acl@2.2.52-3build1
no fix listed
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
acl@2.3.1-1
no fix listed
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
acl@2.3.1-1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
acl@2.3.2-2+b1
no fix listed
1
quay.io/go-skynet/local-ai:latest0632c21ddbe4
acl@2.3.2-1build1.1
no fix listed
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
acl@2.3.2-2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
acl@2.3.1-3
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
acl@2.3.1-3
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
acl@2.3.1-3
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
acl@2.3.1-3
no fix listed
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/maxiv/pieeat:0.9.3099715479210
acl@2.3.2-2+b1
no fix listed
1
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
acl@2.3.1-3
no fix listed
1
quay.io/mittwald/kube-mail:latest04f1099241fc
acl@2.3.1-3
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
acl@2.2.52-3
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
acl@2.3.2-2+b1
no fix listed
1
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
acl@2.3.2-1build1.1
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
acl@2.2.52-3
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
acl@2.3.2-2+b1
no fix listed
1
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
acl@2.3.2-2+b1
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
acl@2.3.2-2
no fix listed
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
acl@2.3.1-3.el9
0:2.4.0-0.el9_2.1
1
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
acl@2.3.1-4.el9
0:2.4.0-0.el9_4.1
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
acl@2.3.1-3
no fix listed
1
quay.io/strimzi/operator:0.45.158c727cd2e68
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
acl@2.3.1-3
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
acl@2.3.2-1build1.1
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
acl@2.3.2-2
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
acl@2.3.2-2+b1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
acl@2.3.2-2+b1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.01c38ad710b0c
acl@2.3.2-2+b1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.