StackRadar

CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,524
of 17,821 indexed, latest versions
Container images
2,520
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,524 of 17,821 indexed charts deploy, on 2,520 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,477
aclrpm2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el90:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-143
OSV records
DEBIAN-CVE-2026-54369RHSA-2026:67140RHSA-2026:67142RHSA-2026:67144UBUNTU-CVE-2026-54369AZL-91397ECHO-b5ce-94bd-9b5b

Charts affected

2,524 by stars
ChartLatestAffected imagesRadar Score
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
acl@2.3.2-2+b1
no fix listed
ncsa/checks:main0b738bbc8d70
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
acl@2.3.2-2+b1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
acl@2.3.2-2+b1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
acl@2.3.2-2+b1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
acl@2.3.2-2+b1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
acl@2.3.2-2+b1
no fix listed

Open the chart page →

69,984
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,549
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
acl@2.3.1-3
no fix listed

Open the chart page →

20,474
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
acl@2.3.1-3
no fix listed

Open the chart page →

3,002
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
acl@2.3.1-1
no fix listed

Open the chart page →

2,043
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
acl@2.3.1-3
no fix listed

Open the chart page →

4,122
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,100
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
acl@2.2.53-6
no fix listed

Open the chart page →

6,609
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
acl@2.3.1-1
no fix listed

Open the chart page →

2,039
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
acl@2.3.1-3
no fix listed

Open the chart page →

7,054
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

3,249
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
acl@2.3.1-3
no fix listed

Open the chart page →

3,512
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,450
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,362
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
acl@2.2.52-3build1
no fix listed

Open the chart page →

14,628
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
acl@2.3.1-1
no fix listed

Open the chart page →

13,949
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
acl@2.2.53-6
no fix listed

Open the chart page →

13,673
steadybit-agentsteadybit3.1.1693 of 6See more

steadybit-agent steadybit 3.1.169

3 of the 6 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
acl@2.3.2-2+b1
no fix listed
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
acl@2.3.2-2+b1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,837
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,285
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,532
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,956
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
acl@2.2.53-6
no fix listed

Open the chart page →

66,879
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
acl@2.3.1-3
no fix listed

Open the chart page →

5,201
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

12,811
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

12,811
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
acl@2.3.1-3
no fix listed

Open the chart page →

2,585
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,626
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,071
substra-backendsubstraVerified publisher26.15.32 of 7See more

substra-backend substra 26.15.3

2 of the 7 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
acl@2.3.2-2+b1
no fix listed
ghcr.io/substra/substra-backend:1.0.121967f54ec86
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

4,874
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
acl@2.3.1-3
no fix listed

Open the chart page →

3,039
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
acl@2.3.1-3
no fix listed

Open the chart page →

13,639
stresssudermanjr0.2.01 of 1See more

stress sudermanjr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
acl@2.3.2-2
no fix listed

Open the chart page →

761
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
acl@2.3.1-3
no fix listed

Open the chart page →

2,724
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
acl@2.3.1-3
no fix listed

Open the chart page →

2,804
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
acl@2.3.1-3
no fix listed

Open the chart page →

2,836
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
acl@2.3.1-3
no fix listed

Open the chart page →

2,804
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
acl@2.3.1-3
no fix listed

Open the chart page →

34,253
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,457
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
acl@2.3.1-3
no fix listed

Open the chart page →

2,804
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,956
pagessunilb2590-pages1.0.02 of 3See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,285
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
acl@2.3.1-3
no fix listed

Open the chart page →

3,522
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,485
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
acl@2.3.1-1
no fix listed

Open the chart page →

7,830
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,783
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
acl@2.3.1-1
no fix listed

Open the chart page →

12,299
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
acl@2.2.53-6
no fix listed

Open the chart page →

12,748
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
acl@2.2.53-6
no fix listed

Open the chart page →

11,020
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
acl@2.3.1-3
no fix listed

Open the chart page →

5,570
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
acl@2.3.1-1
no fix listed

Open the chart page →

75,790

Container images carrying it

2,520 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-54369.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.