StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,428
of 17,792 indexed, latest versions
Container images
2,391
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,428 of 17,792 indexed charts deploy, on 2,391 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,388
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,428 by stars
ChartLatestAffected imagesRadar Score
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,893
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,766
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
acl@2.3.1-1
no fix listed

Open the chart page →

2,222
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,108
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,042
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
acl@2.3.1-1
no fix listed

Open the chart page →

2,602
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,859
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
acl@2.3.1-3
no fix listed

Open the chart page →

1,932
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/haproxy:2.8.288baa7d29a27a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

846
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
acl@2.2.53-6
no fix listed

Open the chart page →

5,897
mariadbsitepilot1.0.31 of 1See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
acl@2.3.1-1
no fix listed

Open the chart page →

2,865
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,026
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
acl@2.2.52-3build1
no fix listed

Open the chart page →

4,707
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
acl@2.2.53-6
no fix listed

Open the chart page →

9,246
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,985
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
acl@2.3.1-1
no fix listed

Open the chart page →

4,379
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
acl@2.3.1-1
no fix listed

Open the chart page →

4,379
amt-configuresmarthallVerified publisher0.1.11 of 1See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
boxcutter/meshcmd:1.1.384e13f01bcab
acl@2.3.1-1
no fix listed

Open the chart page →

2,762
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
acl@2.3.1-3
no fix listed

Open the chart page →

5,582
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,838
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

28,506
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

29,256
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
acl@2.2.52-3
no fix listed

Open the chart page →

9,445
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

29,256
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,596
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,831
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
acl@2.2.52-3
no fix listed

Open the chart page →

2,774
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
acl@2.3.2-2
no fix listed

Open the chart page →

3,071
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
acl@2.3.1-1
no fix listed

Open the chart page →

13,657
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
acl@2.3.1-1
no fix listed

Open the chart page →

13,130
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
acl@2.2.53-6
no fix listed

Open the chart page →

30,779

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
budibase/database:2.1.0d90f656261c9
acl@2.3.1-3
no fix listed
1
budibase/proxy:3.41.38d780b6ee602
acl@2.3.2-2+b1
no fix listed
1
bugsink/bugsink:2ecdd84587746
acl@2.3.2-2+b1
no fix listed
1
burakince/mlflow:3.16.0ab4b566644b9
acl@2.3.2-2+b1
no fix listed
1
calltelemetry/web:0.8.1-rc7205d13269e350
acl@2.3.1-3
no fix listed
1
camptocamp/mapserver:latestbf2e8e118c9b
acl@2.3.2-1build1.1
no fix listed
1
camunda/zeebe:8.4.5ab5abc09e407
acl@2.3.1-1
no fix listed
1
carbone/carbone-ee:full-5.11.0518172cbad49
acl@2.3.2-2+b1
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
acl@2.3.1-3
no fix listed
1
castai/hibernate:v0.14da62858c8381
acl@2.3.2-2+b1
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
acl@2.3.2-1build1.1
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
acl@2.3.1-3
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
acl@2.3.2-2+b1
no fix listed
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
acl@2.3.2-1build1.1
no fix listed
1
chaerr/kridge:demo-operator-v0.1.266833deec017
acl@2.2.53-6
no fix listed
1
chainsafe/lodestar:latest5593f6e97912
acl@2.3.1-3
no fix listed
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
acl@2.3.1-3
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
acl@2.3.1-1
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
acl@2.2.52-1
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
acl@2.2.53-6
no fix listed
1
cheveo/azp-agent:1.0.282240f890884
acl@2.3.1-1
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
acl@2.2.52-3
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
acl@2.3.2-2+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
acl@2.3.2-2+b1
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
acl@2.3.1-1
no fix listed
1
chromadb/chroma:1.5.7fc8dc8e11fb2
acl@2.3.2-2+b1
no fix listed
1
circleci/runner:launch-agent9bdc62f02162
acl@2.2.53-6
no fix listed
1
ciscolabs/msm-nc:0710202336d02faad958
acl@2.3.1-1
no fix listed
1
citizenstig/httpbin:latestb81c818ccb86
acl@2.2.52-3
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
acl@2.3.1-3
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
acl@2.3.1-1
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
acl@2.3.1-3
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
acl@2.2.53-6
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
acl@2.2.53-6
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
acl@2.2.53-6
no fix listed
1
clickhouse/clickhouse-server:26.3810861a2e2d0
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:26.8.3d73903d1b61d
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
acl@2.3.1-1
no fix listed
1
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
acl@2.3.1-1
no fix listed
1
cloudtooling/moodle:5.2.3f4f04e0fc401
acl@2.3.1-3
no fix listed
1
cloudve/janis-terminal:latestaf56e77ca587
acl@2.2.52-3build1
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
acl@2.2.52-3build1
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
acl@2.3.1-3
no fix listed
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
acl@2.3.1-3
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.