StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,428
of 17,792 indexed, latest versions
Container images
2,391
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,428 of 17,792 indexed charts deploy, on 2,391 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,388
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,428 by stars
ChartLatestAffected imagesRadar Score
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,189
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,893
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,766
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
acl@2.3.1-1
no fix listed

Open the chart page →

2,222
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,108
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,042
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
acl@2.3.1-1
no fix listed

Open the chart page →

2,602
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,859
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
acl@2.3.1-3
no fix listed

Open the chart page →

1,932
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/haproxy:2.8.288baa7d29a27a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

846
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
acl@2.2.53-6
no fix listed

Open the chart page →

5,897
mariadbsitepilot1.0.31 of 1See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
acl@2.3.1-1
no fix listed

Open the chart page →

2,865
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,026
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
acl@2.2.52-3build1
no fix listed

Open the chart page →

4,707
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
acl@2.2.53-6
no fix listed

Open the chart page →

9,246
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,985
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
acl@2.3.1-1
no fix listed

Open the chart page →

4,379
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
acl@2.3.1-1
no fix listed

Open the chart page →

4,379
amt-configuresmarthallVerified publisher0.1.11 of 1See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
boxcutter/meshcmd:1.1.384e13f01bcab
acl@2.3.1-1
no fix listed

Open the chart page →

2,762
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
acl@2.3.1-3
no fix listed

Open the chart page →

5,582
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,838
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

28,506
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

29,256
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
acl@2.2.52-3
no fix listed

Open the chart page →

9,445
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

29,256
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
acl@2.2.52-3
no fix listed

Open the chart page →

27,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

24,811
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
acl@2.2.52-3
no fix listed

Open the chart page →

25,804
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,596
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,849
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,831
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
acl@2.2.52-3
no fix listed

Open the chart page →

2,774
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
acl@2.3.2-2
no fix listed

Open the chart page →

3,071
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
acl@2.3.1-1
no fix listed

Open the chart page →

13,657
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
acl@2.3.1-1
no fix listed

Open the chart page →

13,130
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
acl@2.2.53-6
no fix listed

Open the chart page →

30,779

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cm2network/squad:latest8cba47f53df5
acl@2.3.2-2+b1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
acl@2.3.1-3
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
acl@2.3.1-3
no fix listed
1
codedesignplus/ms-licenses-grpc:latest360144457f4d
acl@2.3.1-3
no fix listed
1
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
acl@2.3.1-3
no fix listed
1
collabora/code:24.04.13.2.101dc4ab83977
acl@2.3.1-3
no fix listed
1
collabora/code:23.05.10.1.105299b452f7f
acl@2.3.1-3
no fix listed
1
conductoross/conductor:3.31.09fba127693e6
acl@2.3.2-2+b1
no fix listed
1
consensys/teku:latest3a4f5761ae1c
acl@2.3.2-1build1.1
no fix listed
1
consensys/teku:25.4.1bf6ecd2ea716
acl@2.3.2-1build1.1
no fix listed
1
consensys/web3signer:latestf146a51a1ba3
acl@2.3.2-2
no fix listed
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
acl@2.3.1-3
no fix listed
1
continuoussecuritytooling/keycloak-reporting-cli:1.3.3f04ecefab64e
acl@2.3.1-3
no fix listed
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
acl@2.3.1-1
no fix listed
1
cortezaproject/corteza:2024.9.08eb7a26605c9
acl@2.2.53-6
no fix listed
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
acl@2.3.1-1
no fix listed
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
acl@2.3.1-3
no fix listed
1
coturn/coturn:4.10.0-r1f4c2af06c3c5
acl@2.3.2-2+b1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
acl@2.2.53-6
no fix listed
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
acl@2.2.52-3build1
no fix listed
1
cribl/cribl:3.0.2762747cb6796
acl@2.2.52-3build1
no fix listed
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
acl@2.2.52-3
no fix listed
1
cspconsole/config-provider:1.0.365524a26a6c23
acl@2.3.1-3
no fix listed
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
acl@2.3.1-3
no fix listed
1
cspconsole/report-collector:1.0.15839750248193b
acl@2.3.1-3
no fix listed
1
cspconsole/report-processor:1.0.279a2d8840bfdf
acl@2.3.1-3
no fix listed
1
cubejs/cubestore:v1.5.334ac523a9bab
acl@2.3.1-3
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
acl@2.3.2-2+b1
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
acl@2.3.1-3
no fix listed
1
cyverse/irods-csi-driver:v0.12.0aa69d105b292
acl@2.3.1-1
no fix listed
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
acl@2.3.2-2+b1
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
acl@2.3.1-3
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
acl@2.2.53-6
no fix listed
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
acl@2.3.1-3
no fix listed
1
dannielkil/book-frontend:latest937993927694
acl@2.3.1-3
no fix listed
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
acl@2.3.2-1build1.1
no fix listed
1
darthsim/imgproxy:v3.26476cb08c816a
acl@2.3.2-1build1
no fix listed
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
acl@2.3.2-1build1.1
no fix listed
1
darthsim/imgproxy:latestf247c72df1d7
acl@2.3.2-1build1.1
no fix listed
1
daskdev/dask-notebook:1.1.0052630f5ca04
acl@2.2.52-3build1
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
acl@2.2.52-3build1
no fix listed
1
datadog/agent:6aad9994de6a7
acl@2.3.2-1build1.1
no fix listed
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
acl@2.3.1-3
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
acl@2.3.1-3
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
acl@2.3.1-1
no fix listed
1
datalust/seq:5.0.832-pre9c731bb207a6
acl@2.2.52-3
no fix listed
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
acl@2.2.53-6
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
acl@2.3.1-1
no fix listed
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
acl@2.3.2-1build1.1
no fix listed
1
dbgate/dbgate:7.2.3f2dc7423ea88
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.