StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,450
of 17,797 indexed, latest versions
Container images
2,422
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,450 of 17,797 indexed charts deploy, on 2,422 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,419
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,450 by stars
ChartLatestAffected imagesRadar Score
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
acl@2.3.2-2+b1
no fix listed

Open the chart page →

5,858
nadekobotryuunosukeds30.1.22 of 2See more

nadekobot ryuunosukeds3 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
acl@2.3.2-2
no fix listed
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
acl@2.3.1-1
no fix listed

Open the chart page →

8,789
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
acl@2.3.1-3
no fix listed

Open the chart page →

2,656
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
acl@2.3.2-2+b1
no fix listed

Open the chart page →

9,738
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
acl@2.3.1-1
no fix listed

Open the chart page →

7,460
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
acl@2.3.1-3
no fix listed

Open the chart page →

3,914
hivechart-1sabryp3-charts0.2.01 of 2See more

hivechart-1 sabryp3-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
valkey/valkey:latestc123e3715db6
acl@2.3.2-2+b1
no fix listed

Open the chart page →

836
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,612
safe-stacksafe-global0.1.03 of 9See more

safe-stack safe-global 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
acl@2.3.1-3
no fix listed
safeglobal/safe-config-service:latest09a5e495c219
acl@2.3.2-2+b1
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

19,714
safe-transaction-servicesafe-global0.1.02 of 6See more

safe-transaction-service safe-global 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
acl@2.3.1-3
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

16,736
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
acl@2.3.1-3
no fix listed

Open the chart page →

4,218
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
acl@2.3.1-1
no fix listed

Open the chart page →

16,260
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
acl@2.3.1-1
no fix listed

Open the chart page →

8,146
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,262
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:noble6ede2806c78e
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,366
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
acl@2.3.1-3
no fix listed
santisbon/evworker:lateste807283f8d69
acl@2.3.1-3
no fix listed

Open the chart page →

14,313
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
acl@2.3.1-3
no fix listed
santisbon/speedtest:latest8ee3a1697227
acl@2.3.1-3
no fix listed

Open the chart page →

12,769
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,262
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
acl@2.3.1-3
no fix listed

Open the chart page →

10,236
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
acl@2.3.1-3
no fix listed

Open the chart page →

4,144
mlflowsb-helm-charts0.3.01 of 1See more

mlflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/python:3.11-slim9534e5a8e315
acl@2.3.2-2+b1
no fix listed

Open the chart page →

916
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
acl@2.3.1-1
no fix listed

Open the chart page →

4,104
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
acl@2.3.2-2+b1
no fix listed

Open the chart page →

9,863
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
acl@2.3.1-3
no fix listed

Open the chart page →

5,410
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,415
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,263
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
acl@2.3.1-3
no fix listed

Open the chart page →

4,715
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
acl@2.3.1-3
no fix listed

Open the chart page →

3,345
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
acl@2.3.1-3
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
acl@2.3.1-3
no fix listed

Open the chart page →

13,610
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,702
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,995
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
acl@2.3.1-1
no fix listed

Open the chart page →

3,276
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,893
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,384
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
acl@2.3.1-1
no fix listed

Open the chart page →

3,574
vaultwardenschichtelVerified publisher0.9.21 of 1See more

vaultwarden schichtel 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,766
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
acl@2.3.2-2+b1
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
acl@2.3.2-2+b1
no fix listed

Open the chart page →

8,316
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
acl@2.3.1-3
no fix listed

Open the chart page →

3,234
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

6,224
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
typesense/typesense:0.25.1035ccfbc3fd8
acl@2.3.1-1
no fix listed

Open the chart page →

4,119
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,035
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
acl@2.3.2-2
no fix listed

Open the chart page →

10,464
satisfactory-serverschoolguys-helmcharts0.1.81 of 1See more

satisfactory-server schoolguys-helmcharts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
acl@2.3.1-1
no fix listed

Open the chart page →

3,476
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
acl@2.3.1-3
no fix listed

Open the chart page →

4,931
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
acl@2.3.1-3
no fix listed

Open the chart page →

3,136
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
acl@2.3.1-3
no fix listed

Open the chart page →

2,298
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
acl@2.3.1-3
no fix listed

Open the chart page →

1,872
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
acl@2.3.1-3
no fix listed

Open the chart page →

4,728
search-proxysearch-proxy2026.38.01 of 1See more

search-proxy search-proxy 2026.38.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,294
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,109

Container images carrying it

2,422 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/examples-helloworld-v1:latest328b237e4fb1
acl@2.3.1-3
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
acl@2.3.1-3
no fix listed
1
istio/install-cni:1.10.32232f365aed6
acl@2.2.52-3build1
no fix listed
1
istio/install-cni:1.23.6ab34c4740f44
acl@2.3.2-1build1.1
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
acl@2.3.2-1build1.1
no fix listed
1
istio/node-agent-k8s:1.2.9268ab879ea51
acl@2.2.52-3
no fix listed
1
istio/operator:1.10.3655eefa11c84
acl@2.2.52-3build1
no fix listed
1
istio/operator:1.12.06cfce8a071b9
acl@2.2.53-6
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
acl@2.3.1-1
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
acl@2.2.52-3build1
no fix listed
1
istio/pilot:1.29.0325156535773
acl@2.3.2-1build1.1
no fix listed
1
istio/pilot:1.23.69c3d6a218181
acl@2.3.2-1build1.1
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
acl@2.3.1-1
no fix listed
1
istio/pilot:1.2.9c09319753454
acl@2.2.52-3
no fix listed
1
istio/pilot:1.17.1ce9d87606701
acl@2.3.1-1
no fix listed
1
istio/pilot:1.15.2db08d6963975
acl@2.3.1-1
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
acl@2.2.52-3build1
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
acl@2.3.2-1build1.1
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
acl@2.2.52-3
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
acl@2.2.52-3build1
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
acl@2.2.52-3build1
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
acl@2.2.53-6
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
acl@2.3.2-1build1.1
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
acl@2.3.2-2
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
acl@2.3.2-1build1.1
no fix listed
1
itzg/minecraft-server:2026.9.1e8640538dac5
acl@2.3.2-1build1.1
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
acl@2.3.2-2+b1
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
acl@2.2.52-3build1
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
acl@2.2.52-3build1
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
acl@2.2.52-3
no fix listed
1
jaedb/iris:latest048cfbf58d57
acl@2.3.1-3
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
acl@2.2.53-6
no fix listed
1
janzo83/serviceexample:latestfb3c4ac36f3e
acl@2.3.1-3
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
acl@2.3.1-3
no fix listed
1
jedi132000/nextapp:latestdc2a81e92f23
acl@2.2.53-6
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
acl@2.3.2-2+b1
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
acl@2.3.2-2+b1
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
acl@2.3.1-3
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
acl@2.3.2-2+b1
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
acl@2.3.1-3
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
acl@2.3.1-3
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
acl@2.3.1-3
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
acl@2.3.1-3
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
acl@2.3.1-3
no fix listed
1
jertel/elastalert2:2.31.03cbf63f9b7dc
acl@2.3.2-2+b1
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
acl@2.2.53-6
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
acl@2.3.1-3
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
acl@2.2.53-6
no fix listed
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
acl@2.3.1-3
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
acl@2.2.52-3
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.