StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,436
of 17,790 indexed, latest versions
Container images
2,405
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,436 of 17,790 indexed charts deploy, on 2,405 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,402
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,436 by stars
ChartLatestAffected imagesRadar Score
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
acl@2.2.53-6
no fix listed

Open the chart page →

11,831
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
acl@2.2.52-3
no fix listed

Open the chart page →

10,546
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
acl@2.2.52-3
no fix listed

Open the chart page →

14,072
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
acl@2.2.52-3
no fix listed

Open the chart page →

22,448
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
acl@2.2.52-3
no fix listed

Open the chart page →

77,798
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
acl@2.2.53-6
no fix listed

Open the chart page →

29,594
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
acl@2.3.1-3
no fix listed
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
acl@2.3.1-1
no fix listed

Open the chart page →

18,256
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
acl@2.2.53-6
no fix listed

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.02 of 5See more

cloudlaunch-server cloudve 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
acl@2.3.2-2+b1
no fix listed
cloudve/cloudlaunch-server:latest4a3d7fae90bb
acl@2.2.53-6
no fix listed

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
acl@2.2.53-6
no fix listed

Open the chart page →

11,640
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

5,552
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
acl@2.3.1-3
no fix listed

Open the chart page →

10,543
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
acl@2.2.53-6
no fix listed

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
acl@2.2.52-1
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
acl@2.2.52-1
no fix listed

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
acl@2.2.52-3build1
no fix listed

Open the chart page →

14,285
postgresqlcloudve4.0.01 of 2See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnami/minideb:latest835e5f8392c3
acl@2.3.2-2+b1
no fix listed

Open the chart page →

804
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
acl@2.3.1-3
no fix listed

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
acl@2.2.52-3build1
no fix listed

Open the chart page →

13,170
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
acl@2.3.2-2
no fix listed

Open the chart page →

3,733
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,457
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,801
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
acl@2.3.1-3
no fix listed

Open the chart page →

7,521
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
acl@2.3.1-3
no fix listed

Open the chart page →

8,806
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,136
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

6,926
clusterplexclusterplexVerified publisher1.1.102 of 3See more

clusterplex clusterplex 1.1.10

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
acl@2.3.2-2
no fix listed
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
acl@2.3.1-3
no fix listed

Open the chart page →

3,918
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,839
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,839
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

4,616
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
acl@2.3.1-1
no fix listed

Open the chart page →

19,380
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
acl@2.3.1-3
no fix listed

Open the chart page →

9,378
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
acl@2.3.1-3
no fix listed

Open the chart page →

9,378
ms-licenses-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-grpc:latest360144457f4d
acl@2.3.1-3
no fix listed

Open the chart page →

1,148
ms-modules-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
acl@2.3.1-3
no fix listed

Open the chart page →

1,148
codehubcodehubVerified publisher6.2.183 of 5See more

codehub codehub 6.2.18

3 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
acl@2.3.1-3
no fix listed
bitnamilegacy/postgresql:latest42a8200d3597
acl@2.3.1-3
no fix listed
jupyterhub/jupyterhub:5.4.63974ba945e65
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

13,286
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,680
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
acl@2.3.1-3
no fix listed

Open the chart page →

3,236
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,839
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

5,370
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
acl@2.3.2-2
no fix listed

Open the chart page →

3,850
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
acl@2.2.53-6
no fix listed

Open the chart page →

8,009
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
acl@2.2.53-6
no fix listed

Open the chart page →

8,009
filesystem-exportercontainerooVerified publisher1.5.21 of 1See more

filesystem-exporter containeroo 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
acl@2.3.1-3
no fix listed

Open the chart page →

1,251
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.12 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

2 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
acl@2.2.53-6
no fix listed
library/redis:latest298e5b3bc566
acl@2.3.2-2+b1
no fix listed

Open the chart page →

10,151
cortezacorteza1.1.02 of 3See more

corteza corteza 1.1.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
acl@2.3.1-1
no fix listed
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
acl@2.3.1-3
no fix listed

Open the chart page →

8,251
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
acl@2.2.53-6
no fix listed

Open the chart page →

4,682
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,188
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,994
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
acl@2.3.1-3
no fix listed

Open the chart page →

14,587
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
acl@2.3.1-3
no fix listed

Open the chart page →

2,202

Container images carrying it

2,405 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mariadb:10.6.218a16204dc96c
acl@2.2.53-6
no fix listed
1
library/mariadb:10.79a48ac9f196f
acl@2.2.53-6
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
acl@2.3.2-1build1.1
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
acl@2.3.2-1build1.1
no fix listed
1
library/mariadb:10.10.2bfc25a68e113
acl@2.3.1-1
no fix listed
1
library/mariadb:10.6.15e22328f4d714
acl@2.2.53-6
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
acl@2.3.1-1
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
acl@2.3.2-1build1.1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
acl@2.3.1-3
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
acl@2.3.2-2+b1
no fix listed
1
library/memcached:1.6.4226983a43c918
acl@2.3.2-2+b1
no fix listed
1
library/memcached:1.6.409ae868852d0b
acl@2.3.2-2+b1
no fix listed
1
library/memcached:1.6.40cc523a19da58
acl@2.3.2-2+b1
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
acl@2.3.2-2+b1
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
acl@2.3.2-2+b1
no fix listed
1
library/mongo:7.0.140032d2ca20db
acl@2.3.1-1
no fix listed
1
library/mongo:8.002a0cc7939f5
acl@2.3.2-1build1.1
no fix listed
1
library/mongo:4.4.1305678ae4e5e1
acl@2.2.53-6
no fix listed
1
library/mongo:3.6146c1fd999a6
acl@2.2.52-3
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
acl@2.2.53-6
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
acl@2.2.52-3build1
no fix listed
1
library/mongo:7.0-jammy:7-jammy406a4fdca9fc
acl@2.3.1-1
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
acl@2.2.53-6
no fix listed
1
library/mongo:6.0.12646902910d6a
acl@2.3.1-1
no fix listed
1
library/mongo:4.2699d652ed674
acl@2.2.52-3build1
no fix listed
1
library/mongo:4.2.16ca49afbcb2b
acl@2.2.52-3build1
no fix listed
1
library/mongo:noble6ede2806c78e
acl@2.3.2-1build1.1
no fix listed
1
library/mongo:6.0.271a63fc2438e
acl@2.2.53-6
no fix listed
1
library/mongo:5.0.217c81758cb295
acl@2.2.53-6
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
acl@2.3.1-1
no fix listed
1
library/mongo:4.2.21-bionic9cb28f7291d9
acl@2.2.52-3build1
no fix listed
1
library/mongo:7.0.12ae1cf99fa7bf
acl@2.3.1-1
no fix listed
1
library/mongo:4.4.18d23ec07162ca
acl@2.2.53-6
no fix listed
1
library/mongo:8.0.11dca8d11fe467
acl@2.3.2-1build1.1
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
acl@2.3.1-3
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
acl@2.3.2-2+b1
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
acl@2.3.2-2+b1
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
acl@2.3.2-2+b1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
acl@2.3.1-3
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
acl@2.3.2-2+b1
no fix listed
1
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
acl@2.3.2-2+b1
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
acl@2.3.2-2+b1
no fix listed
1
library/nginx:1.27.409369da6b103
acl@2.3.1-3
no fix listed
1
library/nginx:1.291881968aff6f
acl@2.3.2-2+b1
no fix listed
1
library/nginx:1.276784fb0834aa
acl@2.3.1-3
no fix listed
1
library/nginx:1.25.167f9a4f10d14
acl@2.3.1-3
no fix listed
1
library/nginx:1.25.49ff236ed47fe
acl@2.3.1-3
no fix listed
1
library/nginx:1.27.3fb197595ebe7
acl@2.3.1-3
no fix listed
1
library/node:22-bookworm-slim83f487e0a634
acl@2.3.1-3
no fix listed
1
library/node:208f693eaa7e0a
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.