StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,562
of 17,832 indexed, latest versions
Container images
2,562
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,562 of 17,832 indexed charts deploy, on 2,562 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,559
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,562 by stars
ChartLatestAffected imagesRadar Score
alertigatealertigate0.6.01 of 1See more

alertigate alertigate 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,386
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
acl@2.3.1-3
no fix listed

Open the chart page →

6,443
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
acl@2.3.1-3
no fix listed

Open the chart page →

28,413
slskdalexmorbo-slskdVerified publisher0.3.01 of 1See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

1,785
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,727
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,623
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
acl@2.3.1-3
no fix listed

Open the chart page →

1,922
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
acl@2.2.52-3build1
no fix listed

Open the chart page →

89,991
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

3,751
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
acl@2.3.1-3
no fix listed

Open the chart page →

4,595
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,372
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
acl@2.3.1-1
no fix listed
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
acl@2.3.1-1
no fix listed

Open the chart page →

28,549
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
acl@2.3.1-3
no fix listed

Open the chart page →

7,681
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
acl@2.3.1-3
no fix listed

Open the chart page →

5,968
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,654
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,372
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
acl@2.2.52-3build1
no fix listed

Open the chart page →

11,688
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
acl@2.3.1-3
no fix listed

Open the chart page →

7,504
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
acl@2.3.1-3
no fix listed

Open the chart page →

4,131
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
acl@2.3.1-1
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
acl@2.2.53-6
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
acl@2.2.53-6
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
acl@2.2.53-6
no fix listed

Open the chart page →

116,204
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
acl@2.3.2-2+b1
no fix listed

Open the chart page →

5,708
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
acl@2.3.1-3
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
acl@2.3.1-3
no fix listed

Open the chart page →

26,403
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,508
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

4,675
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,407
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

823
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
acl@2.3.1-1
no fix listed

Open the chart page →

6,347
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed

Open the chart page →

20,267
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed

Open the chart page →

2,736
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed

Open the chart page →

3,038
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed

Open the chart page →

3,394
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
acl@2.3.1-3
no fix listed

Open the chart page →

3,161
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed

Open the chart page →

2,736
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.9.181 of 3See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
acl@2.3.1-3
no fix listed

Open the chart page →

2,534
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
acl@2.3.1-1
no fix listed

Open the chart page →

4,114
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
acl@2.3.1-1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
acl@2.3.1-1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
acl@2.3.1-1
no fix listed

Open the chart page →

16,020
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
acl@2.3.1-1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
acl@2.3.1-1
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
acl@2.3.1-1
no fix listed

Open the chart page →

17,403
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed

Open the chart page →

2,736
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
acl@2.3.1-3
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
acl@2.3.2-2+b1
no fix listed

Open the chart page →

38,672
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
acl@2.3.1-1
no fix listed

Open the chart page →

3,377
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
acl@2.3.1-3
no fix listed

Open the chart page →

5,749
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

8,582
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,749
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

7,763
argonix-apiargonix0.3.91 of 4See more

argonix-api argonix 0.3.9

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0f64dfe735284
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,946
arlas-aiasarlas-stackVerified publisher28.9.09 of 22See more

arlas-aias arlas-stack 28.9.0

9 of the 22 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
acl@2.3.1-3
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
acl@2.3.1-3
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
acl@2.3.1-3
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
acl@2.3.1-3
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
acl@2.3.1-3
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
acl@2.3.1-3
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
acl@2.3.1-3
no fix listed
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
acl@2.3.1-3
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
acl@2.3.1-3
no fix listed

Open the chart page →

40,164
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
acl@2.2.53-6
no fix listed

Open the chart page →

23,520
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
acl@2.2.53-6
no fix listed

Open the chart page →

3,776
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
acl@2.2.52-3build1
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
acl@2.2.53-6
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
acl@2.2.53-6
no fix listed

Open the chart page →

22,915
assemblylineassemblylineVerified publisher7.4.215 of 12See more

assemblyline assemblyline 7.4.21

5 of the 12 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable2125fdf4aa72ab
acl@2.3.1-3
no fix listed
cccs/assemblyline-rust:4.7.4.stable21871423aa4655
acl@2.3.1-3
no fix listed
cccs/assemblyline-socketio:4.7.4.stable21ba390e87f340
acl@2.3.1-3
no fix listed
cccs/assemblyline-ui:4.7.4.stable210623c3fd039e
acl@2.3.1-3
no fix listed
library/redis:latest718f745deb7d
acl@2.3.2-2+b1
no fix listed

Open the chart page →

12,411

Container images carrying it

2,562 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
acl@2.3.2-2+b1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
acl@2.2.53-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
acl@2.3.1-3
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
acl@2.3.1-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.