StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,562
of 17,832 indexed, latest versions
Container images
2,562
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,562 of 17,832 indexed charts deploy, on 2,562 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,559
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,562 by stars
ChartLatestAffected imagesRadar Score
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
acl@2.3.1-1
no fix listed

Open the chart page →

4,948
defguard-gatewaydefguard2.1.01 of 1See more

defguard-gateway defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,020
defguard-proxydefguard2.1.01 of 1See more

defguard-proxy defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
acl@2.3.2-2+b1
no fix listed

Open the chart page →

881
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
acl@2.3.1-3
no fix listed

Open the chart page →

3,059
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
acl@2.3.1-3
no fix listed

Open the chart page →

6,249
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

1,435
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
acl@2.3.1-3
no fix listed

Open the chart page →

2,377
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,617
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,999
challengedeneme0.1.02 of 2See more

challenge deneme 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
acl@2.3.2-2+b1
no fix listed
library/redis:6e7b96daa9a18
acl@2.3.1-3
no fix listed

Open the chart page →

2,358
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
acl@2.2.53-6
no fix listed

Open the chart page →

7,346
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
acl@2.2.53-6
no fix listed

Open the chart page →

8,242
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
acl@2.2.53-6
no fix listed

Open the chart page →

74,394
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
acl@2.3.1-1
no fix listed
ghcr.io/codingducksrl/laravel:8.15be52524664c
acl@2.3.1-1
no fix listed

Open the chart page →

114,919
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
acl@2.3.1-1
no fix listed
ghcr.io/codingducksrl/laravel:8.15be52524664c
acl@2.3.1-1
no fix listed

Open the chart page →

114,068
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
acl@2.3.1-1
no fix listed

Open the chart page →

13,907
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
acl@2.3.1-3
no fix listed

Open the chart page →

9,825
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
acl@2.3.1-1
no fix listed

Open the chart page →

13,259
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
acl@2.2.53-6
no fix listed

Open the chart page →

4,743
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
acl@2.3.1-3
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
acl@2.2.52-3
no fix listed
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
acl@2.3.1-3
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
acl@2.3.1-3
no fix listed

Open the chart page →

70,037
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
acl@2.3.1-1
no fix listed

Open the chart page →

5,023
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
acl@2.2.53-6
no fix listed

Open the chart page →

12,045
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
acl@2.3.1-3
no fix listed

Open the chart page →

3,982
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
acl@2.3.1-3
no fix listed

Open the chart page →

9,825
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
acl@2.3.1-1
no fix listed

Open the chart page →

13,259
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
acl@2.2.53-6
no fix listed

Open the chart page →

4,743
devtron-enterprisedevtron-labs48.0.08 of 28See more

devtron-enterprise devtron-labs 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
acl@2.3.1-3
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
acl@2.2.52-3
no fix listed
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
acl@2.3.1-3
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
acl@2.3.1-3
no fix listed

Open the chart page →

70,037
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
acl@2.3.1-1
no fix listed

Open the chart page →

5,023
devtron-operatordevtron-labs0.23.35 of 11See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
acl@2.3.1-3
no fix listed
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
acl@2.3.2-1build1.1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
acl@2.3.1-3
no fix listed

Open the chart page →

33,562
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
acl@2.2.53-6
no fix listed

Open the chart page →

12,045
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
acl@2.3.1-3
no fix listed

Open the chart page →

3,982
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.03 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
acl@2.2.52-3build1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
acl@2.3.2-1build1.1
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
acl@2.2.52-3build1
no fix listed

Open the chart page →

27,987
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
acl@2.3.1-3
no fix listed

Open the chart page →

4,167
difydify1.0.03 of 4See more

dify dify 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
acl@2.3.1-3
no fix listed
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
acl@2.3.2-1build1.1
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
acl@2.3.1-3
no fix listed

Open the chart page →

49,762
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
acl@2.2.53-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
acl@2.2.52-3build1
no fix listed

Open the chart page →

20,372
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,705
alertifydjjudas21Verified publisher0.1.01 of 1See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
djjudas21/alertify:0.1.0ba22be670c37
acl@2.3.1-3
no fix listed

Open the chart page →

2,450
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
acl@2.3.1-3
no fix listed

Open the chart page →

7,433
ownclouddjjudas21Verified publisher0.3.233 of 3See more

owncloud djjudas21 0.3.23

3 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
acl@2.3.1-3
no fix listed
owncloud/server:10.16.3b3f9efdcd7f7
acl@2.3.1-1
no fix listed
valkey/valkey:8.1.481db6d39e1bb
acl@2.3.2-2+b1
no fix listed

Open the chart page →

10,468
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
acl@2.3.2-1build1
no fix listed

Open the chart page →

92,160
spoolmandjjudas21Verified publisher0.1.81 of 1See more

spoolman djjudas21 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.24.042135965c42d
acl@2.3.1-3
no fix listed

Open the chart page →

1,927
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
acl@2.3.2-2+b1
no fix listed

Open the chart page →

5,422
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
acl@2.3.2-2+b1
no fix listed

Open the chart page →

6,188
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
acl@2.3.1-3
no fix listed

Open the chart page →

14,916
netbirddmdhrumilmistryVerified publisher0.1.02 of 6See more

netbird dmdhrumilmistry 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
coturn/coturn:latestbbefd3e1fdfd
acl@2.3.2-2+b1
no fix listed
netbirdio/management:latest3c3bed2a982c
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

3,312
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
acl@2.3.1-3
no fix listed

Open the chart page →

3,906
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
acl@2.3.1-3
no fix listed

Open the chart page →

3,906
dnation-kubernetes-monitoring-stackdnationcloud4.0.31 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.3

1 of the 17 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
acl@2.3.1-3
no fix listed

Open the chart page →

23,625
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
acl@2.2.52-3build1
no fix listed

Open the chart page →

9,044
dnsmasq-k8sdnsmasq-k8s1.4.11 of 1See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,139

Container images carrying it

2,562 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
acl@2.3.2-2+b1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
acl@2.2.53-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
acl@2.3.1-3
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
acl@2.3.1-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.