StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,562
of 17,832 indexed, latest versions
Container images
2,562
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,562 of 17,832 indexed charts deploy, on 2,562 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,559
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,562 by stars
ChartLatestAffected imagesRadar Score
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
acl@2.3.1-1
no fix listed

Open the chart page →

2,204
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

4,024
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
acl@2.2.53-6
no fix listed

Open the chart page →

5,217
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,623
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
acl@2.3.2-2+b1
no fix listed

Open the chart page →

7,508
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
acl@2.2.52-3build1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
acl@2.3.2-1build1.1
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
acl@2.2.52-3build1
no fix listed

Open the chart page →

27,728
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0-focal5e15a3f014ed
acl@2.2.53-6
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
acl@2.3.1-1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
acl@2.3.1-1
no fix listed

Open the chart page →

28,060
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
acl@2.3.1-1
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

32,733
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0-focal5e15a3f014ed
acl@2.2.53-6
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
acl@2.3.1-1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
acl@2.3.1-1
no fix listed

Open the chart page →

28,060
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
acl@2.2.52-3build1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
acl@2.3.2-1build1.1
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
acl@2.2.52-3build1
no fix listed

Open the chart page →

27,694
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:4.4.66efa05203990
acl@2.2.52-3build1
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

28,806
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

27,628
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0-focal5e15a3f014ed
acl@2.2.53-6
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
acl@2.3.1-1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
acl@2.3.1-1
no fix listed

Open the chart page →

28,060
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

28,081
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
acl@2.3.1-1
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
acl@2.2.52-3build1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

32,733
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
acl@2.2.53-6
no fix listed

Open the chart page →

70,451
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.117f22313fc130
acl@2.3.1-1
no fix listed

Open the chart page →

2,383
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.117f22313fc130
acl@2.3.1-1
no fix listed

Open the chart page →

2,383
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/mariadb:10.117f22313fc130
acl@2.3.1-1
no fix listed

Open the chart page →

2,383
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
acl@2.3.1-3
no fix listed

Open the chart page →

5,466
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,591
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
acl@2.2.53-6
no fix listed

Open the chart page →

3,154
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
acl@2.3.1-3
no fix listed

Open the chart page →

1,784
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
acl@2.2.53-6
no fix listed

Open the chart page →

7,483
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
acl@2.3.2-2+b1
no fix listed
library/mariadb:12.2.2b1cb255a9939
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

6,723
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,989
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
acl@2.3.1-3
no fix listed

Open the chart page →

2,589
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/buildoor:mainb3dc726f8ba5
acl@2.3.2-2+b1
no fix listed

Open the chart page →

907
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
acl@2.3.1-3
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
acl@2.3.1-3
no fix listed

Open the chart page →

12,551
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/dora:mastere7c0ed360365
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,069
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

1,125
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0576bec3ab78
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

472
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,795
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
sifrai/grandine:unstablea4fa0c3f0ca7
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

472
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestd717e4193699
acl@2.3.1-3
no fix listed

Open the chart page →

2,551
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
acl@2.3.2-2
no fix listed

Open the chart page →

1,037
nimbusethereum-helm-chartsVerified publisher1.2.11 of 2See more

nimbus ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
acl@2.3.1-3
no fix listed

Open the chart page →

1,037
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
acl@2.3.1-3
no fix listed

Open the chart page →

1,584
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
acl@2.3.1-3
no fix listed

Open the chart page →

4,575
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,559
smart-contract-verifier-httpethereum-helm-chartsVerified publisher0.1.41 of 1See more

smart-contract-verifier-http ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ghcr.io/blockscout/smart-contract-verifier:main097e82b3468a
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

443
spamoorethereum-helm-chartsVerified publisher1.0.11 of 1See more

spamoor ethereum-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethpandaops/spamoor:latestc8c6ab0816c4
acl@2.3.2-2+b1
no fix listed

Open the chart page →

917
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
consensys/teku:latest6bfef491dc27
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

669
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
acl@2.3.2-2
no fix listed

Open the chart page →

1,982
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
acl@2.3.1-3
no fix listed

Open the chart page →

3,538
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste3bc0da9ffde
acl@2.3.1-3
no fix listed

Open the chart page →

1,605
bee-overlay-exporterethersphereVerified publisher0.1.01 of 1See more

bee-overlay-exporter ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/python:3.12-slim2f17fc044b57
acl@2.3.2-2+b1
no fix listed

Open the chart page →

647
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
acl@2.3.2-2+b1
no fix listed
library/node:lts64af3819f927
acl@2.3.1-3
no fix listed

Open the chart page →

7,057
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
acl@2.3.2-2+b1
no fix listed
library/node:lts64af3819f927
acl@2.3.1-3
no fix listed

Open the chart page →

7,057
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-54370.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
acl@2.3.1-1
no fix listed

Open the chart page →

87,403

Container images carrying it

2,562 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
acl@2.3.2-2+b1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
acl@2.2.53-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
acl@2.3.1-3
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
acl@2.3.1-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.