CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,708; of 17,803 indexed, latest versions
Container images: 2,820; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,708 of 17,803 indexed charts deploy, on 2,820 images.

Affected package	Affected versions	Fixed in	Images
attrdeb	1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more	1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more	2,367
attrrpm	2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el10	0:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1	453
aclrpm	2.3.1-2.azl3	2.4.0-1	3

OSV records: DEBIAN-CVE-2026-54371 UBUNTU-CVE-2026-54371 RHSA-2026:56133 RHSA-2026:59380 RHSA-2026:60226 RLSA-2026:56133 RLSA-2026:59380 RLSA-2026:60226 AZL-91400 AZL-91424 ECHO-e81f-866f-9cb6
Also known as: USN-8691-1

Charts affected

2,708 by stars

Chart

Latest

Affected images

Radar Score

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

63,720

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
omecproject/onos-progran :1.0.0	5715e5648aa0	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

251,005

comac-cuopencord

0.1.1

1 of 4 See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

8,187

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

79,687

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

15,745

mcord-cdn-remoteopencord

0.1.6

2 of 2 See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
woojoong/wowza :latest	ec230db19652	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

43,042

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

29,517

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

15,929

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

14,819

omec-control-planeopencord

0.1.31

5 of 8 See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
omecproject/c3po-hssdb :master-latest	28a90cc26716	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
omecproject/ngic-cp :central-cp-multi-upfs-latest	24a389a0a4fe	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
omecproject/openmme :master-latest	64776cb9edb3	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

104,037

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

12,942

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

94,372

ovspluginopencord

1.0.2

1 of 1 See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

4,183

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

65,092

sebaopencord

1.0.0

6 of 17 See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
voltha/voltha-cli :1.6.0	c4e41e92f046	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
voltha/voltha-envoy :1.6.0	59ab2a00f712	attr@1:2.4.47-1ubuntu1	1:2.4.47-1ubuntu1+esm1
voltha/voltha-netconf :1.6.0	37f80524c207	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
voltha/voltha-voltha :1.6.0	ff596b62de59	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

356,120

voltha-infraopencord

2.14.0

4 of 10 See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
library/ubuntu :16.04	1f1a2d56de1d	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
voltha/voltha-onos :5.1.8	e038acb950d3	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

41,148

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	attr@1:2.5.1-4	no fix listed

Open the chart page →

11,088

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

1,748

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

5,220

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	attr@1:2.5.1-4	no fix listed

Open the chart page →

1,412

sentinelopennms-helm-charts

0.4.0

1 of 2 See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
opennms/sentinel :36.0.2	88869082a14f	attr@2.5.2-5.el10	0:2.6.0-1.el10_2

Open the chart page →

2,087

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

7,613

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

3,477

llm-stackopenproject-helm-charts

1.1.0

2 of 2 See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
library/python :3.12-slim	78387bc3881b	attr@1:2.5.2-3	no fix listed

Open the chart page →

2,032

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

12,178

alquimia-studioopenshift

0.2.0

1 of 1 See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
alquimiaai/studio :certification	38a1f0341982	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,408

bpjstk-serviceopenshift

1.0.0

3 of 6 See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
andrianrf/backoffice :latest	047a7837651e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
andrianrf/backoffice-be :latest	6036614803d4	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
andrianrf/iso-server :latest	7da47f525c7d	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

35,089

canvas-oamportalopenshift

4.0.0

1 of 1 See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/oam :4.0.0	ed8fd2062548	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

7,518

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

19,181

cp-cmfopenshift

2.4.1

1 of 1 See more

cp-cmf openshift 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
confluentinc/cp-cmf :2.4.1	f466f8649aa8	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

180

dify-enterpriseopenshift

3.9.8

10 of 13 See more

dify-enterprise openshift 3.9.8

10 of the 13 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
langgenius/dify-ee-audit :3.9.8-ubi9	e99aed151fc5	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-collector :3.9.8-ubi9	a9b91fd62c94	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise :3.9.8-ubi9	c392a36a4ef7	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise-frontend :3.9.8-ubi9	8dd9de6b6190	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-gateway :3.9.8-ubi9	9e314c29a61f	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-connector :3.9.8-ubi9	1848d8f1f144	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-crd :3.9.8-ubi9	6f4e0e5f6e5a	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-daemon-serverless :3.9.8-ubi9	d2b8df196d08	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-manager :3.9.8-ubi9	207b343013a0	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-web :3.9.8-ubi9	ba1dd1d0bcea	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

5,123

exporteropenshift

1.0.47

3 of 3 See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

13,076

fineractopenshift

0.1.1

2 of 4 See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

7,889

flomesh-consoleopenshift

0.70.0-30-ubi8

2 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

9,990

fsmopenshift

0.1.8-ubi.6

6 of 6 See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

16,567

harikubeopenshift

0.16.3

3 of 3 See more

harikube openshift 0.16.3

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/harikube/harikube :release-v0.16.3	b58b6d40c3bb	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,653

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

4,234

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

5,863

orion-ldopenshift

1.0.3

2 of 2 See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

14,729

osm-edgeopenshift

1.2.1-ubi8

7 of 7 See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

19,476

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

8,687

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,612

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

11,754

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,574

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,557

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,461

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,105

openshift-integration-operatoropenshift-integration-operator

0.8.2

2 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,080

sohaopensoha

0.1.9

1 of 2 See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,818

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

77,005

Container images carrying it

2,820 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
youssef11gaber10/flask-service :latest	9c727fcfde76	attr@1:2.5.2-3	no fix listed	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
zabbix/zabbix-server-pgsql :ubuntu-7.0.23	7e8c8e059533	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-7.0.23	7d4d58086515	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
zenmldocker/zenml-server :0.96.4	09027a6312ee	attr@1:2.5.1-4	no fix listed	1
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	attr@1:2.5.1-4	no fix listed	1
zer0tonin/mikochi :1.11.0	09872bae1554	attr@1:2.5.2-4	1:2.5.2-4ubuntu0.1	1
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
gcr.io/abacus-labs-dev/hyperlane-agent :10c0ab1-20231215-220639	f33e88324a40	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
gcr.io/datadoghq/cluster-agent :7.61.0	6efe04ba4e06	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
gcr.io/datadoghq/observability-pipelines-worker :2.21.1	de6ff0f1a854	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
gcr.io/datadoghq/private-action-runner :v1.21.0	5f5918f843a4	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	attr@1:2.5.1-4	no fix listed	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	attr@1:2.4.47-2	1:2.4.47-2ubuntu0.16.04.1~esm1	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	attr@1:2.5.1-4	no fix listed	1
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	attr@1:2.5.1-4	no fix listed	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.14.0	51404ef4419c	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1	1
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
ghcr.io/adnoctem/lhci :1.0.1	19553e4b4033	attr@1:2.5.1-4	no fix listed	1
ghcr.io/aeharding/voyager :latest	779759172676	attr@1:2.5.2-3	no fix listed	1
ghcr.io/aetrius/msockperf-client/msockperf-client :main	820af919c5e2	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
ghcr.io/aetrius/msockperf-server/msockperf-server :main	46ae4ea003e0	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1