StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,701
of 17,797 indexed, latest versions
Container images
2,809
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,701 of 17,797 indexed charts deploy, on 2,809 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,355
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1454
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,701 by stars
ChartLatestAffected imagesRadar Score
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,496
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
library/memcached:1.675c93cc91e76
attr@1:2.5.2-3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

25,285
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

2,971
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,056
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,996
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,618
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
emqx/ecp-ui:2.5.1e33e9816f147
attr@1:2.5.1-4
no fix listed
library/telegraf:1.27507a3eecf809
attr@1:2.5.1-4
no fix listed

Open the chart page →

23,844
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

2,750
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

705
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,183
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,971
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,161
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

3,874
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

5,160
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,861
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
attr@1:2.5.2-3
no fix listed

Open the chart page →

7,330
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,416
eoloPlanteolo-plannerVerified publisher0.1.06 of 7See more

eoloPlant eolo-planner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplannereoloplannerVerified publisher0.1.06 of 7See more

eoloplanner eoloplanner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.06 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,382
eoloplannereoloplanner-molynx-gat0.1.05 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:4.4.66efa05203990
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

28,588
eolo-plannereolo-planner-repo0.1.04 of 7See more

eolo-planner eolo-planner-repo 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,237
eoloplanteoloplant1.0.06 of 7See more

eoloplant eoloplant 1.0.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplantseoloplants-urjcVerified publisher0.1.05 of 7See more

eoloplants eoloplants-urjc 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,861
servereoloserverVerified publisher0.1.06 of 7See more

server eoloserver 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

9,460
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
attr@1:2.5.1-4
no fix listed

Open the chart page →

5,385
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

2,534
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

3,111
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,739
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

7,383
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
attr@1:2.5.2-3
no fix listed
library/mariadb:12.2.2b1cb255a9939
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

6,587
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,928
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,542
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina51b9a1a770c
attr@1:2.5.2-3
no fix listed

Open the chart page →

862
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
attr@1:2.5.1-4
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
attr@1:2.5.1-4
no fix listed

Open the chart page →

12,230
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/dora:master2381ea793a12
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,023
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,082
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

688
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,743
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
sifrai/grandine:unstable59ef4c0d4d7f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

621
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,552
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

987
nimbusethereum-helm-chartsVerified publisher1.2.11 of 2See more

nimbus ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
attr@1:2.5.1-4
no fix listed

Open the chart page →

993
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,538
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
attr@1:2.5.1-4
no fix listed

Open the chart page →

4,497

Container images carrying it

2,809 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
attr@1:2.5.1-4
no fix listed
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
attr@1:2.5.1-4
no fix listed
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
attr@1:2.5.1-4
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
attr@1:2.5.2-3
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
attr@1:2.5.1-4
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
attr@1:2.5.2-3
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
attr@1:2.5.1-4
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
attr@1:2.5.1-4
no fix listed
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
attr@1:2.5.1-4
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
attr@1:2.5.1-4
no fix listed
1
ghcr.io/backstage/backstage:latest792e262ea504
attr@1:2.5.2-3
no fix listed
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/bionicstork/bionicstork/relay:latest13290b9a64af
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/blockscout/smart-contract-verifier:main9a43f0cc5797
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
attr@1:2.5.1-4
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
attr@1:2.5.1-4
no fix listed
1
ghcr.io/camptocamp/pgbouncer:latest19dc5663cac4
attr@1:2.5.2-3
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
attr@1:2.5.1-4
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/caninehq/canine:latesta058034ca006
attr@1:2.5.1-4
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
attr@1:2.5.1-4
no fix listed
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
attr@1:2.5.2-3
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
attr@1:2.5.1-4
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
attr@1:2.5.1-4
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
attr@1:2.5.1-4
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
attr@1:2.5.1-4
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.