StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,685
of 17,792 indexed, latest versions
Container images
2,785
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,685 of 17,792 indexed charts deploy, on 2,785 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,331
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1454
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,685 by stars
ChartLatestAffected imagesRadar Score
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

7,920
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

6,853
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,293
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

11,987
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
attr@1:2.5.1-4
no fix listed

Open the chart page →

5,375
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

4,885
milvusmilvus-helm5.0.283 of 4See more

milvus milvus-helm 5.0.28

3 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
milvusdb/etcd:3.5.25-r1fededb2f2d63
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

10,782
prefect-serverprefectVerified publisher2026.9.141419102 of 2See more

prefect-server prefect 2026.9.14141910

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
attr@1:2.5.1-4
no fix listed
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
attr@1:2.5.2-3
no fix listed

Open the chart page →

5,556
rocketmqrocketmq12.6.02 of 2See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

6,400
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

18,589
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

6,675
codefreshcodefresh-onpremOfficialVerified publisher2.12.144 of 42See more

codefresh codefresh-onprem 2.12.14

4 of the 42 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
attr@1:2.5.1-4
no fix listed
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
attr@1:2.5.1-4
no fix listed
bitnamilegacy/rabbitmq:4.1.39e635efba431
attr@1:2.5.1-4
no fix listed
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
attr@1:2.5.1-4
no fix listed

Open the chart page →

15,093
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.38.4447f857a0146
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

1,524
gitlab-operatorgitlabVerified publisher3.3.21 of 1See more

gitlab-operator gitlab 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:3.3.242dd426130a9
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

152
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
attr@1:2.5.2-3
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
attr@1:2.5.2-3
no fix listed

Open the chart page →

4,852
redisgroundhog2k2.4.71 of 1See more

redis groundhog2k 2.4.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
attr@1:2.5.2-3
no fix listed

Open the chart page →

978
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,752
memcachedkubelauncherVerified publisher0.1.321 of 1See more

memcached kubelauncher 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinnedb599ca6b3ff3
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

640
mysqlkubelauncherVerified publisher0.4.41 of 1See more

mysql kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnede9609bd50416
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

982
postgresqlkubelauncherVerified publisher0.4.31 of 1See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned1a27e11e5925
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,159
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2api:3.86f56d239d280
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2auth:3.833ecfda16608
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2notifier:3.8f190a6212195
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2rulesengine:3.8259503496ff9
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2scheduler:3.8b1de2055c362
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2sensorcontainer:3.8b1a338f64773
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2stream:3.81c8904a3bf67
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2timersengine:3.81bf35bfaf00c
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2web:3.809989a26c8b7
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
stackstorm/st2workflowengine:3.819fdfffdbba8
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

96,933
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
library/kong:3.8.0712e407b20ea
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
supabase/edge-runtime:v1.59.0eff9c554d649
attr@1:2.5.1-4
no fix listed
supabase/postgres-meta:v0.84.2d0a96973e9f1
attr@1:2.5.1-4
no fix listed
supabase/realtime:v2.33.8d207e6e23ad3
attr@1:2.5.1-4
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
attr@1:2.5.1-4
no fix listed

Open the chart page →

23,365
wekanwekanVerified publisher11.83.02 of 3See more

wekan wekan 11.83.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/wekan/ferretdb:latest6cb94aa01999
attr@1:2.5.2-3
no fix listed
ghcr.io/wekan/wekan:v11.83137951e3fb40
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,619
polarisapache-polarisOfficialVerified publisher1.3.0-incubating1 of 1See more

polaris apache-polaris 1.3.0-incubating

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/polaris:lateste66366e783f1
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

473
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
attr@1:2.5.1-4
no fix listed
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
attr@1:2.5.1-4
no fix listed

Open the chart page →

8,586
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,778
budibasebudibase0.0.0-master4 of 7See more

budibase budibase 0.0.0-master

4 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
attr@1:2.5.1-4
no fix listed
budibase/proxy:3.41.38d780b6ee602
attr@1:2.5.2-3
no fix listed
library/redis:latest298e5b3bc566
attr@1:2.5.2-3
no fix listed
minio/minio:latest14cea493d9a3
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

10,856
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.23 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

3 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
acl@2.3.1-2.azl3
attr@2.5.2-1.azl3
2.4.0-1
2.6.0-1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
acl@2.3.1-2.azl3
attr@2.5.2-1.azl3
2.4.0-1
2.6.0-1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
acl@2.3.1-2.azl3
attr@2.5.2-1.azl3
2.4.0-1
2.6.0-1

Open the chart page →

2,263
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

3,496
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
cubejs/cubestore:v1.5.334ac523a9bab
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,048
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

7,923
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,496
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

818
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,404
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,296
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,261
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,107
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,386
openldapkubelauncherVerified publisher0.2.01 of 1See more

openldap kubelauncher 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/openldapdigest-pinned8978aa002bc0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,284
rabbitmqkubelauncherVerified publisher0.2.111 of 1See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinnedff5a36a457f1
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,124
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

814
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

1,033
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

3,124
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

4,412
quickwitquickwit0.8.171See more

quickwit quickwit 0.8.17

1 container image this version deploys carries CVE-2026-54371.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
attr@1:2.5.1-4
no fix listed

Open the chart page →

—
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

11,449
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,962
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

4,284
connaisseurconnaisseurVerified publisher2.12.01 of 2See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redisdigest-pinned83edc2b8e9ff
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,041
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

4,641

Container images carrying it

2,785 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dakera-ai/dakera-mcp:0.10.11a3d48418b14a
attr@1:2.5.1-4
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
attr@1:2.5.2-3
no fix listed
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
attr@1:2.5.2-3
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
attr@1:2.5.2-3
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
attr@1:2.5.2-3
no fix listed
1
ghcr.io/dask/dask:2024.1.0080150de7d86
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
attr@1:2.5.2-3
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/defguard/defguard:2.1.0df2e31d3b4f5
attr@1:2.5.2-3
no fix listed
1
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
attr@1:2.5.2-3
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
attr@1:2.5.2-3
no fix listed
1
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
attr@1:2.5.1-4
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
attr@1:2.5.2-3
no fix listed
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
attr@1:2.5.1-4
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
attr@1:2.5.2-3
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
attr@1:2.5.1-4
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
attr@1:2.5.1-4
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
attr@1:2.5.1-4
no fix listed
1
ghcr.io/ding113/claude-code-hub:latest87f9e8a92bd7
attr@1:2.5.2-3
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
attr@1:2.5.2-3
no fix listed
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
attr@1:2.5.1-4
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
attr@1:2.5.1-4
no fix listed
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.