CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,749; of 17,813 indexed, latest versions
Container images: 2,877; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,749 of 17,813 indexed charts deploy, on 2,877 images.

Affected package	Affected versions	Fixed in	Images
attrdeb	1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more	1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more	2,427
attrrpm	2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el10	0:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1	450
aclrpm	2.3.1-2.azl3	2.4.0-1	3

OSV records: DEBIAN-CVE-2026-54371 UBUNTU-CVE-2026-54371 RHSA-2026:56133 RHSA-2026:59380 RHSA-2026:60226 RLSA-2026:56133 RLSA-2026:59380 RLSA-2026:60226 AZL-91400 AZL-91424 ECHO-e81f-866f-9cb6
Also known as: USN-8691-1

Charts affected

2,749 by stars

Chart

Latest

Affected images

Radar Score

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

19,609

cp-cmfopenshift

2.4.1

1 of 1 See more

cp-cmf openshift 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
confluentinc/cp-cmf :2.4.1	f466f8649aa8	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

217

dify-enterpriseopenshift

3.9.8

10 of 13 See more

dify-enterprise openshift 3.9.8

10 of the 13 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
langgenius/dify-ee-audit :3.9.8-ubi9	e99aed151fc5	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-collector :3.9.8-ubi9	a9b91fd62c94	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise :3.9.8-ubi9	c392a36a4ef7	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise-frontend :3.9.8-ubi9	8dd9de6b6190	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-gateway :3.9.8-ubi9	9e314c29a61f	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-connector :3.9.8-ubi9	1848d8f1f144	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-crd :3.9.8-ubi9	6f4e0e5f6e5a	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-daemon-serverless :3.9.8-ubi9	d2b8df196d08	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-manager :3.9.8-ubi9	207b343013a0	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-web :3.9.8-ubi9	ba1dd1d0bcea	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

5,127

exporteropenshift

1.0.47

3 of 3 See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

13,076

fineractopenshift

0.1.1

2 of 4 See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

7,978

flomesh-consoleopenshift

0.70.0-30-ubi8

2 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

9,995

fsmopenshift

0.1.8-ubi.6

6 of 6 See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

16,569

harikubeopenshift

0.16.3

3 of 3 See more

harikube openshift 0.16.3

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/harikube/harikube :release-v0.16.3	b58b6d40c3bb	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,653

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

4,234

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

5,863

orion-ldopenshift

1.0.3

2 of 2 See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

14,730

osm-edgeopenshift

1.2.1-ubi8

7 of 7 See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

19,481

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

8,688

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,616

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

11,758

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,578

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,561

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,465

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,110

openshift-integration-operatoropenshift-integration-operator

0.8.2

2 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,083

sohaopensoha

0.1.9

1 of 2 See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,831

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

81,512

terminalsopen-webui

0.7.0

2 of 2 See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	attr@1:2.5.2-3	no fix listed
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	attr@1:2.5.2-3	no fix listed

Open the chart page →

2,110

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

102,196

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

5,661

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	attr@1:2.4.47-1ubuntu1	1:2.4.47-1ubuntu1+esm1

Open the chart page →

26,388

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	attr@1:2.5.1-4	no fix listed

Open the chart page →

4,748

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	attr@1:2.5.1-4	no fix listed

Open the chart page →

11,074

osdfir-infrastructureosdfir-infrastructure

2.15.0

25 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	attr@1:2.5.1-4	no fix listed
chromadb/chroma :1.5.7	fc8dc8e11fb2	attr@1:2.5.2-3	no fix listed
library/mariadb :11.3.2	e101f9db3191	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
yetiplatform/yeti :2.9.0	9bcbe2650a14	attr@1:2.5.2-3	no fix listed
yetiplatform/yeti-frontend :2.9.0	873ef15d267b	attr@1:2.5.2-3	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1

Open the chart page →

203,579

yetiosdfir-infrastructure

1.0.5

2 of 4 See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
yetiplatform/yeti :latest	9c3006cedcca	attr@1:2.5.2-3	no fix listed
yetiplatform/yeti-frontend :latest	709064278c7e	attr@1:2.5.2-3	no fix listed

Open the chart page →

6,874

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	attr@1:2.5.2-3	no fix listed

Open the chart page →

929

webot-container-kit

0.1.0

1 of 1 See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

workerot-container-kit

0.1.0

1 of 1 See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

lens-metric-proxyowan-charts

0.1.0

1 of 1 See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

3,695

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	attr@1:2.5.1-4	no fix listed

Open the chart page →

3,362

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

2,364

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

4,079

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	attr@1:2.5.1-4	no fix listed

Open the chart page →

12,572

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	attr@1:2.5.1-4	no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	attr@1:2.5.1-4	no fix listed
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

27,901

p4p4

0.1.0

6 of 7 See more

p4 p4 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo :5.0-focal	5e15a3f014ed	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq :3.11-management	c3f70098e01d	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
mastercloudapps/planner :v1.23	40a950b311b2	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
mastercloudapps/server :v2.23	f3d24dfe2686	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
mastercloudapps/weatherservice :v1.23	de859d29c116	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

27,879

myappp4-helm

0.1.0

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

19,768

pacmanpacman-mh

0.1.28

1 of 2 See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mongo :7.0.28-jammy	88785f6f665a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

3,627

pagespages

1.0.0

2 of 3 See more

pages pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-1

0.1.0

1 of 1 See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :1.0	4d2eb25b9225	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,446

pagespages10

1.0.0

2 of 3 See more

pages pages10 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages111

1.0.0

2 of 3 See more

pages pages111 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages2

1.0.0

2 of 3 See more

pages pages2 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-alexchmielu

1.0.0

2 of 3 See more

pages pages-alexchmielu 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-alps

1.0.0

2 of 3 See more

pages pages-alps 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

Container images carrying it

2,877 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/appscode/csi-driver-cacerts :v0.6.0	ab213b156017	attr@1:2.5.1-4	no fix listed	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	attr@1:2.5.2-3	no fix listed	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/appscode/s3proxy :sha-a82ca68	20518335f9f9	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	attr@2.4.48-3.el8	0:2.6.0-1.el8_10	1
ghcr.io/argonix-io/argonix-api :1.0.0	951622ae173b	attr@1:2.5.2-3	no fix listed	1
ghcr.io/argoproj-labs/mcp-for-argocd :v0.9.0	dffc6c719d86	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	attr@1:2.5.2-1build1	1:2.5.2-1ubuntu0.1	1
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	attr@1:2.5.1-4	no fix listed	1
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	attr@1:2.5.1-4	no fix listed	1
ghcr.io/atuinsh/atuin :18.12.0	e953fa9e36ef	attr@1:2.5.1-4	no fix listed	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	attr@1:2.5.1-4	no fix listed	1
ghcr.io/backstage/backstage :latest	792e262ea504	attr@1:2.5.2-3	no fix listed	1
ghcr.io/base/node-reth :v1.1.1	8eb6e492fe3c	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/beslovas/duckdb-ui :1.3.2	72f35584026d	attr@1:2.5.1-4	no fix listed	1
ghcr.io/bionicstork/bionicstork/relay :latest	13290b9a64af	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
ghcr.io/blockscout/smart-contract-verifier :main	9a43f0cc5797	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	attr@1:2.5.1-4	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	attr@1:2.5.1-4	no fix listed	1
ghcr.io/camptocamp/pgbouncer :latest	19dc5663cac4	attr@1:2.5.2-3	no fix listed	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	attr@1:2.5.1-4	no fix listed	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/caninehq/canine :latest	a058034ca006	attr@1:2.5.1-4	no fix listed	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	attr@1:2.5.1-4	no fix listed	1
ghcr.io/cfi2017/opencve-web :3.0.0	6961eab190a2	attr@1:2.5.2-3	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	attr@1:2.5.1-4	no fix listed	1
ghcr.io/chmouel/gosmee :v0.32.0	60b8db1f68cc	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
ghcr.io/chroma-core/chroma :1.5.3	cfd193653bd6	attr@1:2.5.2-3	no fix listed	1
ghcr.io/cjmalloy/jasper :v1.3.282	726a947bb65b	attr@1:2.5.1-4	no fix listed	1
ghcr.io/cjmalloy/jasper-ui :v1.3.623	246dc2160efe	attr@1:2.5.2-3	no fix listed	1
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	attr@1:2.5.2-3	no fix listed	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	attr@1:2.5.1-4	no fix listed	1
ghcr.io/containeroo/filesystem-exporter :v1.5.2	a66121e16d4e	attr@1:2.5.1-4	no fix listed	1