StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,701
of 17,797 indexed, latest versions
Container images
2,809
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,701 of 17,797 indexed charts deploy, on 2,809 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,355
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1454
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,701 by stars
ChartLatestAffected imagesRadar Score
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,496
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
library/memcached:1.675c93cc91e76
attr@1:2.5.2-3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

25,285
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

2,971
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,056
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,996
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,618
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
emqx/ecp-ui:2.5.1e33e9816f147
attr@1:2.5.1-4
no fix listed
library/telegraf:1.27507a3eecf809
attr@1:2.5.1-4
no fix listed

Open the chart page →

23,844
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

2,750
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

705
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,183
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,971
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,161
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

3,874
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

5,160
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,861
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
attr@1:2.5.2-3
no fix listed

Open the chart page →

7,330
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,416
eoloPlanteolo-plannerVerified publisher0.1.06 of 7See more

eoloPlant eolo-planner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplannereoloplannerVerified publisher0.1.06 of 7See more

eoloplanner eoloplanner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.06 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,382
eoloplannereoloplanner-molynx-gat0.1.05 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:4.4.66efa05203990
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

28,588
eolo-plannereolo-planner-repo0.1.04 of 7See more

eolo-planner eolo-planner-repo 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,237
eoloplanteoloplant1.0.06 of 7See more

eoloplant eoloplant 1.0.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplantseoloplants-urjcVerified publisher0.1.05 of 7See more

eoloplants eoloplants-urjc 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,861
servereoloserverVerified publisher0.1.06 of 7See more

server eoloserver 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

9,460
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
attr@1:2.5.1-4
no fix listed

Open the chart page →

5,385
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

2,534
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

3,111
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,739
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

7,383
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
attr@1:2.5.2-3
no fix listed
library/mariadb:12.2.2b1cb255a9939
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

6,587
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,928
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,542
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina51b9a1a770c
attr@1:2.5.2-3
no fix listed

Open the chart page →

862
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
attr@1:2.5.1-4
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
attr@1:2.5.1-4
no fix listed

Open the chart page →

12,230
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/dora:master2381ea793a12
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,023
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,082
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

688
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,743
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
sifrai/grandine:unstable59ef4c0d4d7f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

621
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,552
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

987
nimbusethereum-helm-chartsVerified publisher1.2.11 of 2See more

nimbus ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
attr@1:2.5.1-4
no fix listed

Open the chart page →

993
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,538
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
attr@1:2.5.1-4
no fix listed

Open the chart page →

4,497

Container images carrying it

2,809 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
attr@1:2.5.2-3
no fix listed
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
attr@1:2.5.1-4
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
attr@1:2.5.1-4
no fix listed
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
attr@1:2.5.2-3
no fix listed
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
attr@1:2.5.2-3
no fix listed
1
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
attr@1:2.5.2-3
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
attr@1:2.5.2-3
no fix listed
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
attr@1:2.5.2-3
no fix listed
1
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
attr@1:2.5.2-3
no fix listed
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
attr@1:2.5.1-4
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/grycap/im:latest06a16d4f279f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
attr@1:2.5.1-4
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
attr@1:2.5.1-4
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
attr@1:2.5.1-4
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
attr@1:2.5.1-4
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
attr@1:2.5.1-4
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
attr@1:2.5.1-4
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
attr@1:2.5.1-4
no fix listed
1
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
attr@1:2.5.2-3
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
attr@1:2.5.1-4
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
attr@1:2.5.1-4
no fix listed
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
attr@1:2.5.2-3
no fix listed
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
attr@1:2.5.1-4
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
attr@1:2.5.1-4
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
attr@1:2.5.2-3
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
attr@1:2.5.2-3
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
attr@1:2.5.2-3
no fix listed
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
attr@1:2.5.1-4
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.