StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,701
of 17,797 indexed, latest versions
Container images
2,809
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,701 of 17,797 indexed charts deploy, on 2,809 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,355
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1454
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,701 by stars
ChartLatestAffected imagesRadar Score
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,496
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
library/memcached:1.675c93cc91e76
attr@1:2.5.2-3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

25,285
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

2,971
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,056
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,996
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,618
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
emqx/ecp-ui:2.5.1e33e9816f147
attr@1:2.5.1-4
no fix listed
library/telegraf:1.27507a3eecf809
attr@1:2.5.1-4
no fix listed

Open the chart page →

23,844
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

2,750
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

705
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,183
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,971
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,161
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

3,874
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

5,160
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,861
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
attr@1:2.5.2-3
no fix listed

Open the chart page →

7,330
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,416
eoloPlanteolo-plannerVerified publisher0.1.06 of 7See more

eoloPlant eolo-planner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplannereoloplannerVerified publisher0.1.06 of 7See more

eoloplanner eoloplanner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.06 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,382
eoloplannereoloplanner-molynx-gat0.1.05 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:4.4.66efa05203990
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

28,588
eolo-plannereolo-planner-repo0.1.04 of 7See more

eolo-planner eolo-planner-repo 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,237
eoloplanteoloplant1.0.06 of 7See more

eoloplant eoloplant 1.0.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplantseoloplants-urjcVerified publisher0.1.05 of 7See more

eoloplants eoloplants-urjc 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,861
servereoloserverVerified publisher0.1.06 of 7See more

server eoloserver 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

9,460
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
attr@1:2.5.1-4
no fix listed

Open the chart page →

5,385
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

2,534
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

3,111
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,739
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

7,383
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
attr@1:2.5.2-3
no fix listed
library/mariadb:12.2.2b1cb255a9939
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

6,587
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,928
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,542
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina51b9a1a770c
attr@1:2.5.2-3
no fix listed

Open the chart page →

862
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
attr@1:2.5.1-4
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
attr@1:2.5.1-4
no fix listed

Open the chart page →

12,230
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/dora:master2381ea793a12
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,023
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,082
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

688
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,743
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
sifrai/grandine:unstable59ef4c0d4d7f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

621
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,552
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

987
nimbusethereum-helm-chartsVerified publisher1.2.11 of 2See more

nimbus ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
attr@1:2.5.1-4
no fix listed

Open the chart page →

993
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,538
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
attr@1:2.5.1-4
no fix listed

Open the chart page →

4,497

Container images carrying it

2,809 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/itobey/playlist-mirror:1.0.0601082677a46
attr@1:2.5.2-3
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
attr@1:2.5.1-4
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
attr@1:2.5.2-3
no fix listed
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
attr@1:2.5.1-4
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
attr@1:2.5.2-3
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller:v0.3.72a2bb32c0ea8
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
attr@1:2.5.1-4
no fix listed
1
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
attr@1:2.5.2-3
no fix listed
1
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
attr@1:2.5.2-3
no fix listed
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
1
ghcr.io/kubelauncher/cassandrab66aba320083
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.