StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,701
of 17,797 indexed, latest versions
Container images
2,809
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,701 of 17,797 indexed charts deploy, on 2,809 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,355
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1454
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,701 by stars
ChartLatestAffected imagesRadar Score
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,496
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
library/memcached:1.675c93cc91e76
attr@1:2.5.2-3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

25,285
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

2,971
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,056
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,996
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,618
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
emqx/ecp-ui:2.5.1e33e9816f147
attr@1:2.5.1-4
no fix listed
library/telegraf:1.27507a3eecf809
attr@1:2.5.1-4
no fix listed

Open the chart page →

23,844
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

2,750
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

705
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,183
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,971
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,161
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

3,874
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

5,160
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,861
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
attr@1:2.5.2-3
no fix listed

Open the chart page →

7,330
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,416
eoloPlanteolo-plannerVerified publisher0.1.06 of 7See more

eoloPlant eolo-planner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplannereoloplannerVerified publisher0.1.06 of 7See more

eoloplanner eoloplanner 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.06 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

27,382
eoloplannereoloplanner-molynx-gat0.1.05 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:4.4.66efa05203990
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

28,588
eolo-plannereolo-planner-repo0.1.04 of 7See more

eolo-planner eolo-planner-repo 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,237
eoloplanteoloplant1.0.06 of 7See more

eoloplant eoloplant 1.0.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo:5.0-focal5e15a3f014ed
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mastercloudapps/server:v2.23f3d24dfe2686
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

27,784
eoloplantseoloplants-urjcVerified publisher0.1.05 of 7See more

eoloplants eoloplants-urjc 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,861
servereoloserverVerified publisher0.1.06 of 7See more

server eoloserver 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

32,456
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

9,460
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

2,464
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
attr@1:2.5.1-4
no fix listed

Open the chart page →

5,385
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

2,534
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

3,111
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,739
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

7,383
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
attr@1:2.5.2-3
no fix listed
library/mariadb:12.2.2b1cb255a9939
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

6,587
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,928
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,542
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina51b9a1a770c
attr@1:2.5.2-3
no fix listed

Open the chart page →

862
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
attr@1:2.5.1-4
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
attr@1:2.5.1-4
no fix listed

Open the chart page →

12,230
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/dora:master2381ea793a12
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,023
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,082
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

688
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,743
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
sifrai/grandine:unstable59ef4c0d4d7f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

621
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,552
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
attr@1:2.5.2-4
1:2.5.2-4ubuntu0.1

Open the chart page →

987
nimbusethereum-helm-chartsVerified publisher1.2.11 of 2See more

nimbus ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
attr@1:2.5.1-4
no fix listed

Open the chart page →

993
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,538
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
attr@1:2.5.1-4
no fix listed

Open the chart page →

4,497

Container images carrying it

2,809 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
attr@1:2.5.2-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
attr@1:2.5.2-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
attr@1:2.5.2-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
attr@1:2.5.1-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
attr@1:2.5.2-3
no fix listed
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
attr@1:2.5.2-3
no fix listed
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
attr@2.5.1-3.el9
0:2.6.0-1.el9_8
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
attr@1:2.5.2-3
no fix listed
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
attr@1:2.5.1-4
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
attr@1:2.5.1-4
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
attr@1:2.5.2-3
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
attr@1:2.5.2-3
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
attr@1:2.5.1-4
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
attr@1:2.5.1-4
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
attr@1:2.5.2-3
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
attr@1:2.5.1-4
no fix listed
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
attr@1:2.5.2-3
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
attr@1:2.5.2-3
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
attr@1:2.5.2-1build1
1:2.5.2-1ubuntu0.1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
attr@1:2.5.1-4
no fix listed
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
attr@1:2.5.2-3
no fix listed
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
attr@1:2.5.1-4
no fix listed
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
attr@1:2.5.2-3
no fix listed
1
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
attr@1:2.5.2-3
no fix listed
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
attr@1:2.5.2-3
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
attr@1:2.5.2-3
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
attr@1:2.5.1-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
attr@1:2.5.1-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
attr@1:2.5.1-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
attr@1:2.5.1-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
attr@1:2.5.1-4
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
attr@1:2.5.2-3
no fix listed
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
attr@1:2.5.1-4
no fix listed
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
attr@1:2.5.2-3
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
attr@1:2.5.1-4
no fix listed
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
attr@1:2.5.1-4
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
attr@1:2.5.1-4
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
attr@1:2.5.1-4
no fix listed
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
attr@1:2.5.1-4
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.