CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,749; of 17,813 indexed, latest versions
Container images: 2,877; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,749 of 17,813 indexed charts deploy, on 2,877 images.

Affected package	Affected versions	Fixed in	Images
attrdeb	1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more	1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more	2,427
attrrpm	2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el10	0:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1	450
aclrpm	2.3.1-2.azl3	2.4.0-1	3

OSV records: DEBIAN-CVE-2026-54371 UBUNTU-CVE-2026-54371 RHSA-2026:56133 RHSA-2026:59380 RHSA-2026:60226 RLSA-2026:56133 RLSA-2026:59380 RLSA-2026:60226 AZL-91400 AZL-91424 ECHO-e81f-866f-9cb6
Also known as: USN-8691-1

Charts affected

2,749 by stars

Chart

Latest

Affected images

Radar Score

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

19,609

cp-cmfopenshift

2.4.1

1 of 1 See more

cp-cmf openshift 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
confluentinc/cp-cmf :2.4.1	f466f8649aa8	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

217

dify-enterpriseopenshift

3.9.8

10 of 13 See more

dify-enterprise openshift 3.9.8

10 of the 13 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
langgenius/dify-ee-audit :3.9.8-ubi9	e99aed151fc5	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-collector :3.9.8-ubi9	a9b91fd62c94	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise :3.9.8-ubi9	c392a36a4ef7	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-enterprise-frontend :3.9.8-ubi9	8dd9de6b6190	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-gateway :3.9.8-ubi9	9e314c29a61f	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-connector :3.9.8-ubi9	1848d8f1f144	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-crd :3.9.8-ubi9	6f4e0e5f6e5a	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-daemon-serverless :3.9.8-ubi9	d2b8df196d08	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-plugin-manager :3.9.8-ubi9	207b343013a0	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
langgenius/dify-ee-web :3.9.8-ubi9	ba1dd1d0bcea	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

5,127

exporteropenshift

1.0.47

3 of 3 See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

13,076

fineractopenshift

0.1.1

2 of 4 See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

7,978

flomesh-consoleopenshift

0.70.0-30-ubi8

2 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

9,995

fsmopenshift

0.1.8-ubi.6

6 of 6 See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

16,569

harikubeopenshift

0.16.3

3 of 3 See more

harikube openshift 0.16.3

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/harikube/harikube :release-v0.16.3	b58b6d40c3bb	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,653

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

4,234

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

5,863

orion-ldopenshift

1.0.3

2 of 2 See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

14,730

osm-edgeopenshift

1.2.1-ubi8

7 of 7 See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

19,481

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

8,688

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,616

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

11,758

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,578

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,561

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,465

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

13,110

openshift-integration-operatoropenshift-integration-operator

0.8.2

2 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	attr@2.5.1-3.el9	0:2.6.0-1.el9_8

Open the chart page →

2,083

sohaopensoha

0.1.9

1 of 2 See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,831

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

81,512

terminalsopen-webui

0.7.0

2 of 2 See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	attr@1:2.5.2-3	no fix listed
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	attr@1:2.5.2-3	no fix listed

Open the chart page →

2,110

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

102,196

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

5,661

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	attr@1:2.4.47-1ubuntu1	1:2.4.47-1ubuntu1+esm1

Open the chart page →

26,388

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	attr@1:2.5.1-4	no fix listed

Open the chart page →

4,748

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	attr@1:2.5.1-4	no fix listed

Open the chart page →

11,074

osdfir-infrastructureosdfir-infrastructure

2.15.0

25 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	attr@1:2.5.1-4	no fix listed
chromadb/chroma :1.5.7	fc8dc8e11fb2	attr@1:2.5.2-3	no fix listed
library/mariadb :11.3.2	e101f9db3191	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
yetiplatform/yeti :2.9.0	9bcbe2650a14	attr@1:2.5.2-3	no fix listed
yetiplatform/yeti-frontend :2.9.0	873ef15d267b	attr@1:2.5.2-3	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	attr@1:2.5.1-4	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1

Open the chart page →

203,579

yetiosdfir-infrastructure

1.0.5

2 of 4 See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
yetiplatform/yeti :latest	9c3006cedcca	attr@1:2.5.2-3	no fix listed
yetiplatform/yeti-frontend :latest	709064278c7e	attr@1:2.5.2-3	no fix listed

Open the chart page →

6,874

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	attr@1:2.5.2-3	no fix listed

Open the chart page →

929

webot-container-kit

0.1.0

1 of 1 See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

workerot-container-kit

0.1.0

1 of 1 See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

lens-metric-proxyowan-charts

0.1.0

1 of 1 See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	attr@1:2.5.2-3	no fix listed

Open the chart page →

1,956

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

3,695

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	attr@1:2.5.1-4	no fix listed

Open the chart page →

3,362

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

2,364

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

4,079

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	attr@1:2.5.1-4	no fix listed

Open the chart page →

12,572

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	attr@1:2.5.1-4	no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	attr@1:2.5.1-4	no fix listed
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

27,901

p4p4

0.1.0

6 of 7 See more

p4 p4 0.1.0

6 of the 7 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
library/mongo :5.0-focal	5e15a3f014ed	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq :3.11-management	c3f70098e01d	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
mastercloudapps/planner :v1.23	40a950b311b2	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
mastercloudapps/server :v2.23	f3d24dfe2686	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
mastercloudapps/weatherservice :v1.23	de859d29c116	attr@2.4.48-3.el8	0:2.6.0-1.el8_10

Open the chart page →

27,879

myappp4-helm

0.1.0

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

19,768

pacmanpacman-mh

0.1.28

1 of 2 See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
library/mongo :7.0.28-jammy	88785f6f665a	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1

Open the chart page →

3,627

pagespages

1.0.0

2 of 3 See more

pages pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-1

0.1.0

1 of 1 See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :1.0	4d2eb25b9225	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

10,446

pagespages10

1.0.0

2 of 3 See more

pages pages10 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages111

1.0.0

2 of 3 See more

pages pages111 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages2

1.0.0

2 of 3 See more

pages pages2 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-alexchmielu

1.0.0

2 of 3 See more

pages pages-alexchmielu 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

pagespages-alps

1.0.0

2 of 3 See more

pages pages-alps 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
flyway/flyway :6.4.4	22d97ceb0c47	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

20,285

Container images carrying it

2,877 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	attr@1:2.5.1-4	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	attr@1:2.5.1-4	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	attr@1:2.5.2-3	no fix listed	1
ghcr.io/papra-hq/papra :26.6.2-rootless	a281cb44176d	attr@1:2.5.2-3	no fix listed	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/paradigmxyz/reth :v2.2.0	505fca5e87d6	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	attr@1:2.5.2-3	no fix listed	1
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	attr@1:2.5.1-4	no fix listed	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1	1
ghcr.io/platformrelay/kollect :v0.20.0	c95fa31ead03	attr@1:2.5.1-4	no fix listed	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
ghcr.io/projectnessie/nessie :0.108.4	c0f42874c810	attr@2.5.1-3.el9	0:2.6.0-1.el9_8	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	attr@1:2.5.2-3	no fix listed	1
ghcr.io/qovery/iam-eks-user-mapper :main	c41e3efc6097	attr@1:2.5.2-3	no fix listed	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	attr@1:2.5.2-3	no fix listed	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	attr@1:2.5.2-4	1:2.5.2-4ubuntu0.1	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend :0.6.4	6a04b43b8d9a	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	attr@1:2.5.1-4	no fix listed	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	attr@1:2.5.2-3	no fix listed	1
ghcr.io/retyc/retyc-k8s-csi :v0.2.0	1521d4baeb85	attr@1:2.5.2-3	no fix listed	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	attr@1:2.5.1-4	no fix listed	1
ghcr.io/rss-bridge/rss-bridge :latest	606896116558	attr@1:2.5.1-4	no fix listed	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	attr@1:2.5.2-3	no fix listed	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	attr@1:2.5.1-4	no fix listed	1
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	attr@1:2.5.2-3	no fix listed	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	attr@1:2.5.1-4	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	attr@1:2.5.2-3	no fix listed	1
ghcr.io/securo-finance/securo-backend :0.16.0	f452147e07f1	attr@1:2.5.2-3	no fix listed	1
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	attr@1:2.5.1-4	no fix listed	1
ghcr.io/sergelogvinov/fluentd :1.19.3	3273d13f1e75	attr@1:2.5.2-3	no fix listed	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	attr@1:2.5.1-4	no fix listed	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	attr@1:2.5.1-4	no fix listed	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	attr@1:2.5.1-4	no fix listed	1
ghcr.io/shadrus/srebot :0.14.0	9b4415e937b2	attr@1:2.5.2-3	no fix listed	1
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	attr@1:2.5.1-4	no fix listed	1
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	attr@1:2.5.1-4	no fix listed	1
ghcr.io/sikalabs/hello-world-server :latest	cf8538bf6489	attr@1:2.5.2-3	no fix listed	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	attr@1:2.5.2-3	no fix listed	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1	1