StackRadar

CVE-2026-54371

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,708
of 17,821 indexed, latest versions
Container images
2,836
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: attr security update

Carried by container images the latest versions of 2,708 of 17,821 indexed charts deploy, on 2,836 images.

Affected packageAffected versionsFixed inImages
attrdeb1:2.4.47-1ubuntu1, 1:2.4.47-2, 1:2.4.47-2build1, 1:2.4.48-5+9 more1:2.4.47-1ubuntu1+esm1, 1:2.4.47-2ubuntu0.16.04.1~esm1, 1:2.4.47-2ubuntu0.18.04.1~esm1, 1:2.4.48-5ubuntu0.1~esm1+4 more2,392
attrrpm2.4.48-3.el8, 2.5.1-3.el9, 2.5.2-1.azl3, 2.5.2-5.el100:2.6.0-1.el8_10, 0:2.6.0-1.el9_8, 0:2.6.0-1.el10_2, 2.6.0-1444
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54371UBUNTU-CVE-2026-54371RHSA-2026:56133RHSA-2026:59380RHSA-2026:60226RLSA-2026:56133RLSA-2026:59380RLSA-2026:60226AZL-91400AZL-91424ECHO-e81f-866f-9cb6
Also known as
USN-8691-1

Charts affected

2,708 by stars
ChartLatestAffected imagesRadar Score
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

1,948
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

4,485
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
apache/skywalking-ui:9.2.0295f1dc87d98
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

16,577
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
apache/skywalking-ui:8.9.180530f0308a5
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

20,796
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

3,775
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,614
add-crismuxhydraVerified publisher0.9.31 of 1See more

add-crismux hydra 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,332
hydrahydraVerified publisher0.9.52 of 2See more

hydra hydra 0.9.5

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
attr@1:2.5.1-4
no fix listed
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
attr@1:2.5.1-4
no fix listed

Open the chart page →

9,147
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
attr@1:2.5.1-4
no fix listed

Open the chart page →

7,815
remove-crismuxhydraVerified publisher0.9.31 of 1See more

remove-crismux hydra 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
attr@1:2.5.1-4
no fix listed

Open the chart page →

1,332
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,956
hyperglance-helmhyperglance-helmVerified publisher10.0.83 of 6See more

hyperglance-helm hyperglance-helm 10.0.8

3 of the 6 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
hyperglance/init:postgres9fd5faf1fe80
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
hyperglance/init:apacheb2f8c6d52623
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

11,267
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,956
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

7,325
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

8,084
iam-eks-user-mapperiam-eks-user-mapper1.6.01 of 1See more

iam-eks-user-mapper iam-eks-user-mapper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,708
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,104
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
attr@1:2.4.47-2
1:2.4.47-2ubuntu0.16.04.1~esm1
jenkins/jenkins:ltsc1e4c349365f
attr@1:2.5.2-3
no fix listed

Open the chart page →

117,890
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

12,464
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

12,670
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
attr@1:2.4.47-2
1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

84,287
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
attr@1:2.4.47-2
1:2.4.47-2ubuntu0.16.04.1~esm1

Open the chart page →

19,343
ibm-ucv-prodibm-helm5.3.03 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

3 of the 16 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
attr@1:2.5.1-4
no fix listed
bitnamilegacy/rabbitmq:4.1.2fac502149c40
attr@1:2.5.1-4
no fix listed
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
attr@2.4.48-3.el8
0:2.6.0-1.el8_10

Open the chart page →

12,245
icegateicegateVerified publisher0.1.13 of 3See more

icegate icegate 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
attr@1:2.5.1-4
no fix listed
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
attr@1:2.5.1-4
no fix listed
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
attr@1:2.5.1-4
no fix listed

Open the chart page →

4,656
codex-poolericoretechVerified publisher0.8.91 of 1See more

codex-pooler icoretech 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/icoretech/codex-pooler:0.8.054609b857b47
attr@1:2.5.2-3
no fix listed

Open the chart page →

582
metamcpicoretechVerified publisher0.3.111 of 2See more

metamcp icoretech 0.3.11

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,270
multicaicoretechVerified publisher0.5.01 of 5See more

multica icoretech 0.5.0

1 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17cf134a767f47
attr@1:2.5.1-4
no fix listed

Open the chart page →

2,320
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,956
tolgeeicoretechVerified publisher0.49.11 of 3See more

tolgee icoretech 0.49.1

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,802
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

9,708
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
attr@2.5.1-3.el9
0:2.6.0-1.el9_8

Open the chart page →

3,317
eoloserverihuertas2021-vmartinp2021-helm0.1.05 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
codeurjc/toposervice:v1.09fb4c11e6a49
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1
codeurjc/weatherservice:v1.0b9e2f7234349
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/mongo:5.0.6-focal8e70544b6c76
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

27,941
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

9,255
ikigaiikigai-chartVerified publisher0.0.95 of 58See more

ikigai ikigai-chart 0.0.9

5 of the 58 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1
kuberay/operator:v1.0.04e6ac8a3a2c4
attr@2.4.48-3.el8
0:2.6.0-1.el8_10
library/zookeeper:3.8-temurin55d1e5b2e601
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
attr@1:2.4.48-5
1:2.4.48-5ubuntu0.1~esm1

Open the chart page →

113,426
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,252
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,649
ilum-marquezilumVerified publisher6.7.02 of 3See more

ilum-marquez ilum 6.7.0

2 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
attr@1:2.5.1-4
no fix listed
ilum/marquez:0.54.06e1d709d41f8
attr@1:2.5.1-4
no fix listed

Open the chart page →

6,394
ilum-streamlitilumVerified publisher0.1.01 of 1See more

ilum-streamlit ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ilum/streamlit-example:1.0.0ce5dcdeb22ba
attr@1:2.5.2-3
no fix listed

Open the chart page →

2,850
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
attr@1:2.5.1-4
no fix listed

Open the chart page →

12,038
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,956
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
attr@1:2.5.2-3
no fix listed

Open the chart page →

1,956
plausible-analyticsimioVerified publisher0.4.23 of 5See more

plausible-analytics imio 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
attr@1:2.5.1-4
no fix listed
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
attr@1:2.5.1-4
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
attr@1:2.5.1-4
no fix listed

Open the chart page →

10,808
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,249
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

3,374
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
attr@1:2.4.47-2build1
1:2.4.47-2ubuntu0.18.04.1~esm1

Open the chart page →

16,421
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
attr@1:2.5.1-1build1
1:2.5.1-1ubuntu0.1

Open the chart page →

5,423
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,832
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
attr@1:2.5.1-4
no fix listed

Open the chart page →

3,551
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
attr@1:2.5.2-3
no fix listed

Open the chart page →

3,114
influxdb3-coreinfluxdata0.1.11 of 1See more

influxdb3-core influxdata 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54371.

Container imageDigestPackageFixed in
library/influxdb:3.10.5-core695a8063ff10
attr@1:2.5.2-1build1.1
1:2.5.2-1ubuntu0.1

Open the chart page →

872

Container images carrying it

2,836 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-54371.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.