Medium
CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
Type: advisorySources: OSV
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_request.head.sha or .head.ref. This gives attacker-controlled code access to base repository secrets and tokens. A pull_request_target workflow writes to a shared Actions cache. A subsequent release or publish workflow restores from the same cache scope, allowing a poisoned cache entry to execute during release. This issue has been patched via commit 271d415.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-54532
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 06:13 UTC · Revision 1
Source evidence
CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
core-osv · Original sourcePublished 22 Oct 2026, 17:16 UTC
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_request.head.sha or .head.ref. This gives attacker-controlled code access to base repository secrets and tokens. A pull_request_target workflow writes to a shared Actions cache. A subsequent release or publish workflow restores from the same cache scope, allowing a poisoned cache entry to execute during release. This issue has been patched via commit 271d415.
osv:CVE-2026-54532
Complete source record
{
"id": "006076bddacf5a2883dd92528eda99ba324df2f3f25ed086121c0bdfc6aa6d71",
"url": "https://osv.dev/vulnerability/CVE-2026-54532",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft",
"summary": "CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_request.head.sha or .head.ref. This gives attacker-controlled code access to base repository secrets and tokens. A pull_request_target workflow writes to a shared Actions cache. A subsequent release or publish workflow restores from the same cache scope, allowing a poisoned cache entry to execute during release. This issue has been patched via commit 271d415.",
"evidence": "osv:CVE-2026-54532",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2026-54532",
"aliases": [
"CVE-2026-54532",
"GHSA-gv8x-4mc5-r65r"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/cloudpirates-io/helm-charts",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "271d415975a64b7958d2740526dca870b70c8c21"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "271d415975a64b7958d2740526dca870b70c8c21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "271d415975a64b7958d2740526dca870b70c8c21"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"rabbitmq-cluster-operator-0.3.1",
"redis-0.29.3",
"etcd-0.8.0",
"redis-0.29.2",
"redis-0.29.1",
"ghost-0.18.6",
"mariadb-0.16.4",
"keycloak-0.21.9",
"memcached-0.13.3",
"rustfs-0.9.1",
"clusterpirate-1.5.3",
"nginx-0.12.1",
"valkey-0.21.1",
"postgres-0.19.5",
"keycloak-0.21.8",
"timescaledb-0.12.0",
"zookeeper-0.10.3",
"redis-0.29.0",
"valkey-0.21.0",
"redis-0.28.0",
"rabbitmq-cluster-operator-0.3.0",
"mariadb-0.16.3",
"mariadb-0.16.2",
"mongodb-0.17.3",
"mongodb-0.17.2",
"postgres-0.19.4",
"keycloak-0.21.7",
"zookeeper-0.10.2",
"redis-0.27.9",
"redis-0.27.8",
"keycloak-0.21.6",
"redis-0.27.7",
"memcached-0.13.2",
"zookeeper-0.10.1",
"ghost-0.18.5",
"valkey-0.20.2",
"redis-0.27.6",
"redis-0.27.5",
"ghost-0.18.4",
"mongodb-0.17.1",
"rabbitmq-0.21.4",
"rustfs-0.9.0",
"zookeeper-0.10.0",
"rustfs-0.8.5",
"clusterpirate-1.5.2",
"valkey-0.20.1",
"etcd-0.7.1",
"nginx-0.12.0",
"timescaledb-0.11.3",
"ghost-0.18.3",
"keycloak-0.21.5",
"redis-0.27.4",
"redis-0.27.3",
"keycloak-0.21.4",
"clusterpirate-1.5.1",
"rustfs-0.8.4",
"memcached-0.13.1",
"postgres-0.19.3",
"keycloak-0.21.3",
"redis-0.27.2",
"rabbitmq-0.21.3",
"ghost-0.18.2",
"zookeeper-0.9.0",
"redis-0.27.1",
"postgres-0.19.2",
"keycloak-0.21.2",
"keycloak-0.21.1",
"rabbitmq-0.21.2",
"nginx-0.11.1",
"rabbitmq-0.21.1",
"ghost-0.18.1",
"rustfs-0.8.3",
"valkey-0.20.0",
"redis-0.27.0",
"rabbitmq-0.21.0",
"nginx-0.11.0",
"mongodb-0.17.0",
"memcached-0.13.0",
"keycloak-0.21.0",
"clusterpirate-1.5.0",
"nginx-0.10.2",
"keycloak-0.20.5",
"keycloak-0.20.4",
"mongodb-0.16.4",
"clusterpirate-1.4.3",
"timescaledb-0.11.2",
"postgres-0.19.1",
"keycloak-0.20.3",
"rabbitmq-0.20.2",
"nginx-0.10.1",
"mongodb-0.16.3",
"redis-0.26.11",
"zookeeper-0.8.1",
"redis-0.26.10",
"rabbitmq-0.20.1",
"mongodb-0.16.2",
"mongodb-0.16.1",
"mongodb-0.16.0",
"mongodb-0.15.5",
"mongodb-0.15.4",
"memcached-0.12.1",
"keycloak-0.20.2",
"mariadb-0.16.1",
"keycloak-0.20.1",
"rustfs-0.8.2",
"ghost-0.18.0",
"timescaledb-0.11.1",
"mongodb-0.15.3",
"zookeeper-0.8.0",
"mongodb-0.15.2",
"redis-0.26.9",
"minio-0.13.0",
"rustfs-0.8.1",
"mongodb-0.15.1",
"zookeeper-0.7.0",
"valkey-0.19.0",
"timescaledb-0.11.0",
"rustfs-0.8.0",
"rabbitmq-cluster-operator-0.2.3",
"rabbitmq-0.20.0",
"postgres-0.19.0",
"nginx-0.10.0",
"mongodb-0.15.0",
"minio-0.12.0",
"memcached-0.12.0",
"mariadb-0.16.0",
"keycloak-0.20.0",
"ghost-0.17.0",
"etcd-0.7.0",
"ghost-0.16.7",
"etcd-0.6.3",
"zookeeper-0.6.7",
"mongodb-0.14.7",
"ghost-0.16.6",
"timescaledb-0.10.4",
"zookeeper-0.6.6",
"mongodb-0.14.6",
"mongodb-0.14.5",
"ghost-0.16.5",
"redis-0.26.8",
"mongodb-0.14.3",
"nginx-0.9.2",
"rabbitmq-0.19.9",
"timescaledb-0.10.3",
"redis-0.26.7",
"nginx-0.9.1",
"ghost-0.16.4",
"rabbitmq-0.19.8",
"rabbitmq-0.19.7",
"ghost-0.16.3",
"rustfs-0.7.1",
"etcd-0.6.2",
"keycloak-0.19.7",
"keycloak-0.19.6",
"clusterpirate-1.4.2",
"keycloak-0.19.5",
"mongodb-0.14.2",
"redis-0.26.6",
"keycloak-0.19.4",
"rabbitmq-0.19.6",
"rabbitmq-0.19.5",
"postgres-0.18.3",
"rabbitmq-0.19.4",
"zookeeper-0.6.5",
"keycloak-0.19.3",
"postgres-0.18.2",
"mariadb-0.15.3",
"rabbitmq-0.19.3",
"zookeeper-0.6.4",
"rabbitmq-0.19.2",
"keycloak-0.19.2",
"postgres-0.18.1",
"mariadb-0.15.2",
"ghost-0.16.2",
"mongodb-0.14.1",
"keycloak-0.19.1",
"mariadb-0.15.1",
"ghost-0.16.1",
"redis-0.26.5",
"memcached-0.11.1",
"mongodb-0.14.0",
"ghost-0.16.0",
"rabbitmq-0.19.1",
"valkey-0.18.0",
"rustfs-0.7.0",
"rabbitmq-0.19.0",
"postgres-0.18.0",
"nginx-0.9.0",
"minio-0.11.0",
"memcached-0.11.0",
"mariadb-0.15.0",
"keycloak-0.19.0",
"ghost-0.15.0",
"postgres-0.17.3",
"rabbitmq-0.18.3",
"zookeeper-0.6.3",
"rustfs-0.6.0",
"nginx-0.8.5",
"mongodb-0.13.0",
"redis-0.26.4",
"keycloak-0.18.0",
"redis-0.26.3",
"nginx-0.8.4",
"ghost-0.14.1",
"rabbitmq-0.18.2",
"mongodb-0.12.7",
"nginx-0.8.3",
"mongodb-0.12.6",
"redis-0.26.2",
"nginx-0.8.2",
"keycloak-0.17.0",
"memcached-0.10.3",
"rabbitmq-0.18.1",
"clusterpirate-1.4.1",
"redis-0.26.1",
"redis-0.26.0",
"nginx-0.8.1",
"redis-0.25.10",
"memcached-0.10.2",
"valkey-0.17.1",
"redis-0.25.9",
"mongodb-0.12.5",
"rabbitmq-0.18.0",
"ghost-0.14.0",
"keycloak-0.16.9",
"redis-0.25.8",
"nginx-0.8.0",
"zookeeper-0.6.2",
"redis-0.25.7",
"postgres-0.17.2",
"keycloak-0.16.8",
"timescaledb-0.10.2",
"ghost-0.13.6",
"redis-0.25.6",
"redis-0.25.5",
"redis-0.25.4",
"rabbitmq-0.17.2",
"redis-0.25.3",
"keycloak-0.16.7",
"ghost-0.13.5",
"postgres-0.17.1",
"etcd-0.6.1",
"keycloak-0.16.6",
"ghost-0.13.4",
"redis-0.25.2",
"postgres-0.17.0",
"memcached-0.10.1",
"ghost-0.13.3",
"mongodb-0.12.4",
"rabbitmq-0.17.1",
"postgres-0.16.2",
"rustfs-0.5.1",
"nginx-0.7.0",
"postgres-0.16.1",
"keycloak-0.16.5",
"rabbitmq-cluster-operator-0.2.1",
"redis-0.25.1",
"redis-0.25.0",
"ghost-0.13.2",
"rabbitmq-0.16.3",
"keycloak-0.16.4",
"mariadb-0.14.3",
"keycloak-0.16.3",
"redis-0.24.0",
"keycloak-0.16.2",
"keycloak-0.16.1",
"mariadb-0.14.2",
"mongodb-0.12.3",
"rabbitmq-0.16.2",
"zookeeper-0.6.1",
"mongodb-0.12.2",
"keycloak-0.15.1",
"mariadb-0.14.1",
"rabbitmq-0.16.1",
"timescaledb-0.10.1",
"minio-0.10.1",
"mongodb-0.12.1",
"clusterpirate-1.4.0",
"mongodb-0.12.0",
"ghost-0.13.1",
"zookeeper-0.6.0",
"valkey-0.17.0",
"timescaledb-0.10.0",
"rustfs-0.5.0",
"redis-0.23.0",
"rabbitmq-cluster-operator-0.2.0",
"rabbitmq-0.16.0",
"postgres-0.16.0",
"nginx-0.6.0",
"mongodb-0.11.0",
"minio-0.10.0",
"memcached-0.10.0",
"mariadb-0.14.0",
"keycloak-0.15.0",
"ghost-0.13.0",
"etcd-0.6.0",
"clusterpirate-1.3.0",
"clusterpirate-1.2.18",
"common-2.2.0",
"redis-0.22.3",
"keycloak-0.14.8",
"mariadb-0.13.6",
"keycloak-0.14.7",
"postgres-0.15.6",
"ghost-0.12.1",
"valkey-0.16.0",
"redis-0.22.2",
"rabbitmq-0.15.11",
"minio-0.9.2",
"rabbitmq-0.15.10",
"ghost-0.12.0",
"clusterpirate-1.2.17",
"minio-0.9.1",
"ghost-0.11.0",
"ghost-0.10.0",
"valkey-0.15.4",
"redis-0.22.1",
"rabbitmq-cluster-operator-0.1.7",
"rabbitmq-cluster-operator-0.1.6",
"nginx-0.5.11",
"mongodb-0.10.5",
"mariadb-0.13.5",
"keycloak-0.14.6",
"keycloak-0.14.5",
"mongodb-0.10.4",
"redis-0.22.0",
"rabbitmq-0.15.9",
"keycloak-0.14.4",
"rabbitmq-0.15.8",
"ghost-0.9.2",
"keycloak-0.14.3",
"nginx-0.5.10",
"rabbitmq-0.15.7",
"zookeeper-0.5.5",
"postgres-0.15.5",
"minio-0.9.0",
"postgres-0.15.4",
"rabbitmq-0.15.6",
"mariadb-0.13.4",
"mariadb-0.13.3",
"keycloak-0.14.2",
"postgres-0.15.3",
"redis-0.21.8",
"memcached-0.9.6",
"keycloak-0.14.1",
"rabbitmq-0.15.5",
"keycloak-0.14.0",
"mongodb-0.10.3",
"memcached-0.9.5",
"ghost-0.9.1",
"nginx-0.5.9",
"redis-0.21.7",
"redis-0.21.6",
"postgres-0.15.2",
"memcached-0.9.4",
"rabbitmq-0.15.4",
"ghost-0.9.0",
"nginx-0.5.8",
"etcd-0.5.3",
"postgres-0.15.1",
"zookeeper-0.5.4",
"rabbitmq-0.15.3",
"redis-0.21.4",
"keycloak-0.13.6",
"postgres-0.15.0",
"minio-0.8.2",
"timescaledb-0.9.0",
"clusterpirate-1.2.16",
"etcd-0.5.2",
"mongodb-0.10.2",
"rabbitmq-0.15.2",
"valkey-0.15.3",
"timescaledb-0.8.1",
"rustfs-0.4.1",
"redis-0.21.3",
"rabbitmq-cluster-operator-0.1.5",
"rabbitmq-0.15.1",
"postgres-0.14.6",
"nginx-0.5.7",
"mongodb-0.10.1",
"minio-0.8.1",
"memcached-0.9.3",
"mariadb-0.13.2",
"keycloak-0.13.5",
"ghost-0.8.2",
"etcd-0.5.1",
"clusterpirate-1.2.15",
"common-2.1.2",
"nginx-0.5.6",
"zookeeper-0.5.3",
"common-2.1.1",
"nginx-0.5.5",
"keycloak-0.13.4",
"keycloak-0.13.3",
"rabbitmq-0.15.0",
"clusterpirate-1.2.14",
"redis-0.21.2",
"valkey-0.15.2",
"redis-0.21.1",
"rabbitmq-0.14.0",
"keycloak-0.13.2",
"rabbitmq-0.13.2",
"rabbitmq-0.13.1",
"keycloak-0.13.1",
"ghost-0.8.1",
"rabbitmq-0.13.0",
"mariadb-0.13.1",
"mongodb-0.10.0",
"mongodb-0.9.2",
"rabbitmq-0.12.4",
"rabbitmq-0.12.3",
"postgres-0.14.5",
"mariadb-0.13.0",
"minio-0.8.0",
"rabbitmq-0.12.2",
"clusterpirate-1.2.13",
"postgres-0.14.4",
"postgres-0.14.3",
"valkey-0.15.1",
"keycloak-0.13.0",
"clusterpirate-1.2.12",
"redis-0.21.0",
"keycloak-0.12.0",
"keycloak-0.11.5",
"memcached-0.9.2",
"ghost-0.8.0",
"nginx-0.5.4",
"memcached-0.9.1",
"zookeeper-0.5.2",
"redis-0.20.9",
"rabbitmq-0.12.1",
"postgres-0.14.2",
"mongodb-0.9.1",
"mariadb-0.12.1",
"redis-0.20.8",
"rabbitmq-cluster-operator-0.1.4",
"redis-0.20.7",
"postgres-0.14.1",
"valkey-0.15.0",
"timescaledb-0.8.0",
"rustfs-0.4.0",
"mariadb-0.12.0",
"etcd-0.5.0",
"valkey-0.14.0",
"timescaledb-0.7.0",
"rustfs-0.3.0",
"rabbitmq-0.12.0",
"mongodb-0.9.0",
"minio-0.7.0",
"memcached-0.9.0",
"mariadb-0.11.0",
"ghost-0.7.0",
"rustfs-0.2.0",
"postgres-0.14.0",
"mongodb-0.8.0",
"rabbitmq-0.11.5",
"rabbitmq-0.11.4",
"redis-0.20.6",
"rabbitmq-cluster-operator-0.1.3",
"rabbitmq-0.11.3",
"keycloak-0.11.4",
"timescaledb-0.6.2",
"rabbitmq-0.11.2",
"ghost-0.6.5",
"rabbitmq-0.11.1",
"memcached-0.8.2",
"redis-0.20.5",
"clusterpirate-1.2.11",
"postgres-0.13.8",
"rabbitmq-0.11.0",
"redis-0.20.4",
"nginx-0.5.3",
"redis-0.20.3",
"zookeeper-0.5.1",
"redis-0.20.2",
"postgres-0.13.7",
"redis-0.20.1",
"rabbitmq-cluster-operator-0.1.2",
"zookeeper-0.5.0",
"redis-0.20.0",
"redis-0.19.0",
"minio-0.6.1",
"zookeeper-0.4.1",
"zookeeper-0.3.10",
"redis-0.18.0",
"redis-0.17.7",
"zookeeper-0.3.9",
"ghost-0.6.4",
"nginx-0.5.2",
"mongodb-0.7.1",
"rabbitmq-0.10.2",
"memcached-0.8.1",
"redis-0.17.6",
"zookeeper-0.3.8",
"zookeeper-0.3.7",
"redis-0.17.5",
"rabbitmq-cluster-operator-0.1.1",
"postgres-0.13.6",
"redis-0.17.4",
"minio-0.6.0",
"postgres-0.13.5",
"mariadb-0.10.1",
"postgres-0.13.4",
"mariadb-0.10.0",
"memcached-0.8.0",
"rabbitmq-0.10.1",
"zookeeper-0.3.6",
"valkey-0.13.0",
"redis-0.17.3",
"rabbitmq-0.10.0",
"redis-0.17.2",
"postgres-0.13.3",
"redis-0.17.1",
"rabbitmq-0.9.0",
"redis-0.17.0",
"nginx-0.5.1",
"valkey-0.12.0",
"postgres-0.13.2",
"clusterpirate-1.2.10",
"rabbitmq-0.8.1",
"memcached-0.7.2",
"ghost-0.6.3",
"postgres-0.13.1",
"redis-0.16.7",
"minio-0.5.7",
"ghost-0.6.2",
"valkey-0.11.1",
"timescaledb-0.6.1",
"valkey-0.11.0",
"timescaledb-0.6.0",
"rabbitmq-0.8.0",
"postgres-0.13.0",
"mongodb-0.7.0",
"mariadb-0.9.0",
"etcd-0.4.0",
"mariadb-0.8.1",
"zookeeper-0.3.5",
"redis-0.16.6",
"ghost-0.6.1",
"redis-0.16.5",
"keycloak-0.11.3",
"zookeeper-0.3.4",
"redis-0.16.4",
"redis-0.16.3",
"redis-0.16.2",
"keycloak-0.11.2",
"keycloak-0.11.1",
"ghost-0.6.0",
"zookeeper-0.3.3",
"valkey-0.10.3",
"timescaledb-0.5.4",
"redis-0.16.1",
"rabbitmq-0.7.10",
"postgres-0.12.4",
"mongodb-0.6.6",
"etcd-0.3.4",
"postgres-0.12.3",
"rabbitmq-cluster-operator-0.1.0",
"keycloak-0.11.0",
"keycloak-0.10.2",
"nginx-0.5.0",
"postgres-0.12.2",
"keycloak-0.10.1",
"mongodb-0.6.5",
"ghost-0.5.1",
"redis-0.16.0",
"mariadb-0.8.0",
"redis-0.15.4",
"valkey-0.10.2",
"valkey-0.10.1",
"keycloak-0.10.0",
"common-2.1.0",
"keycloak-0.9.1",
"keycloak-0.9.0",
"keycloak-0.8.8",
"keycloak-0.8.7",
"redis-0.15.3",
"mongodb-0.6.4",
"memcached-0.7.1",
"redis-0.15.2",
"rabbitmq-0.7.9",
"redis-0.15.1",
"redis-0.15.0",
"redis-0.14.4",
"etcd-0.3.3",
"redis-0.14.3",
"mariadb-0.7.0",
"ghost-0.5.0",
"redis-0.14.2",
"postgres-0.12.1",
"mongodb-0.6.3",
"memcached-0.7.0",
"nginx-0.4.3",
"timescaledb-0.5.3",
"postgres-0.12.0",
"memcached-0.6.0",
"keycloak-0.8.6",
"zookeeper-0.3.2",
"timescaledb-0.5.2",
"rustfs-0.1.1",
"redis-0.14.1",
"rabbitmq-0.7.8",
"postgres-0.11.7",
"nginx-0.4.2",
"mongodb-0.6.2",
"minio-0.5.6",
"memcached-0.5.4",
"mariadb-0.6.1",
"keycloak-0.8.5",
"ghost-0.4.6",
"etcd-0.3.2",
"zookeeper-0.3.1",
"ghost-0.4.5",
"ghost-0.4.4",
"keycloak-0.8.4",
"keycloak-0.8.3",
"postgres-0.11.6",
"redis-0.14.0",
"nginx-0.4.1",
"rabbitmq-0.7.7",
"valkey-0.10.0",
"postgres-0.11.5",
"postgres-0.11.4",
"memcached-0.5.3",
"keycloak-0.8.2",
"nginx-0.4.0",
"postgres-0.11.3",
"redis-0.13.4",
"redis-0.13.3",
"memcached-0.5.2",
"redis-0.13.2",
"clusterpirate-1.2.9",
"memcached-0.5.1",
"ghost-0.4.3",
"postgres-0.11.2",
"ghost-0.4.2",
"valkey-0.9.2",
"clusterpirate-1.2.8",
"valkey-0.9.1",
"redis-0.13.1",
"keycloak-0.8.1",
"nginx-0.3.3",
"minio-0.5.5",
"rabbitmq-0.7.6",
"memcached-0.5.0",
"clusterpirate-1.2.7",
"redis-0.13.0",
"valkey-0.9.0",
"postgres-0.11.1",
"redis-0.12.1",
"redis-0.12.0",
"ghost-0.4.1",
"nginx-0.3.2",
"rabbitmq-0.7.5",
"timescaledb-0.5.1",
"rabbitmq-0.7.4",
"keycloak-0.8.0",
"redis-0.11.2",
"redis-0.11.1",
"rustfs-0.1.0",
"keycloak-0.7.1",
"redis-0.11.0",
"rabbitmq-0.7.3",
"clusterpirate-1.2.6",
"nginx-0.3.1",
"mongodb-0.6.1",
"rabbitmq-0.7.2",
"redis-0.10.2",
"rabbitmq-0.7.1",
"etcd-0.3.1",
"zookeeper-0.3.0",
"valkey-0.8.0",
"timescaledb-0.5.0",
"redis-0.10.0",
"rabbitmq-0.7.0",
"postgres-0.11.0",
"nginx-0.3.0",
"mongodb-0.6.0",
"memcached-0.4.0",
"mariadb-0.6.0",
"keycloak-0.7.0",
"ghost-0.4.0",
"etcd-0.3.0",
"postgres-0.10.7",
"minio-0.5.4",
"postgres-0.10.6",
"keycloak-0.6.8",
"redis-0.9.8",
"redis-0.9.7",
"rabbitmq-0.6.1",
"rabbitmq-0.6.0",
"clusterpirate-1.2.5",
"postgres-0.10.5",
"keycloak-0.6.7",
"mongodb-0.5.6",
"ghost-0.3.6",
"mongodb-0.5.5",
"memcached-0.3.3",
"postgres-0.10.2",
"ghost-0.3.2",
"clusterpirate-1.2.3",
"redis-0.9.4",
"valkey-0.7.0",
"valkey-0.6.2",
"timescaledb-0.4.1",
"redis-0.9.3",
"rabbitmq-0.5.4",
"postgres-0.10.1",
"mongodb-0.5.3",
"minio-0.5.2",
"mariadb-0.5.3",
"keycloak-0.6.5",
"etcd-0.2.2",
"clusterpirate-1.2.2",
"mongodb-0.5.2",
"redis-0.9.2",
"redis-0.9.1",
"memcached-0.3.2",
"mariadb-0.5.2",
"ghost-0.3.1",
"redis-0.9.0",
"keycloak-0.6.4",
"clusterpirate-1.2.1",
"rabbitmq-0.5.3",
"redis-0.8.5",
"valkey-0.6.1",
"keycloak-0.6.3",
"minio-0.5.1",
"redis-0.8.4",
"redis-0.8.3",
"memcached-0.3.1",
"mariadb-0.5.1",
"mongodb-0.5.1",
"rabbitmq-0.5.2",
"keycloak-0.6.2",
"rabbitmq-0.5.1",
"redis-0.8.2",
"mariadb-0.5.0",
"postgres-0.10.0",
"redis-0.8.1",
"redis-0.8.0",
"keycloak-0.6.1",
"keycloak-0.6.0",
"ghost-0.3.0",
"clusterpirate-1.2.0",
"nginx-0.2.0",
"zookeeper-0.2.0",
"valkey-0.6.0",
"timescaledb-0.4.0",
"redis-0.7.0",
"rabbitmq-0.5.0",
"postgres-0.9.0",
"mongodb-0.5.0",
"minio-0.5.0",
"memcached-0.3.0",
"mariadb-0.4.0",
"etcd-0.2.0",
"common-2.0.0",
"zookeeper-0.1.7",
"valkey-0.5.1",
"timescaledb-0.3.2",
"redis-0.6.4",
"rabbitmq-0.4.1",
"postgres-0.8.3",
"minio-0.4.1",
"memcached-0.2.3",
"mariadb-0.3.5",
"keycloak-0.5.1",
"etcd-0.1.3",
"clusterpirate-1.1.4",
"keycloak-0.5.0",
"clusterpirate-1.1.3",
"clusterpirate-1.1.2",
"etcd-0.1.2",
"clusterpirate-1.1.1",
"clusterpirate-1.1.0",
"rabbitmq-0.4.0",
"rabbitmq-0.3.7",
"postgres-0.8.2",
"valkey-0.5.0",
"postgres-0.8.1",
"rabbitmq-0.3.6",
"keycloak-0.4.0",
"etcd-0.1.1",
"ghost-0.2.6",
"redis-0.6.3",
"common-1.1.2",
"rabbitmq-0.3.5",
"memcached-0.2.2",
"mongodb-0.4.2",
"etcd-0.1.0",
"mariadb-0.3.4",
"redis-0.6.2",
"mongodb-0.4.1",
"redis-0.6.1",
"rabbitmq-0.3.4",
"minio-0.4.0",
"rabbitmq-0.3.3",
"postgres-0.8.0",
"mongodb-0.4.0",
"mongodb-0.3.3",
"redis-0.6.0",
"keycloak-0.3.2",
"ghost-0.2.5",
"zookeeper-0.1.6",
"valkey-0.4.1",
"timescaledb-0.3.1",
"redis-0.5.7",
"nginx-0.1.14",
"mongodb-0.3.2",
"keycloak-0.3.1",
"ghost-0.2.4",
"rabbitmq-0.3.2",
"postgres-0.7.3",
"mongodb-0.3.1",
"redis-0.5.6",
"redis-0.5.5",
"nginx-0.1.13",
"mariadb-0.3.3",
"redis-0.5.4",
"keycloak-0.3.0",
"nginx-0.1.12",
"keycloak-0.2.1",
"redis-0.5.3",
"keycloak-0.2.0",
"keycloak-0.1.12",
"ghost-0.2.3",
"mariadb-0.3.2",
"rabbitmq-0.3.1",
"redis-0.5.2",
"redis-0.5.1",
"mariadb-0.3.1",
"keycloak-0.1.11",
"valkey-0.4.0",
"rabbitmq-0.3.0",
"memcached-0.2.1",
"keycloak-0.1.10",
"postgres-0.7.2",
"postgres-0.7.1",
"mongodb-0.3.0",
"minio-0.3.0",
"timescaledb-0.3.0",
"rabbitmq-0.2.13",
"keycloak-0.1.9",
"nginx-0.1.11",
"ghost-0.2.2",
"ghost-0.2.1",
"zookeeper-0.1.5",
"ghost-0.2.0",
"memcached-0.2.0",
"redis-0.5.0",
"minio-0.2.4",
"nginx-0.1.10",
"keycloak-0.1.8",
"zookeeper-0.1.4",
"nginx-0.1.9",
"postgres-0.7.0",
"keycloak-0.1.7",
"postgres-0.6.1",
"postgres-0.5.5",
"mariadb-0.3.0",
"zookeeper-0.1.3",
"common-1.1.1",
"postgres-0.6.0",
"zookeeper-0.1.2",
"nginx-0.1.8",
"common-1.1.0",
"timescaledb-0.2.2",
"keycloak-0.1.6",
"postgres-0.5.4",
"keycloak-0.1.5",
"redis-0.4.6",
"postgres-0.5.3",
"zookeeper-0.1.1",
"mongodb-0.2.0",
"nginx-0.1.7",
"redis-0.4.5",
"rabbitmq-0.2.12",
"postgres-0.5.2",
"keycloak-0.1.4",
"postgres-0.5.1",
"redis-0.4.4",
"ghost-0.1.0",
"redis-0.4.3",
"redis-0.4.2",
"redis-0.4.1",
"memcached-0.1.3",
"keycloak-0.1.3",
"keycloak-0.1.2",
"redis-0.4.0",
"keycloak-0.1.1",
"rabbitmq-0.2.11",
"postgres-0.5.0",
"redis-0.3.3",
"rabbitmq-0.2.10",
"redis-0.3.2",
"rabbitmq-0.2.9",
"rabbitmq-0.2.8",
"redis-0.3.1",
"keycloak-0.1.0",
"rabbitmq-0.2.7",
"postgres-0.4.0",
"postgres-0.3.0",
"valkey-0.3.2",
"mongodb-0.1.9",
"rabbitmq-0.2.6",
"mariadb-0.2.7",
"postgres-0.2.8",
"redis-0.3.0",
"postgres-0.2.7",
"mariadb-0.2.6",
"postgres-0.2.6",
"mariadb-0.2.5",
"rabbitmq-0.2.5",
"minio-0.2.3",
"minio-0.2.2",
"valkey-0.3.1",
"rabbitmq-0.2.4",
"zookeeper-0.1.0",
"nginx-0.1.6",
"mongodb-0.1.8",
"rabbitmq-0.2.3",
"postgres-0.2.5",
"rabbitmq-0.2.0",
"nginx-0.1.5",
"rabbitmq-0.1.7",
"nginx-0.1.4",
"rabbitmq-0.1.6",
"rabbitmq-0.1.5",
"memcached-0.1.2",
"postgres-0.2.4",
"mariadb-0.2.4",
"rabbitmq-0.1.4",
"mariadb-0.2.3",
"memcached-0.1.1",
"mongodb-0.1.7",
"postgres-0.2.3",
"redis-0.2.1",
"rabbitmq-0.1.3",
"minio-0.2.1",
"nginx-0.1.3",
"timescaledb-0.2.1",
"rabbitmq-0.1.2",
"rabbitmq-0.1.1",
"nginx-0.1.2",
"nginx-0.1.1",
"mariadb-0.2.2",
"nginx-0.1.0",
"mariadb-0.2.1",
"valkey-0.3.0",
"timescaledb-0.2.0",
"redis-0.2.0",
"rabbitmq-0.1.0",
"minio-0.2.0",
"memcached-0.1.0",
"mariadb-0.2.0",
"valkey-0.2.0",
"redis-0.1.8",
"redis-0.1.7",
"valkey-0.1.7",
"timescaledb-0.1.1",
"redis-0.1.6",
"rabbitmq-0.0.3",
"postgres-0.2.2",
"mongodb-0.1.6",
"minio-0.1.8",
"memcached-0.0.2",
"mariadb-0.1.6",
"clusterpirate-1.0.7",
"memcached-0.0.1",
"postgres-0.2.1",
"valkey-0.1.6",
"timescaledb-0.1.0",
"redis-0.1.5",
"rabbitmq-0.0.2",
"postgres-0.2.0",
"mongodb-0.1.5",
"minio-0.1.7",
"mariadb-0.1.5",
"common-1.0.0",
"clusterpirate-1.0.6"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54532.json"
}
}
],
"modified": "2026-11-01T02:30:44.720443337Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54532.json",
"https://github.com/CloudPirates-io/helm-charts/security/advisories/GHSA-gv8x-4mc5-r65r",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54532",
"https://github.com/CloudPirates-io/helm-charts/commit/271d415975a64b7958d2740526dca870b70c8c21"
],
"provider_metadata": {
"cwe_ids": [
"CWE-829"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54532.json"
}
},
"related_cves": [
{
"value": "CVE-2026-54532",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 492980,
"published_at": "2026-10-22T17:16:38.54+00:00"
}