StackRadar

RUSTSEC-2026-0049

Medium

Advisory

Published 20 Mar 2026In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
1 of 1
affected package

webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
rustls-webpkicargo0.102.8, 0.103.4, 0.103.90.103.1017
OSV records
GHSA-pwjx-qhcg-rvj4RUSTSEC-2026-0049

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.112 of 35See more

openebs openebs 4.6.1

12 of the 35 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-api-rest:v2.12.12579357ed812
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
rustls-webpki@0.102.8
0.103.10

Open the chart page →

23,894
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rustls-webpki@0.103.4
0.103.10

Open the chart page →

4,292
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rustls-webpki@0.103.9
0.103.10

Open the chart page →

10,849
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
rustls-webpki@0.102.8
0.103.10

Open the chart page →

953
mayastormayastorVerified publisher2.12.112 of 31See more

mayastor mayastor 2.12.1

12 of the 31 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-api-rest:v2.12.12579357ed812
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
rustls-webpki@0.102.8
0.103.10
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
rustls-webpki@0.102.8
0.103.10

Open the chart page →

21,064
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls-webpki@0.102.8
0.103.10

Open the chart page →

9,256
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0049.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rustls-webpki@0.103.9
0.103.10

Open the chart page →

1,419

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-api-rest:v2.12.12579357ed812
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
2
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rustls-webpki@0.103.9
rustls-webpki@0.103.9
0.103.10
0.103.10
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rustls-webpki@0.103.4
rustls-webpki@0.103.4
0.103.10
0.103.10
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
rustls-webpki@0.102.8
rustls-webpki@0.102.8
0.103.10
0.103.10
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rustls-webpki@0.103.9
rustls-webpki@0.103.9
0.103.10
0.103.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.