StackRadar

RUSTSEC-2026-0097

Low

Advisory

Published 9 Apr 2026In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
55
of 17,781 indexed, latest versions
Container images
57
deployed by those charts
Fix available
1 of 1
affected package

Rand is unsound with a custom logger using `rand::rng()`

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 57 images.

Affected packageAffected versionsFixed inImages
randcargo0.8.5, 0.9.1, 0.9.20.8.6, 0.9.357
OSV records
GHSA-cq8v-f236-94qcRUSTSEC-2026-0097

Charts affected

55 by stars
ChartLatestAffected imagesRadar Score
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0097.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
rand@0.9.1
0.9.3

Open the chart page →

1,722
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry RUSTSEC-2026-0097.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
rand@0.9.1
0.9.3

Open the chart page →

5,819
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0097.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rand@0.9.2
0.9.3

Open the chart page →

1,419
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry RUSTSEC-2026-0097.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
rand@0.9.1
0.9.3

Open the chart page →

2,396
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry RUSTSEC-2026-0097.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
rand@0.9.1
0.9.3

Open the chart page →

3,746

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
4
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
3
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-api-rest:v2.12.12579357ed812
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
bluenviron/mediamtx:latest-ffmpeg9d148b5f2990
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rand@0.9.2
rand@0.9.2
0.8.6
0.9.3
1
copyparty/ac:1.19.200a0a8605062c
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ethpandaops/panda-pulse:latest7b14deeb416a
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
evoapicloud/evolution-api:latest966625532d90
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
homeassistant/home-assistant:2026.75a531753cea9
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
linuxserver/bazarr:latesta20fb11a440d
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
linuxserver/lidarr:3.1.0c74c32408fdf
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
loeken/jellyfin:10.11.87efbc24e47b0
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rand@0.9.2
rand@0.9.2
0.8.6
0.9.3
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rand@0.9.2
rand@0.9.2
0.8.6
0.9.3
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
stashapp/stash:v0.31.1df744af5a0c9
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
szurubooru/server:2.5accf2ad9fbc3
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
xxczaki/discord-bot:e9f46b6aebac02e7b96ed41a3f62b26e871cf009bb919aac45dc
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
zenika/alpine-chrome:latesteb3378c1ed00
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rand@0.9.2
rand@0.9.2
0.8.6
0.9.3
1
ghcr.io/element-hq/matrix-authentication-service:1.24.052c18ffcc940
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
rand@0.9.2
rand@0.9.2
0.8.6
0.9.3
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
rand@0.8.5
rand@0.8.5
0.8.6
0.8.6
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
rand@0.9.1
rand@0.9.1
0.8.6
0.9.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.