StackRadar

RUSTSEC-2026-0186

Unscored

Advisory

Published 20 Jun 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
1 of 1
affected package

Unchecked pointer offset in crate `memmap2`

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
memmap2cargo0.9.5, 0.9.7, 0.9.9, 0.9.100.9.1162
OSV records
RUSTSEC-2026-0186

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
memmap2@0.9.10
0.9.11

Open the chart page →

1,257
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
memmap2@0.9.10
0.9.11
dagster/user-code-example:1.13.225947f9ae481c
memmap2@0.9.10
0.9.11

Open the chart page →

3,455
netboxnetboxOfficialVerified publisher8.3.741 of 5See more

netbox netbox 8.3.74

1 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
memmap2@0.9.10
0.9.11

Open the chart page →

1,015
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
memmap2@0.9.10
0.9.11

Open the chart page →

635
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.0990720d1737a
memmap2@0.9.10
0.9.11

Open the chart page →

6,699
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
memmap2@0.9.10
0.9.11

Open the chart page →

22,002
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
memmap2@0.9.10
0.9.11

Open the chart page →

2,156
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
memmap2@0.9.10
0.9.11

Open the chart page →

5,786
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

8,489
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
memmap2@0.9.10
0.9.11

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
memmap2@0.9.10
0.9.11

Open the chart page →

2,133
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
memmap2@0.9.10
0.9.11

Open the chart page →

928
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
memmap2@0.9.10
0.9.11

Open the chart page →

1,272
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
memmap2@0.9.10
0.9.11

Open the chart page →

1,314
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
memmap2@0.9.10
0.9.11

Open the chart page →

1,767
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
memmap2@0.9.10
0.9.11

Open the chart page →

2,331
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
memmap2@0.9.10
0.9.11

Open the chart page →

5,852
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

19,691
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
memmap2@0.9.10
0.9.11

Open the chart page →

5,880
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
memmap2@0.9.10
0.9.11

Open the chart page →

3,657
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
memmap2@0.9.10
0.9.11

Open the chart page →

1,767
dagster-cloud-agentdagster-cloudVerified publisher1.13.221 of 1See more

dagster-cloud-agent dagster-cloud 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
memmap2@0.9.10
0.9.11

Open the chart page →

1,082
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
memmap2@0.9.10
0.9.11

Open the chart page →

2,133
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
memmap2@0.9.7
0.9.11

Open the chart page →

4,292
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

8,489
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
memmap2@0.9.10
0.9.11

Open the chart page →

2,133
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
memmap2@0.9.10
0.9.11

Open the chart page →

8,158
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
memmap2@0.9.10
0.9.11

Open the chart page →

4,839
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
memmap2@0.9.9
0.9.11

Open the chart page →

723
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
memmap2@0.9.10
0.9.11

Open the chart page →

5,817
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

4,626
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
memmap2@0.9.10
0.9.11

Open the chart page →

4,601
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
memmap2@0.9.10
0.9.11

Open the chart page →

2,481
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
memmap2@0.9.10
0.9.11

Open the chart page →

58,897
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
memmap2@0.9.10
0.9.11

Open the chart page →

2,305
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
memmap2@0.9.10
0.9.11

Open the chart page →

19,224
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
memmap2@0.9.10
0.9.11

Open the chart page →

2,158
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
memmap2@0.9.10
0.9.11

Open the chart page →

2,305
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
memmap2@0.9.10
0.9.11

Open the chart page →

10,849
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
memmap2@0.9.10
0.9.11

Open the chart page →

4,243
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
memmap2@0.9.10
0.9.11

Open the chart page →

5,714
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

26,612
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
memmap2@0.9.10
0.9.11

Open the chart page →

5,788
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
memmap2@0.9.5
0.9.11

Open the chart page →

953
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
memmap2@0.9.10
0.9.11

Open the chart page →

7,081
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
memmap2@0.9.10
0.9.11

Open the chart page →

2,444
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
memmap2@0.9.10
0.9.11

Open the chart page →

2,552
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
memmap2@0.9.10
0.9.11

Open the chart page →

1,672
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
memmap2@0.9.10
0.9.11

Open the chart page →

10,603

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
memmap2@0.9.10
0.9.11
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
memmap2@0.9.10
0.9.11
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
memmap2@0.9.10
0.9.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.