StackRadar

RUSTSEC-2026-0186

Unscored

Advisory

Published 20 Jun 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
1 of 1
affected package

Unchecked pointer offset in crate `memmap2`

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
memmap2cargo0.9.5, 0.9.7, 0.9.9, 0.9.100.9.1162
OSV records
RUSTSEC-2026-0186

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
memmap2@0.9.10
0.9.11

Open the chart page →

10,603
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
memmap2@0.9.10
0.9.11

Open the chart page →

838
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11

Open the chart page →

4,626
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
memmap2@0.9.10
0.9.11
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
memmap2@0.9.10
0.9.11

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
memmap2@0.9.10
0.9.11

Open the chart page →

6,583
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
memmap2@0.9.10
0.9.11

Open the chart page →

1,577
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
memmap2@0.9.10
0.9.11
safeglobal/safe-transaction-service:latest80db836cc5d5
memmap2@0.9.10
0.9.11

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest80db836cc5d5
memmap2@0.9.10
0.9.11

Open the chart page →

16,620
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
memmap2@0.9.10
0.9.11

Open the chart page →

1,419
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry RUSTSEC-2026-0186.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
memmap2@0.9.10
0.9.11

Open the chart page →

7,849

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
memmap2@0.9.10
0.9.11
7
apache/superset:6.1.0:latest16b50bbef664
memmap2@0.9.10
0.9.11
3
localstack/localstack-pro:latest4aef81c53168
memmap2@0.9.10
0.9.11
3
dagster/user-code-example:1.13.225947f9ae481c
memmap2@0.9.10
0.9.11
2
nacos/nacos-server:latest1c191c30c8cd
memmap2@0.9.10
0.9.11
2
safeglobal/safe-config-service:latest09a5e495c219
memmap2@0.9.10
0.9.11
2
safeglobal/safe-transaction-service:latest80db836cc5d5
memmap2@0.9.10
0.9.11
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
memmap2@0.9.10
0.9.11
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
memmap2@0.9.10
0.9.11
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
memmap2@0.9.10
0.9.11
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
memmap2@0.9.10
0.9.11
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
memmap2@0.9.10
0.9.11
1
dagster/dagster-celery-k8s:1.13.22e29a64392e12
memmap2@0.9.10
0.9.11
1
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
memmap2@0.9.10
0.9.11
1
homeassistant/home-assistant:2026.75a531753cea9
memmap2@0.9.10
0.9.11
1
inventree/inventree:1.5.4a946ec09da3e
memmap2@0.9.10
0.9.11
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
memmap2@0.9.10
0.9.11
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
memmap2@0.9.10
0.9.11
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
memmap2@0.9.10
0.9.11
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
memmap2@0.9.10
0.9.11
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
memmap2@0.9.10
0.9.11
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
memmap2@0.9.10
0.9.11
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
memmap2@0.9.10
0.9.11
1
opennode/waldur-mastermind:8.1.24c82b15d9042
memmap2@0.9.10
0.9.11
1
prefecthq/prefect:3.8.5-python3.110018d02259bc
memmap2@0.9.10
0.9.11
1
prowlercloud/prowler-api:5.31.14f252d579be2
memmap2@0.9.10
0.9.11
1
weblate/weblate:2026.9.1.0990720d1737a
memmap2@0.9.10
0.9.11
1
yetiplatform/yeti:2.9.09bcbe2650a14
memmap2@0.9.10
0.9.11
1
yetiplatform/yeti:latest9c3006cedcca
memmap2@0.9.10
0.9.11
1
zenmldocker/zenml-server:0.96.409027a6312ee
memmap2@0.9.10
0.9.11
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
memmap2@0.9.10
0.9.11
1
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
memmap2@0.9.9
0.9.11
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
memmap2@0.9.7
0.9.11
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
memmap2@0.9.10
0.9.11
1
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
memmap2@0.9.10
0.9.11
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
memmap2@0.9.10
0.9.11
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
memmap2@0.9.10
0.9.11
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
memmap2@0.9.5
0.9.11
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
memmap2@0.9.10
0.9.11
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
memmap2@0.9.10
0.9.11
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
memmap2@0.9.10
0.9.11
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
memmap2@0.9.10
0.9.11
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
memmap2@0.9.10
0.9.11
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
memmap2@0.9.10
0.9.11
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
memmap2@0.9.10
0.9.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.