StackRadar

RUSTSEC-2026-0190

Unscored

Advisory

Published 25 Jun 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
64
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

Unsoundness in `Error::downcast_mut()`

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
anyhowcargo1.0.71, 1.0.75, 1.0.79, 1.0.86+6 more1.0.10366
OSV records
RUSTSEC-2026-0190

Charts affected

64 by stars
ChartLatestAffected imagesRadar Score
mayastormayastorVerified publisher2.12.112 of 31See more

mayastor mayastor 2.12.1

12 of the 31 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
anyhow@1.0.92
1.0.103
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
anyhow@1.0.92
1.0.103
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
anyhow@1.0.92
1.0.103
openebs/mayastor-api-rest:v2.12.12579357ed812
anyhow@1.0.92
1.0.103
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
anyhow@1.0.92
1.0.103
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
anyhow@1.0.92
1.0.103
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
anyhow@1.0.92
1.0.103
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
anyhow@1.0.91
1.0.103
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
anyhow@1.0.92
1.0.103
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
anyhow@1.0.92
1.0.103
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
anyhow@1.0.92
1.0.103
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
anyhow@1.0.92
1.0.103

Open the chart page →

21,064
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
anyhow@1.0.102
1.0.103

Open the chart page →

1,672
szurubooru-servermy0nVerified publisher0.2.51 of 3See more

szurubooru-server my0n 0.2.5

1 of the 3 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
szurubooru/server:2.5accf2ad9fbc3
anyhow@1.0.79
1.0.103

Open the chart page →

1,043
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
anyhow@1.0.79
1.0.103

Open the chart page →

4,749
nextcloudquench-nextcloudVerified publisher0.0.121 of 2See more

nextcloud quench-nextcloud 0.0.12

1 of the 2 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/nextclouddigest-pinneda113d014a824
anyhow@1.0.98
1.0.103

Open the chart page →

140
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
anyhow@1.0.95
1.0.103

Open the chart page →

9,256
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
anyhow@1.0.98
1.0.103

Open the chart page →

5,338
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
anyhow@1.0.98
1.0.103

Open the chart page →

1,722
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
anyhow@1.0.98
1.0.103

Open the chart page →

5,819
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
anyhow@1.0.102
1.0.103

Open the chart page →

1,577
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
anyhow@1.0.102
1.0.103

Open the chart page →

19,560
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
anyhow@1.0.102
1.0.103

Open the chart page →

1,419
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
anyhow@1.0.98
1.0.103

Open the chart page →

2,396
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry RUSTSEC-2026-0190.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
anyhow@1.0.98
1.0.103

Open the chart page →

3,746

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
anyhow@1.0.98
1.0.103
1
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
anyhow@1.0.98
1.0.103
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
anyhow@1.0.79
1.0.103
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
anyhow@1.0.98
1.0.103
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
anyhow@1.0.98
1.0.103
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
anyhow@1.0.98
1.0.103
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
anyhow@1.0.98
1.0.103
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
anyhow@1.0.79
1.0.103
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
anyhow@1.0.98
1.0.103
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
anyhow@1.0.75
1.0.103
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
anyhow@1.0.102
1.0.103
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
anyhow@1.0.102
1.0.103
1
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
anyhow@1.0.98
1.0.103
1
ghcr.io/quenchworks/images/nextclouda113d014a824
anyhow@1.0.98
1.0.103
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
anyhow@1.0.98
1.0.103
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
anyhow@1.0.98
1.0.103
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.