StackRadar

RUSTSEC-2026-0221

Unscored

Advisory

Published 13 Jul 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
64
of 17,781 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 1
affected package

`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
event-listenercargo5.3.1, 5.4.0, 5.4.15.4.274
OSV records
RUSTSEC-2026-0221

Charts affected

64 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
event-listener@5.4.1
5.4.2

Open the chart page →

1,257
openebsopenebsOfficialVerified publisher4.6.110 of 35See more

openebs openebs 4.6.1

10 of the 35 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
event-listener@5.3.1
5.4.2
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
event-listener@5.3.1
5.4.2
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
event-listener@5.3.1
5.4.2
openebs/mayastor-api-rest:v2.12.12579357ed812
event-listener@5.3.1
5.4.2
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
event-listener@5.3.1
5.4.2
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
event-listener@5.3.1
5.4.2
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
event-listener@5.3.1
5.4.2
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
event-listener@5.3.1
5.4.2
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
event-listener@5.3.1
5.4.2
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
event-listener@5.3.1
5.4.2

Open the chart page →

23,894
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
event-listener@5.4.1
5.4.2
dagster/user-code-example:1.13.225947f9ae481c
event-listener@5.4.1
5.4.2

Open the chart page →

3,455
netboxnetboxOfficialVerified publisher8.3.741 of 5See more

netbox netbox 8.3.74

1 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
event-listener@5.4.1
5.4.2

Open the chart page →

1,015
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
event-listener@5.4.1
5.4.2

Open the chart page →

635
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.0990720d1737a
event-listener@5.4.1
5.4.2

Open the chart page →

6,699
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
event-listener@5.4.1
5.4.2

Open the chart page →

22,002
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
event-listener@5.4.1
5.4.2

Open the chart page →

2,156
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
event-listener@5.4.1
5.4.2

Open the chart page →

5,786
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

8,489
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
event-listener@5.4.1
5.4.2

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
event-listener@5.4.1
5.4.2

Open the chart page →

2,133
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
event-listener@5.4.1
5.4.2

Open the chart page →

928
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
event-listener@5.4.1
5.4.2

Open the chart page →

1,272
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
event-listener@5.4.1
5.4.2

Open the chart page →

1,314
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
event-listener@5.4.1
5.4.2

Open the chart page →

1,767
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
event-listener@5.4.1
5.4.2

Open the chart page →

2,331
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
event-listener@5.4.1
5.4.2

Open the chart page →

5,852
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

19,691
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
event-listener@5.4.1
5.4.2

Open the chart page →

5,880
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
event-listener@5.4.1
5.4.2

Open the chart page →

3,657
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
event-listener@5.4.1
5.4.2

Open the chart page →

1,767
dagster-cloud-agentdagster-cloudVerified publisher1.13.221 of 1See more

dagster-cloud-agent dagster-cloud 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
event-listener@5.4.1
5.4.2

Open the chart page →

1,082
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
event-listener@5.4.1
5.4.2

Open the chart page →

2,133
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
event-listener@5.4.0
5.4.2

Open the chart page →

4,292
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

8,489
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
event-listener@5.4.1
5.4.2

Open the chart page →

2,133
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
event-listener@5.4.1
5.4.2

Open the chart page →

8,158
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
event-listener@5.4.1
5.4.2

Open the chart page →

4,839
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
event-listener@5.4.1
5.4.2

Open the chart page →

5,817
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

4,626
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
event-listener@5.4.1
5.4.2

Open the chart page →

4,601
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
event-listener@5.4.1
5.4.2

Open the chart page →

2,481
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
event-listener@5.4.1
5.4.2

Open the chart page →

58,897
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
event-listener@5.4.1
5.4.2

Open the chart page →

2,305
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
event-listener@5.4.1
5.4.2

Open the chart page →

19,224
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
event-listener@5.4.1
5.4.2

Open the chart page →

2,158
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
event-listener@5.4.1
5.4.2

Open the chart page →

2,305
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
event-listener@5.4.1
5.4.2

Open the chart page →

10,849
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
event-listener@5.4.1
5.4.2

Open the chart page →

4,243
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
event-listener@5.4.1
5.4.2

Open the chart page →

5,714
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
event-listener@5.4.1
5.4.2

Open the chart page →

26,612
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
event-listener@5.4.1
5.4.2

Open the chart page →

5,788
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
event-listener@5.3.1
5.4.2

Open the chart page →

3,354
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
event-listener@5.4.1
5.4.2

Open the chart page →

7,081
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.21 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
event-listener@5.4.1
5.4.2

Open the chart page →

92
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
event-listener@5.4.1
5.4.2

Open the chart page →

2,444
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
event-listener@5.4.1
5.4.2

Open the chart page →

2,552
matrix-authentication-servicematrix-authentication-serviceVerified publisher0.1.241 of 1See more

matrix-authentication-service matrix-authentication-service 0.1.24

1 of the 1 container images this version deploys carry RUSTSEC-2026-0221.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:1.24.052c18ffcc940
event-listener@5.4.1
5.4.2

Open the chart page →

298

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
event-listener@5.4.1
5.4.2
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
event-listener@5.4.1
5.4.2
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
event-listener@5.4.1
5.4.2
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
event-listener@5.4.1
5.4.2
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
event-listener@5.4.1
5.4.2
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
event-listener@5.4.1
5.4.2
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
event-listener@5.4.1
5.4.2
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
event-listener@5.4.1
5.4.2
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
event-listener@5.4.1
5.4.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.