StackRadar

RUSTSEC-2026-0235

Unscored

Advisory

Published 13 May 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
14
of 17,781 indexed, latest versions
Container images
12
deployed by those charts
Fix available
1 of 1
affected package

Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 12 images.

Affected packageAffected versionsFixed inImages
rkyvcargo0.7.46, 0.8.11, 0.8.15, 0.8.160.8.1712
OSV records
RUSTSEC-2026-0235

Charts affected

14 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rkyv@0.7.46
0.8.17

Open the chart page →

23,894
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rkyv@0.8.16
0.8.17

Open the chart page →

22,002
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rkyv@0.8.15
0.8.17

Open the chart page →

5,880
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rkyv@0.8.11
0.8.17

Open the chart page →

4,292
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
rkyv@0.8.16
0.8.17

Open the chart page →

8,158
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
rkyv@0.8.15
0.8.17

Open the chart page →

2,481
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rkyv@0.8.15
0.8.17

Open the chart page →

10,849
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rkyv@0.8.16
0.8.17

Open the chart page →

7,081
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
rkyv@0.8.16
0.8.17

Open the chart page →

2,444
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rkyv@0.7.46
0.8.17

Open the chart page →

21,064
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rkyv@0.8.16
0.8.17

Open the chart page →

1,672
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rkyv@0.8.16
0.8.17

Open the chart page →

1,577
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rkyv@0.8.16
0.8.17

Open the chart page →

19,560
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0235.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rkyv@0.8.15
0.8.17

Open the chart page →

1,419

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
rkyv@0.7.46
0.8.17
2
safeglobal/safe-config-service:latest09a5e495c219
rkyv@0.8.16
0.8.17
2
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rkyv@0.8.15
0.8.17
1
homeassistant/home-assistant:2026.75a531753cea9
rkyv@0.8.16
0.8.17
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rkyv@0.8.16
0.8.17
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rkyv@0.8.16
0.8.17
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rkyv@0.8.15
0.8.17
1
prowlercloud/prowler-api:5.31.14f252d579be2
rkyv@0.8.16
0.8.17
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rkyv@0.8.11
0.8.17
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
rkyv@0.8.15
0.8.17
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rkyv@0.8.16
0.8.17
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rkyv@0.8.15
0.8.17
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.