StackRadar

RUSTSEC-2026-0258

Unscored

Advisory

Published 17 Aug 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
64
of 17,781 indexed, latest versions
Container images
76
deployed by those charts
Fix available
1 of 1
affected package

h2 unbounded empty DATA frames

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 76 images.

Affected packageAffected versionsFixed inImages
h2cargo0.3.26, 0.3.27, 0.4.6, 0.4.7+4 more0.4.1676
OSV records
RUSTSEC-2026-0258
Also known as
GHSA-q83h-524g-xf6h

Charts affected

64 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
h2@0.4.15
0.4.16

Open the chart page →

1,257
openebsopenebsOfficialVerified publisher4.6.112 of 35See more

openebs openebs 4.6.1

12 of the 35 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
h2@0.4.12
0.4.16
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
h2@0.4.12
0.4.16
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
h2@0.4.12
0.4.16
openebs/mayastor-api-rest:v2.12.12579357ed812
h2@0.4.12
0.4.16
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
h2@0.3.27
0.4.16
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
h2@0.4.12
0.4.16
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
h2@0.4.6
0.4.16
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
h2@0.4.6
0.4.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
h2@0.4.6
0.4.16
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
h2@0.3.26
0.4.16
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
h2@0.3.26
0.4.16
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
h2@0.4.12
0.4.16

Open the chart page →

23,894
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
h2@0.4.15
0.4.16
dagster/user-code-example:1.13.225947f9ae481c
h2@0.4.15
0.4.16

Open the chart page →

3,455
netboxnetboxOfficialVerified publisher8.3.741 of 5See more

netbox netbox 8.3.74

1 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
h2@0.4.15
0.4.16

Open the chart page →

1,015
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
h2@0.4.15
0.4.16

Open the chart page →

635
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.0990720d1737a
h2@0.4.15
0.4.16

Open the chart page →

6,699
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
h2@0.4.14
0.4.16

Open the chart page →

22,002
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
h2@0.4.15
0.4.16

Open the chart page →

2,156
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
h2@0.4.15
0.4.16

Open the chart page →

5,786
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

8,489
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
h2@0.4.15
0.4.16

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
h2@0.4.15
0.4.16

Open the chart page →

2,133
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
h2@0.4.15
0.4.16

Open the chart page →

928
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
h2@0.4.15
0.4.16

Open the chart page →

1,272
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
h2@0.4.15
0.4.16

Open the chart page →

1,314
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
h2@0.4.15
0.4.16

Open the chart page →

1,767
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
h2@0.4.15
0.4.16

Open the chart page →

2,331
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
h2@0.4.15
0.4.16

Open the chart page →

5,852
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

19,691
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
h2@0.4.13
0.4.16

Open the chart page →

5,880
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
h2@0.4.15
0.4.16

Open the chart page →

3,657
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
h2@0.4.15
0.4.16

Open the chart page →

1,767
dagster-cloud-agentdagster-cloudVerified publisher1.13.221 of 1See more

dagster-cloud-agent dagster-cloud 1.13.22

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
h2@0.4.15
0.4.16

Open the chart page →

1,082
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
h2@0.4.15
0.4.16

Open the chart page →

2,133
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
h2@0.4.12
0.4.16

Open the chart page →

4,292
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

8,489
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
h2@0.4.15
0.4.16

Open the chart page →

2,133
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
h2@0.4.13
0.4.16

Open the chart page →

8,158
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
h2@0.4.15
0.4.16

Open the chart page →

4,839
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
h2@0.4.15
0.4.16

Open the chart page →

5,817
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

4,626
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
h2@0.4.15
0.4.16

Open the chart page →

4,601
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
h2@0.4.13
0.4.16

Open the chart page →

2,481
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
h2@0.4.15
0.4.16

Open the chart page →

58,897
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
h2@0.4.15
0.4.16

Open the chart page →

2,305
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
h2@0.4.15
0.4.16

Open the chart page →

19,224
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
h2@0.4.15
0.4.16

Open the chart page →

2,158
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
h2@0.4.15
0.4.16

Open the chart page →

2,305
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
h2@0.4.13
0.4.16

Open the chart page →

10,849
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
h2@0.4.15
0.4.16

Open the chart page →

4,243
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
h2@0.4.15
0.4.16

Open the chart page →

5,714
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

26,612
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
h2@0.4.15
0.4.16

Open the chart page →

5,788
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
h2@0.3.26
0.4.16

Open the chart page →

953
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
h2@0.3.26
0.4.16

Open the chart page →

3,354
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
h2@0.4.13
0.4.16

Open the chart page →

7,081
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.21 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
h2@0.4.15
0.4.16

Open the chart page →

92
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
h2@0.4.14
0.4.16

Open the chart page →

2,444
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
h2@0.4.15
0.4.16

Open the chart page →

2,552

Container images carrying it

76 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
h2@0.4.15
0.4.16
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
h2@0.3.26
0.4.16
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
h2@0.4.15
0.4.16
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
h2@0.4.15
0.4.16
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
h2@0.4.13
0.4.16
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
h2@0.4.15
0.4.16
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
h2@0.4.13
0.4.16
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
h2@0.4.15
0.4.16
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
h2@0.4.15
0.4.16
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
h2@0.4.15
0.4.16
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
h2@0.4.15
0.4.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.