StackRadar

RUSTSEC-2026-0258

Unscored

Advisory

Published 17 Aug 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
64
of 17,781 indexed, latest versions
Container images
76
deployed by those charts
Fix available
1 of 1
affected package

h2 unbounded empty DATA frames

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 76 images.

Affected packageAffected versionsFixed inImages
h2cargo0.3.26, 0.3.27, 0.4.6, 0.4.7+4 more0.4.1676
OSV records
RUSTSEC-2026-0258
Also known as
GHSA-q83h-524g-xf6h

Charts affected

64 by stars
ChartLatestAffected imagesRadar Score
mayastormayastorVerified publisher2.12.112 of 31See more

mayastor mayastor 2.12.1

12 of the 31 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
h2@0.4.12
0.4.16
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
h2@0.4.12
0.4.16
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
h2@0.4.12
0.4.16
openebs/mayastor-api-rest:v2.12.12579357ed812
h2@0.4.12
0.4.16
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
h2@0.3.27
0.4.16
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
h2@0.4.12
0.4.16
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
h2@0.4.6
0.4.16
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
h2@0.4.6
0.4.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
h2@0.4.6
0.4.16
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
h2@0.3.26
0.4.16
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
h2@0.3.26
0.4.16
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
h2@0.4.12
0.4.16

Open the chart page →

21,064
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
h2@0.4.13
0.4.16

Open the chart page →

1,672
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
h2@0.4.15
0.4.16

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
h2@0.4.15
0.4.16

Open the chart page →

10,603
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
h2@0.4.15
0.4.16

Open the chart page →

838
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16

Open the chart page →

4,626
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
h2@0.4.15
0.4.16
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
h2@0.4.15
0.4.16

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
h2@0.4.15
0.4.16

Open the chart page →

6,583
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
h2@0.4.7
0.4.16

Open the chart page →

9,256
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
h2@0.4.14
0.4.16

Open the chart page →

1,577
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
h2@0.4.14
0.4.16
safeglobal/safe-transaction-service:latest80db836cc5d5
h2@0.4.15
0.4.16

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest80db836cc5d5
h2@0.4.15
0.4.16

Open the chart page →

16,620
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
h2@0.4.13
0.4.16

Open the chart page →

1,419
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry RUSTSEC-2026-0258.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
h2@0.4.15
0.4.16

Open the chart page →

7,849

Container images carrying it

76 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
h2@0.4.15
0.4.16
7
apache/superset:6.1.0:latest16b50bbef664
h2@0.4.15
0.4.16
3
localstack/localstack-pro:latest4aef81c53168
h2@0.4.15
0.4.16
3
dagster/user-code-example:1.13.225947f9ae481c
h2@0.4.15
0.4.16
2
nacos/nacos-server:latest1c191c30c8cd
h2@0.4.15
0.4.16
2
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
h2@0.4.12
0.4.16
2
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
h2@0.4.12
0.4.16
2
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
h2@0.4.12
0.4.16
2
openebs/mayastor-api-rest:v2.12.12579357ed812
h2@0.4.12
0.4.16
2
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
h2@0.3.27
0.4.16
2
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
h2@0.4.12
0.4.16
2
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
h2@0.4.6
0.4.16
2
openebs/mayastor-io-engine:v2.12.1bbe5e87b69af
h2@0.4.6
0.4.16
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
h2@0.4.6
0.4.16
2
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
h2@0.3.26
0.4.16
2
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
h2@0.3.26
0.4.16
2
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
h2@0.4.12
0.4.16
2
safeglobal/safe-config-service:latest09a5e495c219
h2@0.4.14
0.4.16
2
safeglobal/safe-transaction-service:latest80db836cc5d5
h2@0.4.15
0.4.16
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
h2@0.4.15
0.4.16
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
h2@0.4.15
0.4.16
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
h2@0.4.15
0.4.16
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
h2@0.4.15
0.4.16
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
h2@0.4.13
0.4.16
1
dagster/dagster-celery-k8s:1.13.22e29a64392e12
h2@0.4.15
0.4.16
1
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
h2@0.4.15
0.4.16
1
homeassistant/home-assistant:2026.75a531753cea9
h2@0.4.14
0.4.16
1
inventree/inventree:1.5.4a946ec09da3e
h2@0.4.15
0.4.16
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
h2@0.4.14
0.4.16
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
h2@0.4.15
0.4.16
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
h2@0.4.15
0.4.16
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
h2@0.4.13
0.4.16
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
h2@0.4.15
0.4.16
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
h2@0.4.13
0.4.16
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
h2@0.4.15
0.4.16
1
opennode/waldur-mastermind:8.1.24c82b15d9042
h2@0.4.15
0.4.16
1
prefecthq/prefect:3.8.5-python3.110018d02259bc
h2@0.4.15
0.4.16
1
prowlercloud/prowler-api:5.31.14f252d579be2
h2@0.4.13
0.4.16
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
h2@0.3.26
0.4.16
1
weblate/weblate:2026.9.1.0990720d1737a
h2@0.4.15
0.4.16
1
yetiplatform/yeti:2.9.09bcbe2650a14
h2@0.4.15
0.4.16
1
yetiplatform/yeti:latest9c3006cedcca
h2@0.4.15
0.4.16
1
zenmldocker/zenml-server:0.96.409027a6312ee
h2@0.4.15
0.4.16
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
h2@0.4.15
0.4.16
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
h2@0.4.12
0.4.16
1
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
h2@0.4.15
0.4.16
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
h2@0.4.7
0.4.16
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
h2@0.4.13
0.4.16
1
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
h2@0.4.15
0.4.16
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
h2@0.4.15
0.4.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.