StackRadar

RUSTSEC-2026-0285

Medium

Advisory

Published 14 Sept 2026In the index since 15 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,787 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Carried by container images the latest versions of 31 of 17,787 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
rustlscargo0.23.23, 0.23.37, 0.23.38, 0.23.40+3 more0.23.4540
OSV records
RUSTSEC-2026-0285
Also known as
GHSA-2mjx-qc3c-rqvc

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
rustls@0.23.43
0.23.45

Open the chart page →

635
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rustls@0.23.40
0.23.45

Open the chart page →

22,002
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
rustls@0.23.43
0.23.45

Open the chart page →

2,156
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

8,489
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
rustls@0.23.43
0.23.45

Open the chart page →

2,133
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.45

Open the chart page →

1,767
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
rustls@0.23.41
0.23.45

Open the chart page →

5,852
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

19,691
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rustls@0.23.37
0.23.45

Open the chart page →

5,880
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.45

Open the chart page →

1,767
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
rustls@0.23.43
0.23.45

Open the chart page →

2,133
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls@0.23.41
0.23.45

Open the chart page →

1,879
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

8,489
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
rustls@0.23.38
0.23.45

Open the chart page →

8,158
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
rustls@0.23.43
0.23.45

Open the chart page →

4,839
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
rustls@0.23.41
0.23.45

Open the chart page →

5,817
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

4,626
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
rustls@0.23.42
0.23.45

Open the chart page →

58,897
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
rustls@0.23.41
0.23.45

Open the chart page →

2,158
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rustls@0.23.37
0.23.45

Open the chart page →

10,849
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

26,612
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.22 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.2

2 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
rustls@0.23.40
0.23.45
ghcr.io/buoyantio/extension-init:enterprise-2.20.28bd25a3ab5b5
rustls@0.23.40
0.23.45

Open the chart page →

92
linkerd-preview-multiclusterlinkerd-buoyantVerified publisher26.8.42 of 3See more

linkerd-preview-multicluster linkerd-buoyant 26.8.4

2 of the 3 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:preview-26.8.431a2f3922a61
rustls@0.23.42
0.23.45
ghcr.io/buoyantio/extension-init:preview-26.8.403fbb627a0cf
rustls@0.23.40
0.23.45

Open the chart page →

51
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
rustls@0.23.40
0.23.45

Open the chart page →

2,444
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls@0.23.38
0.23.45

Open the chart page →

1,672
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
rustls@0.23.43
0.23.45

Open the chart page →

10,603
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45

Open the chart page →

4,626
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
rustls@0.23.43
0.23.45
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rustls@0.23.41
0.23.45
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rustls@0.23.41
0.23.45

Open the chart page →

71,208
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls@0.23.23
0.23.45

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry RUSTSEC-2026-0285.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
rustls@0.23.42
0.23.45

Open the chart page →

7,849

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.45
7
localstack/localstack-pro:latest4aef81c53168
rustls@0.23.43
0.23.45
2
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.45
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
rustls@0.23.43
0.23.45
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
rustls@0.23.43
0.23.45
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
rustls@0.23.41
0.23.45
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rustls@0.23.37
0.23.45
1
homeassistant/home-assistant:2026.75a531753cea9
rustls@0.23.40
0.23.45
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rustls@0.23.40
0.23.45
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls@0.23.38
0.23.45
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls@0.23.41
0.23.45
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rustls@0.23.37
0.23.45
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
rustls@0.23.42
0.23.45
1
opennode/waldur-mastermind:8.1.24c82b15d9042
rustls@0.23.43
0.23.45
1
prowlercloud/prowler-api:5.31.14f252d579be2
rustls@0.23.38
0.23.45
1
yetiplatform/yeti:2.9.09bcbe2650a14
rustls@0.23.43
0.23.45
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
rustls@0.23.42
0.23.45
1
ghcr.io/buoyantio/controller:preview-26.8.431a2f3922a61
rustls@0.23.42
0.23.45
1
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
rustls@0.23.40
0.23.45
1
ghcr.io/buoyantio/extension-init:preview-26.8.403fbb627a0cf
rustls@0.23.40
0.23.45
1
ghcr.io/buoyantio/extension-init:enterprise-2.20.28bd25a3ab5b5
rustls@0.23.40
0.23.45
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls@0.23.23
0.23.45
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
rustls@0.23.41
0.23.45
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rustls@0.23.41
0.23.45
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rustls@0.23.41
0.23.45
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.