StackRadar

RUSTSEC-2026-0341

High

Advisory

Published 17 Aug 2026In the index since 13 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 18,117 indexed, latest versions
Container images
42
deployed by those charts
Fix available
1 of 1
affected package

Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

Carried by container images the latest versions of 34 of 18,117 indexed charts deploy, on 42 images.

Affected packageAffected versionsFixed inImages
quinn-protocargo0.11.15, 0.11.160.11.1742
OSV records
RUSTSEC-2026-0341
Also known as
GHSA-qfwj-vfxf-92j2

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.31 of 1See more

authentik goauthentik 2026.8.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
quinn-proto@0.11.15
0.11.17

Open the chart page →

1,474
datahubdatahubVerified publisher1.1.71 of 4See more

datahub datahub 1.1.7

1 of the 4 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
quinn-proto@0.11.15
0.11.17

Open the chart page →

1,596
prefect-serverprefectVerified publisher2026.10.61630151 of 2See more

prefect-server prefect 2026.10.6163015

1 of the 2 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.8-python3.1119463f92420b
quinn-proto@0.11.15
0.11.17

Open the chart page →

6,128
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
quinn-proto@0.11.15
0.11.17

Open the chart page →

3,259
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
quinn-proto@0.11.15
0.11.17

Open the chart page →

2,708
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
quinn-proto@0.11.15
0.11.17

Open the chart page →

4,913
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
quinn-proto@0.11.15
0.11.17

Open the chart page →

2,708
eoapieoapiOfficialVerified publisher0.17.31 of 7See more

eoapi eoapi 0.17.3

1 of the 7 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
quinn-proto@0.11.15
0.11.17

Open the chart page →

4,584
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest3e6710a7ab2a
quinn-proto@0.11.15
0.11.17

Open the chart page →

3,186
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
quinn-proto@0.11.15
0.11.17

Open the chart page →

11,124
galaxycloudve6.8.81 of 3See more

galaxy cloudve 6.8.8

1 of the 3 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
quinn-proto@0.11.15
0.11.17

Open the chart page →

7,473
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
quinn-proto@0.11.15
0.11.17

Open the chart page →

1,474
csghubcsghubVerified publisher2.5.21 of 35See more

csghub csghub 2.5.2

1 of the 35 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.9-ee7d0271e26521
quinn-proto@0.11.15
0.11.17

Open the chart page →

68,209
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
quinn-proto@0.11.15
0.11.17

Open the chart page →

2,791
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
quinn-proto@0.11.15
0.11.17

Open the chart page →

3,302
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
quinn-proto@0.11.15
0.11.17

Open the chart page →

2,791
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
quinn-proto@0.11.15
0.11.17

Open the chart page →

8,936
netboxhelmforgeVerified publisher2.0.31 of 4See more

netbox helmforge 2.0.3

1 of the 4 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
quinn-proto@0.11.15
0.11.17

Open the chart page →

4,996
supersethelmforgeVerified publisher1.3.81 of 5See more

superset helmforge 1.3.8

1 of the 5 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
quinn-proto@0.11.15
0.11.17

Open the chart page →

6,493
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
quinn-proto@0.11.15
0.11.17

Open the chart page →

35,328
inventreeinventreeOfficialVerified publisher0.4.311 of 2See more

inventree inventree 0.4.31

1 of the 2 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
inventree/inventree:1.5.74aefd6e2bb0e
quinn-proto@0.11.15
0.11.17

Open the chart page →

5,933
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
quinn-proto@0.11.15
0.11.17

Open the chart page →

3,341
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
quinn-proto@0.11.15
0.11.17

Open the chart page →

1,256
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
quinn-proto@0.11.15
0.11.17
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
quinn-proto@0.11.15
0.11.17

Open the chart page →

242,619
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
quinn-proto@0.11.15
0.11.17

Open the chart page →

2,142
cosmian-kmsquench-cosmian-kmsVerified publisher0.0.91 of 1See more

cosmian-kms quench-cosmian-kms 0.0.9

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cosmian-kmsdigest-pinnedbb9373952a6f
quinn-proto@0.11.16
0.11.17

Open the chart page →

84
garagequench-garageVerified publisher0.0.151 of 1See more

garage quench-garage 0.0.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/garagedigest-pinned48ab1e3c36e6
quinn-proto@0.11.15
0.11.17

Open the chart page →

126
lgtm-stackquench-lgtm-stackVerified publisher0.0.371 of 9See more

lgtm-stack quench-lgtm-stack 0.0.37

1 of the 9 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
quinn-proto@0.11.16
0.11.17

Open the chart page →

1,228
litellmquench-litellmVerified publisher0.0.141 of 1See more

litellm quench-litellm 0.0.14

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned50e9b958e120
quinn-proto@0.11.16
0.11.17

Open the chart page →

100
llm-stackquench-llm-stackVerified publisher0.0.252 of 3See more

llm-stack quench-llm-stack 0.0.25

2 of the 3 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned50e9b958e120
quinn-proto@0.11.16
0.11.17
ghcr.io/quenchworks/images/qdrantdigest-pinnedc9ec047729db
quinn-proto@0.11.16
0.11.17

Open the chart page →

196
logging-stackquench-logging-stackVerified publisher0.0.211 of 3See more

logging-stack quench-logging-stack 0.0.21

1 of the 3 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
quinn-proto@0.11.16
0.11.17

Open the chart page →

1,031
meilisearchquench-meilisearchVerified publisher0.0.201 of 1See more

meilisearch quench-meilisearch 0.0.20

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/meilisearchdigest-pinned784c28a4fcf4
quinn-proto@0.11.16
0.11.17

Open the chart page →

139
qdrantquench-qdrantVerified publisher0.0.191 of 1See more

qdrant quench-qdrant 0.0.19

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/qdrantdigest-pinnedc9ec047729db
quinn-proto@0.11.16
0.11.17

Open the chart page →

96
vectorquench-vectorVerified publisher0.0.151 of 1See more

vector quench-vector 0.0.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0341.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
quinn-proto@0.11.16
0.11.17

Open the chart page →

107

Container images carrying it

42 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/superset:6.1.0:latest16b50bbef664
quinn-proto@0.11.15
0.11.17
3
ghcr.io/quenchworks/images/vector6ebe2c55233d
quinn-proto@0.11.16
0.11.17
3
nacos/nacos-server:latest1c191c30c8cd
quinn-proto@0.11.15
0.11.17
2
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
quinn-proto@0.11.15
0.11.17
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
quinn-proto@0.11.15
0.11.17
2
ghcr.io/quenchworks/images/litellm50e9b958e120
quinn-proto@0.11.16
0.11.17
2
ghcr.io/quenchworks/images/qdrantc9ec047729db
quinn-proto@0.11.16
0.11.17
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
quinn-proto@0.11.15
0.11.17
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
quinn-proto@0.11.15
0.11.17
1
inventree/inventree:1.5.74aefd6e2bb0e
quinn-proto@0.11.15
0.11.17
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
quinn-proto@0.11.15
0.11.17
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
quinn-proto@0.11.15
0.11.17
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
quinn-proto@0.11.15
0.11.17
1
prefecthq/prefect:3.8.8-python3.1119463f92420b
quinn-proto@0.11.15
0.11.17
1
toniblyx/prowler:stable9dbcc3c9abd7
quinn-proto@0.11.15
0.11.17
1
yetiplatform/yeti:2.9.09bcbe2650a14
quinn-proto@0.11.15
0.11.17
1
ghcr.io/home-assistant/home-assistant:2026.9.4:latest3e6710a7ab2a
quinn-proto@0.11.15
0.11.17
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
quinn-proto@0.11.15
0.11.17
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
quinn-proto@0.11.15
0.11.17
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
quinn-proto@0.11.15
0.11.17
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
quinn-proto@0.11.15
0.11.17
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
quinn-proto@0.11.15
0.11.17
1
ghcr.io/quenchworks/images/cosmian-kmsbb9373952a6f
quinn-proto@0.11.16
0.11.17
1
ghcr.io/quenchworks/images/garage48ab1e3c36e6
quinn-proto@0.11.15
0.11.17
1
ghcr.io/quenchworks/images/meilisearch784c28a4fcf4
quinn-proto@0.11.16
0.11.17
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
quinn-proto@0.11.15
0.11.17
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
quinn-proto@0.11.15
0.11.17
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.