StackRadar

RUSTSEC-2026-0346

Medium

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
89
of 18,131 indexed, latest versions
Container images
102
deployed by those charts
Fix available
1 of 1
affected package

`Debug` impls for client session values expose TLS secrets

Carried by container images the latest versions of 89 of 18,131 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
rustlscargo0.21.12, 0.23.19, 0.23.23, 0.23.28+8 more0.23.46102
OSV records
RUSTSEC-2026-0346
Also known as
GHSA-c8m5-c952-6cm4

Charts affected

89 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.41 of 1See more

authentik goauthentik 2026.8.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.4e7226ae116da
rustls@0.23.41
0.23.46

Open the chart page →

1,337
home-assistanthelm-hassVerified publisher0.3.861 of 1See more

home-assistant helm-hass 0.3.86

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
rustls@0.23.45
0.23.46

Open the chart page →

2,837
openebsopenebsOfficialVerified publisher4.6.212 of 35See more

openebs openebs 4.6.2

12 of the 35 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.200429e487478
rustls@0.23.19
0.23.46
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls@0.23.19
0.23.46
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls@0.23.19
0.23.46
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls@0.23.19
0.23.46
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls@0.23.19
0.23.46
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls@0.23.19
0.23.46
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls@0.23.19
0.23.46
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls@0.23.40
0.23.46
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls@0.23.19
0.23.46
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls@0.21.12
0.23.46
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls@0.21.12
0.23.46
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls@0.23.19
0.23.46

Open the chart page →

36,155
dagsterdagsterVerified publisher1.13.262 of 5See more

dagster dagster 1.13.26

2 of the 5 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls@0.23.45
0.23.46
dagster/user-code-example:1.13.265c98e09b2aeb
rustls@0.23.45
0.23.46

Open the chart page →

4,144
netboxnetboxOfficialVerified publisher8.3.921 of 5See more

netbox netbox 8.3.92

1 of the 5 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
rustls@0.23.45
0.23.46

Open the chart page →

1,652
datahubdatahubVerified publisher1.1.71 of 4See more

datahub datahub 1.1.7

1 of the 4 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
rustls@0.23.43
0.23.46

Open the chart page →

1,605
weblateweblateOfficialVerified publisher0.5.431 of 3See more

weblate weblate 0.5.43

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
weblate/weblate:2026.10.1.1b0f200f38d70
rustls@0.23.45
0.23.46

Open the chart page →

7,547
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rustls@0.23.40
0.23.46

Open the chart page →

75,089
localstacklocalstack0.7.11 of 1See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
rustls@0.23.45
0.23.46

Open the chart page →

2,334
prefect-serverprefectVerified publisher2026.10.61630151 of 2See more

prefect-server prefect 2026.10.6163015

1 of the 2 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.8-python3.1119463f92420b
rustls@0.23.43
0.23.46

Open the chart page →

6,171
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
rustls@0.23.45
0.23.46

Open the chart page →

9,467
home-assistantalekcVerified publisher2.12.11 of 1See more

home-assistant alekc 2.12.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
rustls@0.23.45
0.23.46

Open the chart page →

2,837
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
rustls@0.23.43
0.23.46

Open the chart page →

3,277
dagster-user-deploymentsdagsterVerified publisher1.13.261 of 1See more

dagster-user-deployments dagster 1.13.26

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.265c98e09b2aeb
rustls@0.23.45
0.23.46

Open the chart page →

774
zenmlzenml0.98.01 of 1See more

zenml zenml 0.98.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.98.06a03880ace49
rustls@0.23.45
0.23.46

Open the chart page →

1,286
dyff-apidyff-apiVerified publisher0.57.131 of 1See more

dyff-api dyff-api 0.57.13

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.13264651006fb2
rustls@0.23.45
0.23.46

Open the chart page →

1,302
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.46

Open the chart page →

2,715
hermes-agenthermes-agentVerified publisher1.18.01 of 1See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
rustls@0.23.37
0.23.46

Open the chart page →

7,062
home-assistanthome-assistantVerified publisher0.5.131 of 3See more

home-assistant home-assistant 0.5.13

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.01b64d38f38d9
rustls@0.23.45
0.23.46

Open the chart page →

3,049
skypilotskypilotOfficialVerified publisher0.14.01 of 3See more

skypilot skypilot 0.14.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.0a8362d205365
rustls@0.23.45
0.23.46

Open the chart page →

6,256
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
rustls@0.23.45
0.23.46

Open the chart page →

5,335
paperless-ngxadnoctemVerified publisher0.5.01 of 5See more

paperless-ngx adnoctem 0.5.0

1 of the 5 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
rustls@0.23.45
0.23.46

Open the chart page →

27,040
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rustls@0.23.37
0.23.46

Open the chart page →

7,757
music-assistantbdclark-helm-chartsVerified publisher0.4.141 of 1See more

music-assistant bdclark-helm-charts 0.4.14

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
rustls@0.23.45
0.23.46

Open the chart page →

4,818
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.46

Open the chart page →

2,715
dagster-cloud-agentdagster-cloudVerified publisher1.13.261 of 1See more

dagster-cloud-agent dagster-cloud 1.13.26

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
rustls@0.23.45
0.23.46

Open the chart page →

1,250
eoapieoapiOfficialVerified publisher0.17.31 of 7See more

eoapi eoapi 0.17.3

1 of the 7 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
rustls@0.23.42
0.23.46

Open the chart page →

4,595
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest3e6710a7ab2a
rustls@0.23.43
0.23.46

Open the chart page →

3,204
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
rustls@0.23.29
0.23.46

Open the chart page →

4,805
home-assistantloeken-at-homeVerified publisher2026.9.21 of 1See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.9.2b1dff5b4c593
rustls@0.23.43
0.23.46

Open the chart page →

2,111
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls@0.23.41
0.23.46

Open the chart page →

2,293
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
rustls@0.23.43
0.23.46

Open the chart page →

11,206
home-assistantpree-helm-chartsVerified publisher1.84.01 of 1See more

home-assistant pree-helm-charts 1.84.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
rustls@0.23.45
0.23.46

Open the chart page →

2,837
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
rustls@0.23.38
0.23.46

Open the chart page →

10,454
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
rustls@0.23.40
0.23.46

Open the chart page →

2,244
waldurwaldur-chartsVerified publisher8.1.31 of 3See more

waldur waldur-charts 8.1.3

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.382e8f276c5ed
rustls@0.23.45
0.23.46

Open the chart page →

4,171
music-assistant-serverandibraeuVerified publisher2.1.41 of 1See more

music-assistant-server andibraeu 2.1.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
rustls@0.23.45
0.23.46

Open the chart page →

4,818
paperless-ngxcharts-derwitt-devVerified publisher2.1.71 of 1See more

paperless-ngx charts-derwitt-dev 2.1.7

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
rustls@0.23.45
0.23.46

Open the chart page →

5,335
galaxycloudve6.8.91 of 3See more

galaxy cloudve 6.8.9

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
rustls@0.23.42
0.23.46

Open the chart page →

7,543
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
rustls@0.23.41
0.23.46

Open the chart page →

1,495
csghubcsghubVerified publisher2.5.21 of 35See more

csghub csghub 2.5.2

1 of the 35 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.9-ee7d0271e26521
rustls@0.23.43
0.23.46

Open the chart page →

68,501
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
rustls@0.23.43
0.23.46

Open the chart page →

2,829
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
rustls@0.23.45
0.23.46

Open the chart page →

55,717
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
rustls@0.23.41
0.23.46

Open the chart page →

3,319
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
rustls@0.23.43
0.23.46

Open the chart page →

2,829
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
rustls@0.23.43
0.23.46

Open the chart page →

9,047
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
rustls@0.23.37
0.23.46

Open the chart page →

7,062
netboxhelmforgeVerified publisher2.0.31 of 4See more

netbox helmforge 2.0.3

1 of the 4 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
rustls@0.23.41
0.23.46

Open the chart page →

5,012
openreplayhelmforgeVerified publisher1.0.02 of 24See more

openreplay helmforge 1.0.0

2 of the 24 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
rustls@0.23.45
0.23.46
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
rustls@0.23.45
0.23.46

Open the chart page →

14,704
supersethelmforgeVerified publisher1.3.81 of 5See more

superset helmforge 1.3.8

1 of the 5 container images this version deploys carry RUSTSEC-2026-0346.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rustls@0.23.43
0.23.46

Open the chart page →

6,531

Container images carrying it

102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
rustls@0.23.42
0.23.46
1
registry.gitlab.com/dyff/dyff-api:0.57.13264651006fb2
rustls@0.23.45
0.23.46
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.