StackRadar

RUSTSEC-2026-0348

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
88
of 18,131 indexed, latest versions
Container images
101
deployed by those charts
Fix available
1 of 1
affected package

Brotli certificate decompression can allocate up to 1 GiB before authentication

Carried by container images the latest versions of 88 of 18,131 indexed charts deploy, on 101 images.

Affected packageAffected versionsFixed inImages
rustlscargo0.23.19, 0.23.23, 0.23.28, 0.23.29+7 more0.23.46101
OSV records
RUSTSEC-2026-0348
Also known as
GHSA-h2v8-394m-p7vv

Charts affected

88 by stars
ChartLatestAffected imagesRadar Score
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.46

Open the chart page →

35,576
inventreeinventreeOfficialVerified publisher0.4.311 of 2See more

inventree inventree 0.4.31

1 of the 2 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
inventree/inventree:1.5.74aefd6e2bb0e
rustls@0.23.41
0.23.46

Open the chart page →

6,057
mumbledjjuniorjpdj0.1.2071 of 2See more

mumbledj juniorjpdj 0.1.207

1 of the 2 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest4229c7f97bc7
rustls@0.23.28
0.23.46

Open the chart page →

1,292
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rustls@0.23.38
0.23.46

Open the chart page →

8,564
lapillilapilli0.2.01 of 1See more

lapilli lapilli 0.2.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/lapilli-project/lapilli-controller:0.2.05b4979d43a3e
rustls@0.23.45
0.23.46

Open the chart page →

422
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.42 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.4

2 of the 3 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.433f05af5eb7c
rustls@0.23.40
0.23.46
ghcr.io/buoyantio/extension-init:enterprise-2.20.416ad7cf6b6f1
rustls@0.23.40
0.23.46

Open the chart page →

304
linkerd-preview-multiclusterlinkerd-buoyantVerified publisher26.10.12 of 3See more

linkerd-preview-multicluster linkerd-buoyant 26.10.1

2 of the 3 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:preview-26.10.1aaf3c77c7980
rustls@0.23.45
0.23.46
ghcr.io/buoyantio/extension-init:preview-26.10.1c2ccc50dfd45
rustls@0.23.40
0.23.46

Open the chart page →

255
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
rustls@0.23.40
0.23.46

Open the chart page →

3,565
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
rustls@0.23.43
0.23.46

Open the chart page →

3,402
matrix-authentication-servicematrix-authentication-serviceVerified publisher0.1.261 of 1See more

matrix-authentication-service matrix-authentication-service 0.1.26

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:1.26.0e089f1048a1d
rustls@0.23.45
0.23.46

Open the chart page →

487
mayastormayastorVerified publisher2.12.212 of 31See more

mayastor mayastor 2.12.2

12 of the 31 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.200429e487478
rustls@0.23.19
0.23.46
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls@0.23.19
0.23.46
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls@0.23.19
0.23.46
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls@0.23.19
0.23.46
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls@0.23.19
0.23.46
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls@0.23.19
0.23.46
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls@0.23.19
0.23.46
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls@0.23.40
0.23.46
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls@0.23.19
0.23.46
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls@0.23.19
0.23.46
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls@0.23.19
0.23.46
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls@0.23.19
0.23.46

Open the chart page →

31,342
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls@0.23.38
0.23.46

Open the chart page →

2,106
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
rustls@0.23.45
0.23.46

Open the chart page →

12,028
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
localstack/localstack:latestdf6b89814326
rustls@0.23.45
0.23.46

Open the chart page →

12,215
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
rustls@0.23.43
0.23.46

Open the chart page →

1,266
paperless-ngxoli-the-devVerified publisher1.3.11 of 1See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
rustls@0.23.45
0.23.46

Open the chart page →

5,335
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
rustls@0.23.43
0.23.46
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rustls@0.23.41
0.23.46
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rustls@0.23.41
0.23.46

Open the chart page →

242,166
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest8673609841e3
rustls@0.23.45
0.23.46

Open the chart page →

7,270
perf-sentinelperf-sentinelOfficialVerified publisher0.27.01 of 1See more

perf-sentinel perf-sentinel 0.27.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/institut-du-numerique-responsable/perf-sentinel:0.27.01187d5908dd4
rustls@0.23.45
0.23.46

Open the chart page →

14
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
rustls@0.23.42
0.23.46

Open the chart page →

2,244
cosmian-kmsquench-cosmian-kmsVerified publisher0.0.91 of 1See more

cosmian-kms quench-cosmian-kms 0.0.9

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cosmian-kmsdigest-pinnedbb9373952a6f
rustls@0.23.45
0.23.46

Open the chart page →

97
emqxquench-emqxVerified publisher0.0.121 of 1See more

emqx quench-emqx 0.0.12

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/emqxdigest-pinned69c03ee6a1d7
rustls@0.23.45
0.23.46

Open the chart page →

51
garagequench-garageVerified publisher0.0.151 of 1See more

garage quench-garage 0.0.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/garagedigest-pinned48ab1e3c36e6
rustls@0.23.45
0.23.46

Open the chart page →

140
lgtm-stackquench-lgtm-stackVerified publisher0.0.371 of 9See more

lgtm-stack quench-lgtm-stack 0.0.37

1 of the 9 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
rustls@0.23.45
0.23.46

Open the chart page →

1,242
linkerd-cniquench-linkerd-cniVerified publisher0.0.31 of 1See more

linkerd-cni quench-linkerd-cni 0.0.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/linkerd-cnidigest-pinneda5ae94c50d38
rustls@0.23.45
0.23.46

Open the chart page →

59
litellmquench-litellmVerified publisher0.0.151 of 1See more

litellm quench-litellm 0.0.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned26dce214e40f
rustls@0.23.45
0.23.46

Open the chart page →

114
llm-stackquench-llm-stackVerified publisher0.0.262 of 3See more

llm-stack quench-llm-stack 0.0.26

2 of the 3 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned26dce214e40f
rustls@0.23.45
0.23.46
ghcr.io/quenchworks/images/qdrantdigest-pinnedc9ec047729db
rustls@0.23.45
0.23.46

Open the chart page →

223
logging-stackquench-logging-stackVerified publisher0.0.211 of 3See more

logging-stack quench-logging-stack 0.0.21

1 of the 3 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
rustls@0.23.45
0.23.46

Open the chart page →

1,045
meilisearchquench-meilisearchVerified publisher0.0.201 of 1See more

meilisearch quench-meilisearch 0.0.20

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/meilisearchdigest-pinned784c28a4fcf4
rustls@0.23.45
0.23.46

Open the chart page →

152
qdrantquench-qdrantVerified publisher0.0.191 of 1See more

qdrant quench-qdrant 0.0.19

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/qdrantdigest-pinnedc9ec047729db
rustls@0.23.45
0.23.46

Open the chart page →

109
vectorquench-vectorVerified publisher0.0.151 of 1See more

vector quench-vector 0.0.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned6ebe2c55233d
rustls@0.23.45
0.23.46

Open the chart page →

120
ztunnelquench-ztunnelVerified publisher0.0.21 of 1See more

ztunnel quench-ztunnel 0.0.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ztunneldigest-pinned61b0e274990a
rustls@0.23.45
0.23.46

Open the chart page →

71
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls@0.23.23
0.23.46

Open the chart page →

12,037
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rustls@0.23.40
0.23.46

Open the chart page →

2,008
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rustls@0.23.40
0.23.46
safeglobal/safe-transaction-service:latest7b576c73f865
rustls@0.23.45
0.23.46

Open the chart page →

21,568
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
rustls@0.23.45
0.23.46

Open the chart page →

18,066
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rustls@0.23.37
0.23.46

Open the chart page →

1,771
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry RUSTSEC-2026-0348.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
rustls@0.23.45
0.23.46

Open the chart page →

7,302

Container images carrying it

101 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
rustls@0.23.45
0.23.46
4
apache/superset:6.1.0:latest16b50bbef664
rustls@0.23.43
0.23.46
3
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
rustls@0.23.45
0.23.46
3
ghcr.io/quenchworks/images/vector6ebe2c55233d
rustls@0.23.45
0.23.46
3
dagster/user-code-example:1.13.265c98e09b2aeb
rustls@0.23.45
0.23.46
2
localstack/localstack-pro:latest801a3dff7f6a
rustls@0.23.45
0.23.46
2
nacos/nacos-server:latest1c191c30c8cd
rustls@0.23.43
0.23.46
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
rustls@0.23.37
0.23.46
2
openebs/mayastor-agent-core:v2.12.200429e487478
rustls@0.23.19
0.23.46
2
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls@0.23.19
0.23.46
2
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls@0.23.19
0.23.46
2
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls@0.23.19
0.23.46
2
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls@0.23.19
0.23.46
2
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls@0.23.19
0.23.46
2
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls@0.23.19
0.23.46
2
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls@0.23.40
0.23.46
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls@0.23.19
0.23.46
2
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls@0.23.19
0.23.46
2
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls@0.23.19
0.23.46
2
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls@0.23.19
0.23.46
2
safeglobal/safe-config-service:latest09a5e495c219
rustls@0.23.40
0.23.46
2
safeglobal/safe-transaction-service:latest7b576c73f865
rustls@0.23.45
0.23.46
2
ghcr.io/music-assistant/server:2.10.645fdb050e069
rustls@0.23.45
0.23.46
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls@0.23.43
0.23.46
2
ghcr.io/quenchworks/images/litellm26dce214e40f
rustls@0.23.45
0.23.46
2
ghcr.io/quenchworks/images/qdrantc9ec047729db
rustls@0.23.45
0.23.46
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
rustls@0.23.43
0.23.46
1
berkeleyskypilot/skypilot:0.14.0a8362d205365
rustls@0.23.45
0.23.46
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
rustls@0.23.43
0.23.46
1
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls@0.23.45
0.23.46
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
rustls@0.23.45
0.23.46
1
homeassistant/home-assistant:2026.75a531753cea9
rustls@0.23.40
0.23.46
1
inventree/inventree:1.5.74aefd6e2bb0e
rustls@0.23.41
0.23.46
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rustls@0.23.40
0.23.46
1
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
rustls@0.23.45
0.23.46
1
localstack/localstack:latestdf6b89814326
rustls@0.23.45
0.23.46
1
loeken/home-assistant:2026.9.2b1dff5b4c593
rustls@0.23.43
0.23.46
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
rustls@0.23.43
0.23.46
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls@0.23.38
0.23.46
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls@0.23.41
0.23.46
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
rustls@0.23.41
0.23.46
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rustls@0.23.37
0.23.46
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
rustls@0.23.43
0.23.46
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
rustls@0.23.45
0.23.46
1
prefecthq/prefect:3.8.8-python3.1119463f92420b
rustls@0.23.43
0.23.46
1
prowlercloud/prowler-api:5.31.14f252d579be2
rustls@0.23.38
0.23.46
1
toniblyx/prowler:stable9dbcc3c9abd7
rustls@0.23.42
0.23.46
1
weblate/weblate:2026.10.1.1b0f200f38d70
rustls@0.23.45
0.23.46
1
yetiplatform/yeti:latest8673609841e3
rustls@0.23.45
0.23.46
1
yetiplatform/yeti:2.9.09bcbe2650a14
rustls@0.23.43
0.23.46
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.