RUSTSEC-2026-0370
UnscoredAdvisory
Published 16 Oct 2026In the index since 18 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 68
- of 18,176 indexed, latest versions
- Container images
- 72
- deployed by those charts
- Fix available
- None
- affected package
`zvariant` is unmaintained
Carried by container images the latest versions of 68 of 18,176 indexed charts deploy, on 72 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| zvariantcargo | 5.10.0, 5.11.0 | no fix listed | 72 |
- OSV records
- RUSTSEC-2026-0370
Charts affected
68 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| authentikgoauthentikOfficialVerified publisher | 2026.8.4 | 1 of 1See more | 1,348 |
| home-assistanthelm-hassVerified publisher | 0.3.87 | 1 of 1See more | 2,940 |
| dagsterdagsterVerified publisher | 1.13.26 | 2 of 5See more | 4,178 |
| netboxnetboxOfficialVerified publisher | 8.3.92 | 1 of 5See more | 1,802 |
| datahubdatahubVerified publisher | 1.1.7 | 1 of 4See more | 1,621 |
| weblateweblateOfficialVerified publisher | 0.5.43 | 1 of 3See more | 7,752 |
| difydify-helmVerified publisher | 0.39.0 | 1 of 11See more | 62,784 |
| localstacklocalstack | 0.7.1 | 1 of 1See more | 2,380 |
| prefect-serverprefectVerified publisher | 2026.10.6163015 | 1 of 2See more | 6,211 |
| paperless-ngxpaperless-ngxVerified publisher | 0.3.24 | 1 of 3See more | 9,665 |
| home-assistantalekcVerified publisher | 2.12.2 | 1 of 1See more | 2,940 |
| home-assistantandrenarchyVerified publisher | 14.104.0 | 1 of 1See more | 3,379 |
| dagster-user-deploymentsdagsterVerified publisher | 1.13.26 | 1 of 1See more | 786 |
| zenmlzenml | 0.98.0 | 1 of 1See more | 1,318 |
| dyff-apidyff-apiVerified publisher | 0.57.15 | 1 of 1See more | 1,348 |
| nacosgujunxiang | 0.1.5 | 1 of 1See more | 2,818 |
| home-assistanthome-assistantVerified publisher | 0.5.13 | 1 of 3See more | 3,160 |
| skypilotskypilotOfficialVerified publisher | 0.14.0 | 1 of 3See more | 6,331 |
| paperlesszekker6Verified publisher | 11.13.0 | 1 of 1See more | 5,493 |
| paperless-ngxadnoctemVerified publisher | 0.5.1 | 1 of 5See more | 27,512 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 7,895 |
| music-assistantbdclark-helm-chartsVerified publisher | 0.4.14 | 1 of 1See more | 4,918 |
| nacosbytectl | 0.1.6 | 1 of 1See more | 2,818 |
| dagster-cloud-agentdagster-cloudVerified publisher | 1.13.26 | 1 of 1See more | 1,270 |
| eoapieoapiOfficialVerified publisher | 0.17.3 | 1 of 7See more | 4,655 |
| home-assistantgabe565Verified publisher | 0.17.0 | 1 of 1See more | 3,306 |
| home-assistantloeken-at-homeVerified publisher | 2026.9.2 | 1 of 1See more | 2,188 |
| paperless-ngxpaperlessVerified publisher | 0.4.0 | 1 of 3See more | 11,412 |
| home-assistantpree-helm-chartsVerified publisher | 1.85.0 | 1 of 1See more | 2,940 |
| prowlerprowler-appVerified publisher | 0.0.9 | 1 of 5See more | 10,566 |
| helm64-toolboxserdigital64Verified publisher | 0.4.0 | 1 of 1See more | 2,270 |
| waldurwaldur-chartsVerified publisher | 8.1.3 | 1 of 3See more | 4,237 |
| music-assistant-serverandibraeuVerified publisher | 2.1.5 | 1 of 1See more | 4,918 |
| paperless-ngxcharts-derwitt-devVerified publisher | 2.1.8 | 1 of 1See more | 5,493 |
| galaxycloudve | 6.8.9 | 1 of 3See more | 7,603 |
| authentikcluster-deploy | 0.3.0 | 1 of 1See more | 1,505 |
| csghubcsghubVerified publisher | 2.6.0 | 1 of 35See more | 68,257 |
| supersetdeliveryheroVerified publisher | 1.1.3 | 1 of 1See more | 2,864 |
| difydify | 1.0.0 | 1 of 4See more | 55,667 |
| home-assistantegebackVerified publisher | 2.0.37 | 1 of 1See more | 2,940 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 2,864 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 9,088 |
| hermes-agenthelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 7,200 |
| netboxhelmforgeVerified publisher | 2.0.4 | 1 of 4See more | 5,166 |
| openreplayhelmforgeVerified publisher | 1.0.0 | 2 of 24See more | 15,027 |
| supersethelmforgeVerified publisher | 1.4.0 | 1 of 5See more | 6,588 |
| paperlesshpVerified publisher | 0.1.2 | 1 of 5See more | 36,240 |
| inventreeinventreeOfficialVerified publisher | 0.4.32 | 1 of 2See more | 6,055 |
| music-assistantkarljorgensen | 0.1.3 | 1 of 1See more | 8,683 |
| mqtt-to-stuffleprechaun-charts | 0.1.82 | 1 of 1See more | 692 |
Container images carrying it
72 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | 16b50bbef664 | zvariant | no fix listed | 3 |
| ghcr.io/ | 33afb0659d78 | zvariant | no fix listed | 3 |
| ghcr.io/ | 45fdb050e069 | zvariant | no fix listed | 3 |
| ghcr.io/ | d232cba37cc0 | zvariant | no fix listed | 3 |
| dagster/ | 5c98e09b2aeb | zvariant | no fix listed | 2 |
| localstack/ | 801a3dff7f6a | zvariant | no fix listed | 2 |
| nacos/ | 1c191c30c8cd | zvariant | no fix listed | 2 |
| safeglobal/ | 09a5e495c219 | zvariant | no fix listed | 2 |
| safeglobal/ | 7b576c73f865 | zvariant | no fix listed | 2 |
| ghcr.io/ | 6b94799bc769 | zvariant | no fix listed | 2 |
| ghcr.io/ | aa810a36942c | zvariant | no fix listed | 2 |
| acryldata/ | c5fd70130157 | zvariant | no fix listed | 1 |
| berkeleyskypilot/ | a8362d205365 | zvariant | no fix listed | 1 |
| chiefonboarding/ | d0964135ea82 | zvariant | no fix listed | 1 |
| dagster/ | 605d41ae6647 | zvariant | no fix listed | 1 |
| dagster/ | c9320c34f7ed | zvariant | no fix listed | 1 |
| homeassistant/ | 5a531753cea9 | zvariant | no fix listed | 1 |
| homeassistant/ | a21689ef0510 | zvariant | no fix listed | 1 |
| inventree/ | ad344a718b74 | zvariant | no fix listed | 1 |
| katanemo/ | a3d5748d8495 | zvariant | no fix listed | 1 |
| langgenius/ | 34412a22d1e1 | zvariant | no fix listed | 1 |
| langgenius/ | 4b07ca30ab2a | zvariant | no fix listed | 1 |
| localstack/ | aa5632e041ca | zvariant | no fix listed | 1 |
| loeken/ | b1dff5b4c593 | zvariant | no fix listed | 1 |
| makeplane/ | 71b7252adef0 | zvariant | no fix listed | 1 |
| memgraph/ | ecdf7faea3f7 | zvariant | no fix listed | 1 |
| netboxcommunity/ | 91b823a05cb5 | zvariant | no fix listed | 1 |
| nousresearch/ | e0df6adebddf | zvariant | no fix listed | 1 |
| nousresearch/ | fca358f12efd | zvariant | no fix listed | 1 |
| opencsghq/ | 7d0271e26521 | zvariant | no fix listed | 1 |
| opennode/ | 82e8f276c5ed | zvariant | no fix listed | 1 |
| prefecthq/ | 19463f92420b | zvariant | no fix listed | 1 |
| prowlercloud/ | 4f252d579be2 | zvariant | no fix listed | 1 |
| toniblyx/ | 9dbcc3c9abd7 | zvariant | no fix listed | 1 |
| weblate/ | b0f200f38d70 | zvariant | no fix listed | 1 |
| yetiplatform/ | 8673609841e3 | zvariant | no fix listed | 1 |
| yetiplatform/ | 9bcbe2650a14 | zvariant | no fix listed | 1 |
| zenmldocker/ | 6a03880ace49 | zvariant | no fix listed | 1 |
| zooproject/ | da112e8d03f1 | zvariant | no fix listed | 1 |
| ghcr.io/ | 7af2216c7b9e | zvariant | no fix listed | 1 |
| ghcr.io/ | ab9b4e8cc4ab | zvariant | no fix listed | 1 |
| ghcr.io/ | e7226ae116da | zvariant | no fix listed | 1 |
| ghcr.io/ | 130241f28d01 | zvariant | no fix listed | 1 |
| ghcr.io/ | 1b64d38f38d9 | zvariant | no fix listed | 1 |
| ghcr.io/ | 3e6710a7ab2a | zvariant | no fix listed | 1 |
| ghcr.io/ | a1bc133af84e | zvariant | no fix listed | 1 |
| ghcr.io/ | a02099acd3ee | zvariant | no fix listed | 1 |
| ghcr.io/ | eef3ee7810d0 | zvariant | no fix listed | 1 |
| ghcr.io/ | 3a1e8d317c63 | zvariant | no fix listed | 1 |
| ghcr.io/ | 7d8fb8e996b6 | zvariant | no fix listed | 1 |