StackRadar

RUSTSEC-2026-0372

Unscored

Advisory

Published 16 Oct 2026In the index since 18 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
68
of 18,176 indexed, latest versions
Container images
72
deployed by those charts
Fix available
None
affected package

`zvariant_derive` is unmaintained

Carried by container images the latest versions of 68 of 18,176 indexed charts deploy, on 72 images.

Affected packageAffected versionsFixed inImages
zvariant_derivecargo5.10.0, 5.11.0no fix listed72
OSV records
RUSTSEC-2026-0372

Charts affected

68 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.41 of 1See more

authentik goauthentik 2026.8.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.4e7226ae116da
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,348
home-assistanthelm-hassVerified publisher0.3.871 of 1See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,940
dagsterdagsterVerified publisher1.13.262 of 5See more

dagster dagster 1.13.26

2 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
zvariant_derive@5.11.0
no fix listed
dagster/user-code-example:1.13.265c98e09b2aeb
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,178
netboxnetboxOfficialVerified publisher8.3.921 of 5See more

netbox netbox 8.3.92

1 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,802
datahubdatahubVerified publisher1.1.71 of 4See more

datahub datahub 1.1.7

1 of the 4 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,621
weblateweblateOfficialVerified publisher0.5.431 of 3See more

weblate weblate 0.5.43

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
weblate/weblate:2026.10.1.1b0f200f38d70
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,752
difydify-helmVerified publisher0.39.01 of 11See more

dify dify-helm 0.39.0

1 of the 11 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
zvariant_derive@5.11.0
no fix listed

Open the chart page →

62,784
localstacklocalstack0.7.11 of 1See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,380
prefect-serverprefectVerified publisher2026.10.61630151 of 2See more

prefect-server prefect 2026.10.6163015

1 of the 2 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.8-python3.1119463f92420b
zvariant_derive@5.11.0
no fix listed

Open the chart page →

6,211
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
zvariant_derive@5.11.0
no fix listed

Open the chart page →

9,665
home-assistantalekcVerified publisher2.12.21 of 1See more

home-assistant alekc 2.12.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,940
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,379
dagster-user-deploymentsdagsterVerified publisher1.13.261 of 1See more

dagster-user-deployments dagster 1.13.26

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.265c98e09b2aeb
zvariant_derive@5.11.0
no fix listed

Open the chart page →

786
zenmlzenml0.98.01 of 1See more

zenml zenml 0.98.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.98.06a03880ace49
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,318
dyff-apidyff-apiVerified publisher0.57.151 of 1See more

dyff-api dyff-api 0.57.15

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.1555735b0b7d8c
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,348
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,818
home-assistanthome-assistantVerified publisher0.5.131 of 3See more

home-assistant home-assistant 0.5.13

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.01b64d38f38d9
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,160
skypilotskypilotOfficialVerified publisher0.14.01 of 3See more

skypilot skypilot 0.14.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.0a8362d205365
zvariant_derive@5.11.0
no fix listed

Open the chart page →

6,331
paperlesszekker6Verified publisher11.13.01 of 1See more

paperless zekker6 11.13.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
zvariant_derive@5.11.0
no fix listed

Open the chart page →

5,493
paperless-ngxadnoctemVerified publisher0.5.11 of 5See more

paperless-ngx adnoctem 0.5.1

1 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
zvariant_derive@5.11.0
no fix listed

Open the chart page →

27,512
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
zvariant_derive@5.10.0
no fix listed

Open the chart page →

7,895
music-assistantbdclark-helm-chartsVerified publisher0.4.141 of 1See more

music-assistant bdclark-helm-charts 0.4.14

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,918
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,818
dagster-cloud-agentdagster-cloudVerified publisher1.13.261 of 1See more

dagster-cloud-agent dagster-cloud 1.13.26

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,270
eoapieoapiOfficialVerified publisher0.17.31 of 7See more

eoapi eoapi 0.17.3

1 of the 7 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,655
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest3e6710a7ab2a
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,306
home-assistantloeken-at-homeVerified publisher2026.9.21 of 1See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.9.2b1dff5b4c593
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,188
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
zvariant_derive@5.11.0
no fix listed

Open the chart page →

11,412
home-assistantpree-helm-chartsVerified publisher1.85.01 of 1See more

home-assistant pree-helm-charts 1.85.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,940
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
zvariant_derive@5.10.0
no fix listed

Open the chart page →

10,566
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,270
waldurwaldur-chartsVerified publisher8.1.31 of 3See more

waldur waldur-charts 8.1.3

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.382e8f276c5ed
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,237
music-assistant-serverandibraeuVerified publisher2.1.51 of 1See more

music-assistant-server andibraeu 2.1.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,918
paperless-ngxcharts-derwitt-devVerified publisher2.1.81 of 1See more

paperless-ngx charts-derwitt-dev 2.1.8

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
zvariant_derive@5.11.0
no fix listed

Open the chart page →

5,493
galaxycloudve6.8.91 of 3See more

galaxy cloudve 6.8.9

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,603
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,505
csghubcsghubVerified publisher2.6.01 of 35See more

csghub csghub 2.6.0

1 of the 35 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.9-ee7d0271e26521
zvariant_derive@5.11.0
no fix listed

Open the chart page →

68,257
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,864
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
zvariant_derive@5.11.0
no fix listed

Open the chart page →

55,667
home-assistantegebackVerified publisher2.0.371 of 1See more

home-assistant egeback 2.0.37

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,940
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,864
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
zvariant_derive@5.11.0
no fix listed

Open the chart page →

9,088
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zvariant_derive@5.10.0
no fix listed

Open the chart page →

7,200
netboxhelmforgeVerified publisher2.0.41 of 4See more

netbox helmforge 2.0.4

1 of the 4 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
zvariant_derive@5.11.0
no fix listed

Open the chart page →

5,166
openreplayhelmforgeVerified publisher1.0.02 of 24See more

openreplay helmforge 1.0.0

2 of the 24 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
zvariant_derive@5.11.0
no fix listed
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
zvariant_derive@5.11.0
no fix listed

Open the chart page →

15,027
supersethelmforgeVerified publisher1.4.01 of 5See more

superset helmforge 1.4.0

1 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
zvariant_derive@5.11.0
no fix listed

Open the chart page →

6,588
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
zvariant_derive@5.11.0
no fix listed

Open the chart page →

36,240
inventreeinventreeOfficialVerified publisher0.4.321 of 2See more

inventree inventree 0.4.32

1 of the 2 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
inventree/inventree:1.5.8ad344a718b74
zvariant_derive@5.11.0
no fix listed

Open the chart page →

6,055
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
zvariant_derive@5.10.0
no fix listed

Open the chart page →

8,683
mqtt-to-stuffleprechaun-charts0.1.821 of 1See more

mqtt-to-stuff leprechaun-charts 0.1.82

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/mqtt-to-stuff:0.1.82a02099acd3ee
zvariant_derive@5.11.0
no fix listed

Open the chart page →

692

Container images carrying it

72 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
zvariant_derive@5.11.0
no fix listed
1
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
zvariant_derive@5.11.0
no fix listed
1
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
zvariant_derive@5.11.0
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
zvariant_derive@5.11.0
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.1555735b0b7d8c
zvariant_derive@5.11.0
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.