StackRadar

RUSTSEC-2026-0372

Unscored

Advisory

Published 16 Oct 2026In the index since 18 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
68
of 18,176 indexed, latest versions
Container images
72
deployed by those charts
Fix available
None
affected package

`zvariant_derive` is unmaintained

Carried by container images the latest versions of 68 of 18,176 indexed charts deploy, on 72 images.

Affected packageAffected versionsFixed inImages
zvariant_derivecargo5.10.0, 5.11.0no fix listed72
OSV records
RUSTSEC-2026-0372

Charts affected

68 by stars
ChartLatestAffected imagesRadar Score
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,677
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,433
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
zvariant_derive@5.10.0
no fix listed

Open the chart page →

2,155
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
zvariant_derive@5.11.0
no fix listed

Open the chart page →

12,050
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
localstack/localstack:latestaa5632e041ca
zvariant_derive@5.11.0
no fix listed

Open the chart page →

10,915
home-assistantnewbenji-chartsVerified publisher0.7.21 of 1See more

home-assistant newbenji-charts 0.7.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.8.0a21689ef0510
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,422
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,918
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,290
paperless-ngxoli-the-devVerified publisher1.3.11 of 1See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
zvariant_derive@5.11.0
no fix listed

Open the chart page →

5,531
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
zvariant_derive@5.11.0
no fix listed

Open the chart page →

242,720
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest8673609841e3
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,334
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,288
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,048
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
zvariant_derive@5.11.0
no fix listed
safeglobal/safe-transaction-service:latest7b576c73f865
zvariant_derive@5.11.0
no fix listed

Open the chart page →

21,727
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
zvariant_derive@5.11.0
no fix listed

Open the chart page →

18,240
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
zvariant_derive@5.10.0
no fix listed

Open the chart page →

1,807
planoupstreamyardVerified publisher0.1.01 of 1See more

plano upstreamyard 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
katanemo/plano:0.4.37a3d5748d8495
zvariant_derive@5.11.0
no fix listed

Open the chart page →

784
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,338

Container images carrying it

72 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
zvariant_derive@5.11.0
no fix listed
1
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
zvariant_derive@5.11.0
no fix listed
1
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
zvariant_derive@5.11.0
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
zvariant_derive@5.11.0
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.1555735b0b7d8c
zvariant_derive@5.11.0
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.