StackRadar

RUSTSEC-2026-0372

Unscored

Advisory

Published 16 Oct 2026In the index since 18 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
68
of 18,176 indexed, latest versions
Container images
72
deployed by those charts
Fix available
None
affected package

`zvariant_derive` is unmaintained

Carried by container images the latest versions of 68 of 18,176 indexed charts deploy, on 72 images.

Affected packageAffected versionsFixed inImages
zvariant_derivecargo5.10.0, 5.11.0no fix listed72
OSV records
RUSTSEC-2026-0372

Charts affected

68 by stars
ChartLatestAffected imagesRadar Score
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,677
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,433
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
zvariant_derive@5.10.0
no fix listed

Open the chart page →

2,155
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
zvariant_derive@5.11.0
no fix listed

Open the chart page →

12,050
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
localstack/localstack:latestaa5632e041ca
zvariant_derive@5.11.0
no fix listed

Open the chart page →

10,915
home-assistantnewbenji-chartsVerified publisher0.7.21 of 1See more

home-assistant newbenji-charts 0.7.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.8.0a21689ef0510
zvariant_derive@5.11.0
no fix listed

Open the chart page →

3,422
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
zvariant_derive@5.11.0
no fix listed

Open the chart page →

4,918
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
zvariant_derive@5.11.0
no fix listed

Open the chart page →

1,290
paperless-ngxoli-the-devVerified publisher1.3.11 of 1See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
zvariant_derive@5.11.0
no fix listed

Open the chart page →

5,531
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
zvariant_derive@5.11.0
no fix listed
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
zvariant_derive@5.11.0
no fix listed

Open the chart page →

242,720
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest8673609841e3
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,334
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,288
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
zvariant_derive@5.11.0
no fix listed

Open the chart page →

2,048
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
zvariant_derive@5.11.0
no fix listed
safeglobal/safe-transaction-service:latest7b576c73f865
zvariant_derive@5.11.0
no fix listed

Open the chart page →

21,727
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
zvariant_derive@5.11.0
no fix listed

Open the chart page →

18,240
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
zvariant_derive@5.10.0
no fix listed

Open the chart page →

1,807
planoupstreamyardVerified publisher0.1.01 of 1See more

plano upstreamyard 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
katanemo/plano:0.4.37a3d5748d8495
zvariant_derive@5.11.0
no fix listed

Open the chart page →

784
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry RUSTSEC-2026-0372.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
zvariant_derive@5.11.0
no fix listed

Open the chart page →

7,338

Container images carrying it

72 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/superset:6.1.0:latest16b50bbef664
zvariant_derive@5.11.0
no fix listed
3
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
zvariant_derive@5.11.0
no fix listed
3
ghcr.io/music-assistant/server:2.10.645fdb050e069
zvariant_derive@5.11.0
no fix listed
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
zvariant_derive@5.11.0
no fix listed
3
dagster/user-code-example:1.13.265c98e09b2aeb
zvariant_derive@5.11.0
no fix listed
2
localstack/localstack-pro:latest801a3dff7f6a
zvariant_derive@5.11.0
no fix listed
2
nacos/nacos-server:latest1c191c30c8cd
zvariant_derive@5.11.0
no fix listed
2
safeglobal/safe-config-service:latest09a5e495c219
zvariant_derive@5.11.0
no fix listed
2
safeglobal/safe-transaction-service:latest7b576c73f865
zvariant_derive@5.11.0
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
zvariant_derive@5.11.0
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
zvariant_derive@5.11.0
no fix listed
2
acryldata/datahub-actions:v1.7.0.1c5fd70130157
zvariant_derive@5.11.0
no fix listed
1
berkeleyskypilot/skypilot:0.14.0a8362d205365
zvariant_derive@5.11.0
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
zvariant_derive@5.11.0
no fix listed
1
dagster/dagster-celery-k8s:1.13.26605d41ae6647
zvariant_derive@5.11.0
no fix listed
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
zvariant_derive@5.11.0
no fix listed
1
homeassistant/home-assistant:2026.75a531753cea9
zvariant_derive@5.11.0
no fix listed
1
homeassistant/home-assistant:2026.8.0a21689ef0510
zvariant_derive@5.11.0
no fix listed
1
inventree/inventree:1.5.8ad344a718b74
zvariant_derive@5.11.0
no fix listed
1
katanemo/plano:0.4.37a3d5748d8495
zvariant_derive@5.11.0
no fix listed
1
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
zvariant_derive@5.11.0
no fix listed
1
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
zvariant_derive@5.11.0
no fix listed
1
localstack/localstack:latestaa5632e041ca
zvariant_derive@5.11.0
no fix listed
1
loeken/home-assistant:2026.9.2b1dff5b4c593
zvariant_derive@5.11.0
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
zvariant_derive@5.11.0
no fix listed
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
zvariant_derive@5.10.0
no fix listed
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
zvariant_derive@5.11.0
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
zvariant_derive@5.10.0
no fix listed
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zvariant_derive@5.10.0
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
zvariant_derive@5.11.0
no fix listed
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
zvariant_derive@5.11.0
no fix listed
1
prefecthq/prefect:3.8.8-python3.1119463f92420b
zvariant_derive@5.11.0
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
zvariant_derive@5.10.0
no fix listed
1
toniblyx/prowler:stable9dbcc3c9abd7
zvariant_derive@5.11.0
no fix listed
1
weblate/weblate:2026.10.1.1b0f200f38d70
zvariant_derive@5.11.0
no fix listed
1
yetiplatform/yeti:latest8673609841e3
zvariant_derive@5.11.0
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
zvariant_derive@5.11.0
no fix listed
1
zenmldocker/zenml-server:0.98.06a03880ace49
zvariant_derive@5.11.0
no fix listed
1
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/goauthentik/server:2026.8.4e7226ae116da
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.10.01b64d38f38d9
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.9.4:latest3e6710a7ab2a
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/leprechaun/mqtt-to-stuff:0.1.82a02099acd3ee
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
zvariant_derive@5.10.0
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
zvariant_derive@5.11.0
no fix listed
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
zvariant_derive@5.10.0
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.