StackRadar

RUSTSEC-2026-0385

Unscored

Advisory

Published 23 Oct 2026In the index since 23 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 18,232 indexed, latest versions
Container images
47
deployed by those charts
Fix available
1 of 1
affected package

Non-constant-time mask generation and `u128` comparisons

Carried by container images the latest versions of 60 of 18,232 indexed charts deploy, on 47 images.

Affected packageAffected versionsFixed inImages
ctutilscargo0.4.2, 0.4.30.4.447
OSV records
RUSTSEC-2026-0385

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
documentdbquench-documentdbVerified publisher0.0.171 of 1See more

documentdb quench-documentdb 0.0.17

1 of the 1 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/documentdbdigest-pinnedbaa76c0ffce3
ctutils@0.4.2
0.4.4

Open the chart page →

69
lgtm-stackquench-lgtm-stackVerified publisher0.0.431 of 9See more

lgtm-stack quench-lgtm-stack 0.0.43

1 of the 9 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
ctutils@0.4.2
0.4.4

Open the chart page →

1,231
litellmquench-litellmVerified publisher0.0.181 of 1See more

litellm quench-litellm 0.0.18

1 of the 1 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned2388983ffcb2
ctutils@0.4.2
0.4.4

Open the chart page →

112
llm-stackquench-llm-stackVerified publisher0.0.311 of 3See more

llm-stack quench-llm-stack 0.0.31

1 of the 3 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned2388983ffcb2
ctutils@0.4.2
0.4.4

Open the chart page →

225
logging-stackquench-logging-stackVerified publisher0.0.271 of 3See more

logging-stack quench-logging-stack 0.0.27

1 of the 3 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
ctutils@0.4.2
0.4.4

Open the chart page →

1,054
vectorquench-vectorVerified publisher0.0.171 of 1See more

vector quench-vector 0.0.17

1 of the 1 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
ctutils@0.4.2
0.4.4

Open the chart page →

128
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
ctutils@0.4.2
0.4.4

Open the chart page →

105,777
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
ctutils@0.4.2
0.4.4

Open the chart page →

101,766
planoupstreamyardVerified publisher0.1.01 of 1See more

plano upstreamyard 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
katanemo/plano:0.4.37a3d5748d8495
ctutils@0.4.2
0.4.4

Open the chart page →

768
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry RUSTSEC-2026-0385.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
ctutils@0.4.2
0.4.4

Open the chart page →

7,516

Container images carrying it

47 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
ctutils@0.4.2
0.4.4
5
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
ctutils@0.4.2
0.4.4
4
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
ctutils@0.4.2
0.4.4
3
ghcr.io/quenchworks/images/vector3d07955aa984
ctutils@0.4.2
0.4.4
3
dagster/user-code-example:1.13.265c98e09b2aeb
ctutils@0.4.2
0.4.4
2
localstack/localstack:latestaa5632e041ca
ctutils@0.4.2
0.4.4
2
safeglobal/safe-transaction-service:latest7b576c73f865
ctutils@0.4.2
0.4.4
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
ctutils@0.4.2
0.4.4
2
ghcr.io/quenchworks/images/litellm2388983ffcb2
ctutils@0.4.2
0.4.4
2
acryldata/datahub-actions:v1.8.0d9b47e8640ea
ctutils@0.4.2
0.4.4
1
berkeleyskypilot/skypilot:0.14.125577df35586
ctutils@0.4.2
0.4.4
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
ctutils@0.4.2
0.4.4
1
dagster/dagster-celery-k8s:1.13.26605d41ae6647
ctutils@0.4.2
0.4.4
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
ctutils@0.4.2
0.4.4
1
homeassistant/home-assistant:2026.8.0a21689ef0510
ctutils@0.4.2
0.4.4
1
inventree/inventree:1.6.17c1e251a6c52
ctutils@0.4.2
0.4.4
1
katanemo/plano:0.4.37a3d5748d8495
ctutils@0.4.2
0.4.4
1
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
ctutils@0.4.2
0.4.4
1
localstack/localstack:latest21afb5c28e29
ctutils@0.4.2
0.4.4
1
loeken/home-assistant:2026.9.2b1dff5b4c593
ctutils@0.4.2
0.4.4
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
ctutils@0.4.2
0.4.4
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
ctutils@0.4.2
0.4.4
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
ctutils@0.4.2
0.4.4
1
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
ctutils@0.4.2
0.4.4
1
toniblyx/prowler:stable9dbcc3c9abd7
ctutils@0.4.2
0.4.4
1
weblate/weblate:2026.10.1.26663a7c8b444
ctutils@0.4.2
0.4.4
1
yetiplatform/yeti:latest8673609841e3
ctutils@0.4.2
0.4.4
1
zenmldocker/zenml-server:0.98.06a03880ace49
ctutils@0.4.2
0.4.4
1
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
ctutils@0.4.2
0.4.4
1
ghcr.io/element-hq/matrix-authentication-service:1.27.0085e37263957
ctutils@0.4.3
0.4.4
1
ghcr.io/goauthentik/server:2026.8.5602227a86455
ctutils@0.4.2
0.4.4
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
ctutils@0.4.2
0.4.4
1
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
ctutils@0.4.2
0.4.4
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
ctutils@0.4.2
0.4.4
1
ghcr.io/leprechaun/mqtt-to-stuff:0.1.82a02099acd3ee
ctutils@0.4.2
0.4.4
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
ctutils@0.4.2
0.4.4
1
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
ctutils@0.4.2
0.4.4
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
ctutils@0.4.2
0.4.4
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestbd496fa8c9df
ctutils@0.4.2
0.4.4
1
ghcr.io/openrelik/openrelik-worker-plaso:latest8caaf6e36654
ctutils@0.4.2
0.4.4
1
ghcr.io/quenchworks/images/cosmian-kmsb6140387c95f
ctutils@0.4.2
0.4.4
1
ghcr.io/quenchworks/images/documentdbbaa76c0ffce3
ctutils@0.4.2
0.4.4
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
ctutils@0.4.2
0.4.4
1
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
ctutils@0.4.2
0.4.4
1
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
ctutils@0.4.2
0.4.4
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
ctutils@0.4.2
0.4.4
1
registry.gitlab.com/dyff/dyff-api:0.57.17324bf4390523
ctutils@0.4.2
0.4.4
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.