StackRadar

RUSTSEC-2026-0386

Unscored

Advisory

Published 13 Oct 2026In the index since 24 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
98
of 18,232 indexed, latest versions
Container images
110
deployed by those charts
Fix available
1 of 1
affected package

`AsyncFd::new` and related constructors violate I/O safety

Carried by container images the latest versions of 98 of 18,232 indexed charts deploy, on 110 images.

Affected packageAffected versionsFixed inImages
tokiocargo1.38.2, 1.40.0, 1.43.0, 1.44.1+11 more1.51.6110
OSV records
RUSTSEC-2026-0386

Charts affected

98 by stars
ChartLatestAffected imagesRadar Score
openreplayhelmforgeVerified publisher1.1.12 of 24See more

openreplay helmforge 1.1.1

2 of the 24 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
tokio@1.53.1
1.51.6
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
tokio@1.53.1
1.51.6

Open the chart page →

16,183
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
tokio@1.53.1
1.51.6

Open the chart page →

8,878
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
tokio@1.53.1
1.51.6

Open the chart page →

35,531
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
tokio@1.53.1
1.51.6

Open the chart page →

42,418
inventreeinventreeOfficialVerified publisher0.4.341 of 2See more

inventree inventree 0.4.34

1 of the 2 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
inventree/inventree:1.6.17c1e251a6c52
tokio@1.53.1
1.51.6

Open the chart page →

6,610
mumbledjjuniorjpdj0.1.2081 of 2See more

mumbledj juniorjpdj 0.1.208

1 of the 2 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest4229c7f97bc7
tokio@1.47.1
1.51.6

Open the chart page →

1,336
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
tokio@1.40.0
1.51.6

Open the chart page →

3,625
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
tokio@1.52.1
1.51.6

Open the chart page →

9,546
mqtt-to-stuffleprechaun-charts0.1.821 of 1See more

mqtt-to-stuff leprechaun-charts 0.1.82

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/mqtt-to-stuff:0.1.82a02099acd3ee
tokio@1.53.1
1.51.6

Open the chart page →

732
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.42 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.4

2 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.433f05af5eb7c
tokio@1.52.3
1.51.6
ghcr.io/buoyantio/extension-init:enterprise-2.20.416ad7cf6b6f1
tokio@1.47.1
1.51.6

Open the chart page →

351
linkerd-preview-multiclusterlinkerd-buoyantVerified publisher26.10.12 of 3See more

linkerd-preview-multicluster linkerd-buoyant 26.10.1

2 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:preview-26.10.1aaf3c77c7980
tokio@1.53.1
1.51.6
ghcr.io/buoyantio/extension-init:preview-26.10.1c2ccc50dfd45
tokio@1.47.1
1.51.6

Open the chart page →

295
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
tokio@1.52.3
1.51.6

Open the chart page →

4,718
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
tokio@1.53.1
1.51.6

Open the chart page →

3,513
matrix-authentication-servicematrix-authentication-serviceVerified publisher0.1.271 of 1See more

matrix-authentication-service matrix-authentication-service 0.1.27

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:1.27.0085e37263957
tokio@1.50.0
1.51.6

Open the chart page →

444
mayastormayastorVerified publisher2.12.212 of 31See more

mayastor mayastor 2.12.2

12 of the 31 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.200429e487478
tokio@1.45.1
1.51.6
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
tokio@1.45.1
1.51.6
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
tokio@1.45.1
1.51.6
openebs/mayastor-api-rest:v2.12.20c646268cd8c
tokio@1.45.1
1.51.6
openebs/mayastor-csi-controller:v2.12.238a82f29f777
tokio@1.45.1
1.51.6
openebs/mayastor-csi-node:v2.12.2cbf834303735
tokio@1.45.1
1.51.6
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
tokio@1.45.1
1.51.6
openebs/mayastor-io-engine:v2.12.20161a3e6f902
tokio@1.45.1
1.51.6
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
tokio@1.45.1
1.51.6
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
tokio@1.45.1
1.51.6
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
tokio@1.45.1
1.51.6
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
tokio@1.45.1
1.51.6

Open the chart page →

32,128
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
tokio@1.52.1
1.51.6

Open the chart page →

2,219
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
localstack/localstack:latest21afb5c28e29
tokio@1.53.1
1.51.6

Open the chart page →

10,902
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
localstack/localstack:latestaa5632e041ca
tokio@1.53.1
1.51.6

Open the chart page →

11,049
home-assistantnewbenji-chartsVerified publisher0.7.21 of 1See more

home-assistant newbenji-charts 0.7.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.8.0a21689ef0510
tokio@1.52.3
1.51.6

Open the chart page →

4,468
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
tokio@1.53.1
1.51.6

Open the chart page →

5,747
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
tokio@1.53.1
1.51.6

Open the chart page →

1,337
paperless-ngxoli-the-devVerified publisher1.3.21 of 1See more

paperless-ngx oli-the-dev 1.3.2

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
tokio@1.53.1
1.51.6

Open the chart page →

6,319
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
tokio@1.53.1
1.51.6
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestbd496fa8c9df
tokio@1.53.1
1.51.6
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-plaso:latest8caaf6e36654
tokio@1.53.1
1.51.6
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
tokio@1.52.3
1.51.6
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
tokio@1.52.3
1.51.6

Open the chart page →

310,523
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest8673609841e3
tokio@1.53.1
1.51.6

Open the chart page →

7,457
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
tokio@1.53.1
1.51.6

Open the chart page →

2,494
cosmian-kmsquench-cosmian-kmsVerified publisher0.0.101 of 1See more

cosmian-kms quench-cosmian-kms 0.0.10

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cosmian-kmsdigest-pinnedb6140387c95f
tokio@1.53.1
1.51.6

Open the chart page →

107
documentdbquench-documentdbVerified publisher0.0.171 of 1See more

documentdb quench-documentdb 0.0.17

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/documentdbdigest-pinnedbaa76c0ffce3
tokio@1.52.1
1.51.6

Open the chart page →

73
garagequench-garageVerified publisher0.0.161 of 1See more

garage quench-garage 0.0.16

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/garagedigest-pinned1e06d994a93e
tokio@1.49.0
1.51.6

Open the chart page →

143
lgtm-stackquench-lgtm-stackVerified publisher0.0.431 of 9See more

lgtm-stack quench-lgtm-stack 0.0.43

1 of the 9 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
tokio@1.53.1
1.51.6

Open the chart page →

1,237
linkerd-cniquench-linkerd-cniVerified publisher0.0.41 of 1See more

linkerd-cni quench-linkerd-cni 0.0.4

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/linkerd-cnidigest-pinned235cb8ded647
tokio@1.53.1
1.51.6

Open the chart page →

63
litellmquench-litellmVerified publisher0.0.181 of 1See more

litellm quench-litellm 0.0.18

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned2388983ffcb2
tokio@1.50.0
1.51.6

Open the chart page →

120
llm-stackquench-llm-stackVerified publisher0.0.312 of 3See more

llm-stack quench-llm-stack 0.0.31

2 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/litellmdigest-pinned2388983ffcb2
tokio@1.50.0
1.51.6
ghcr.io/quenchworks/images/qdrantdigest-pinned65750911f8e7
tokio@1.53.1
1.51.6

Open the chart page →

243
logging-stackquench-logging-stackVerified publisher0.0.271 of 3See more

logging-stack quench-logging-stack 0.0.27

1 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
tokio@1.53.1
1.51.6

Open the chart page →

1,060
meilisearchquench-meilisearchVerified publisher0.0.211 of 1See more

meilisearch quench-meilisearch 0.0.21

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/meilisearchdigest-pinned02f71e56fb1e
tokio@1.52.3
1.51.6

Open the chart page →

186
prefectquench-prefectVerified publisher0.0.151 of 2See more

prefect quench-prefect 0.0.15

1 of the 2 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/prefectdigest-pinned101c830d55fe
tokio@1.51.1
1.51.6

Open the chart page →

110
qdrantquench-qdrantVerified publisher0.0.201 of 1See more

qdrant quench-qdrant 0.0.20

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/qdrantdigest-pinned65750911f8e7
tokio@1.53.1
1.51.6

Open the chart page →

123
selenium-gridquench-selenium-gridVerified publisher0.0.31 of 2See more

selenium-grid quench-selenium-grid 0.0.3

1 of the 2 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/selenium-node-firefoxdigest-pinned10e9ea3f2b3e
tokio@1.38.2
1.51.6

Open the chart page →

150
vectorquench-vectorVerified publisher0.0.171 of 1See more

vector quench-vector 0.0.17

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vectordigest-pinned3d07955aa984
tokio@1.53.1
1.51.6

Open the chart page →

134
ztunnelquench-ztunnelVerified publisher0.0.51 of 1See more

ztunnel quench-ztunnel 0.0.5

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ztunneldigest-pinneda0ff30bca996
tokio@1.53.2
1.51.6

Open the chart page →

71
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
tokio@1.43.0
1.51.6

Open the chart page →

12,822
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
tokio@1.44.1
1.51.6

Open the chart page →

6,583
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
tokio@1.52.3
1.51.6

Open the chart page →

2,701
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
tokio@1.52.3
1.51.6
safeglobal/safe-transaction-service:latest7b576c73f865
tokio@1.53.1
1.51.6

Open the chart page →

106,910
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
tokio@1.53.1
1.51.6

Open the chart page →

102,808
cryptgeonspnngl-cryptgeonVerified publisher0.1.11 of 1See more

cryptgeon spnngl-cryptgeon 0.1.1

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/spnngl/images/cryptgeon:2.9.3a303c076fb24
tokio@1.52.3
1.51.6

Open the chart page →

10
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
tokio@1.50.0
1.51.6

Open the chart page →

1,905
planoupstreamyardVerified publisher0.1.01 of 1See more

plano upstreamyard 0.1.0

1 of the 1 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
katanemo/plano:0.4.37a3d5748d8495
tokio@1.53.1
1.51.6

Open the chart page →

824
zoo-project-druzoo-projectOfficialVerified publisher0.11.01 of 6See more

zoo-project-dru zoo-project 0.11.0

1 of the 6 container images this version deploys carry RUSTSEC-2026-0386.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-e150308e13ba5e922d16e0eaef6547d60ffb2a40d05f09b1b46d
tokio@1.53.1
1.51.6

Open the chart page →

7,055

Container images carrying it

110 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/quenchworks/images/meilisearch02f71e56fb1e
tokio@1.52.3
1.51.6
1
ghcr.io/quenchworks/images/prefect101c830d55fe
tokio@1.51.1
1.51.6
1
ghcr.io/quenchworks/images/selenium-node-firefox10e9ea3f2b3e
tokio@1.38.2
1.51.6
1
ghcr.io/quenchworks/images/ztunnela0ff30bca996
tokio@1.53.2
1.51.6
1
ghcr.io/spnngl/images/cryptgeon:2.9.3a303c076fb24
tokio@1.52.3
1.51.6
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
tokio@1.53.1
1.51.6
1
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
tokio@1.53.1
1.51.6
1
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
tokio@1.53.1
1.51.6
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
tokio@1.53.1
1.51.6
1
registry.gitlab.com/dyff/dyff-api:0.57.183315ab73e19d
tokio@1.53.1
1.51.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.