StackRadar

CVE-2026-26130

High

Advisory

Published 10 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
3 of 4
affected packages

.NET Denial of Service Vulnerability

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
Microsoft.AspNetCore.App.Runtime.linux-x64nuget8.0.3, 8.0.4, 8.0.10, 8.0.11+5 more8.0.25, 9.0.14, 10.0.417
dotnet8.0rpm8.0.12-1.el8_100:8.0.25-1.el8_103
Microsoft.AspNetCore.App.Runtime.linux-musl-x64nuget9.0.11, 10.0.09.0.14, 10.0.42
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-4vgm-c2wm-63mwRHSA-2026:4455UBUNTU-CVE-2026-26130
Also known as
BIT-aspnet-core-2026-26130

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25

Open the chart page →

7,190
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.14

Open the chart page →

2,031
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25

Open the chart page →

30,234
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.2
10.0.4

Open the chart page →

4,010
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25

Open the chart page →

7,190
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25

Open the chart page →

49,025
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.25

Open the chart page →

3,192
innago-vault-k8s-role-operatorinnagoVerified publisher2.0.51 of 1See more

innago-vault-k8s-role-operator innago 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.11
9.0.14

Open the chart page →

1,052
rdt-clientk8s-home-lab-repo1.2.31 of 1See more

rdt-client k8s-home-lab-repo 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.0
10.0.4

Open the chart page →

227
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.25

Open the chart page →

3,179
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.11
9.0.14

Open the chart page →

4,292
nfl-walletnfl-walletVerified publisher0.1.33 of 4See more

nfl-wallet nfl-wallet 0.1.3

3 of the 4 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10

Open the chart page →

13,041
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.25

Open the chart page →

8,619
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.11
9.0.14

Open the chart page →

7,157
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.14

Open the chart page →

2,031
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.17
8.0.25

Open the chart page →

2,293
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-26130.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25

Open the chart page →

7,440

Container images carrying it

22 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
1
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.11
9.0.14
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.25
1
nethermind/nethermind:1.31.893e57917371a
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.14
1
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.14
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.25
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.25
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.11
9.0.14
1
sondresjo/bobby-api:latestfe534731909a
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.17
8.0.25
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.2
10.0.4
1
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.11
9.0.14
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.25
1
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.0
10.0.4
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.25
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
dotnet8.0@8.0.12-1.el8_10
0:8.0.25-1.el8_10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.