StackRadar

CVE-2026-44302

High

Advisory

Published 6 May 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
1 of 1
affected package

Snappier has an infinite loop during SnappyStream decompression with malformed framed input

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
Snappiernuget1.0.0, 1.1.61.3.137
OSV records
GHSA-pggp-6c3x-2xmx

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
Snappier@1.1.6
1.3.1

Open the chart page →

2,031
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
Snappier@1.0.0
1.3.1
fedodo/fedodo.be.auth:208f8eb7a1207e
Snappier@1.0.0
1.3.1

Open the chart page →

4,399
ms-catalogs-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-catalogs-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-catalogs-rest:latest03b80bec4458
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
Snappier@1.0.0
1.3.1

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
Snappier@1.0.0
1.3.1

Open the chart page →

9,367
ms-emails-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-worker:latest48fe7e6ceaba
Snappier@1.0.0
1.3.1

Open the chart page →

247
ms-filestorage-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-filestorage-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-filestorage-rest:latest7666ccfa0d68
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-licenses-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-grpc:latest360144457f4d
Snappier@1.0.0
1.3.1

Open the chart page →

1,136
ms-licenses-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-rest:latest52963715c729
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-licenses-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-worker:latest2c302fb759dc
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-locations-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-grpc:latest26855ebf033b
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-locations-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-rest:latestb8d4447931f4
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-microsoftgraph-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
Snappier@1.0.0
1.3.1

Open the chart page →

247
ms-microsoftgraph-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
Snappier@1.0.0
1.3.1

Open the chart page →

247
ms-modules-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
Snappier@1.0.0
1.3.1

Open the chart page →

1,136
ms-modules-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-rest:latest091de71a83df
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-notification-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-grpc:latestc7525541cb5f
Snappier@1.0.0
1.3.1

Open the chart page →

356
ms-notification-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-rest:lateste46e7e36b8e0
Snappier@1.0.0
1.3.1

Open the chart page →

87
ms-payments-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-payments-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-rest:latest6a3591b82a40
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-payments-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-worker:latest50171f042666
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-rbac-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-rbac-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-rest:latesta156d021775d
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-roles-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-roles-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-roles-rest:latestc364711341a0
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-services-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-services-grpc:latest1462eb1101db
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-services-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-services-rest:lateste0f8ef13842f
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-tenants-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-tenants-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-rest:latest5762fc421070
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-tenants-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-worker:latestf476a3084860
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latest2cff841dd824
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
Snappier@1.0.0
1.3.1

Open the chart page →

235
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest94094b21a2c5
Snappier@1.0.0
1.3.1

Open the chart page →

235
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Snappier@1.0.0
1.3.1

Open the chart page →

4,292
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
Snappier@1.0.0
1.3.1

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
Snappier@1.0.0
1.3.1

Open the chart page →

7,157
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-44302.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Snappier@1.1.6
1.3.1

Open the chart page →

2,031

Container images carrying it

37 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codedesignplus/ms-catalogs-rest:latest03b80bec4458
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-emails-grpc:lateste336012bc781
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-emails-rest:latestac84661c605e
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-emails-worker:latest48fe7e6ceaba
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-filestorage-rest:latest7666ccfa0d68
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-licenses-grpc:latest360144457f4d
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-licenses-rest:latest52963715c729
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-licenses-worker:latest2c302fb759dc
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-locations-grpc:latest26855ebf033b
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-locations-rest:latestb8d4447931f4
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-modules-rest:latest091de71a83df
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-notification-grpc:latestc7525541cb5f
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-notification-rest:lateste46e7e36b8e0
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-payments-rest:latest6a3591b82a40
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-payments-worker:latest50171f042666
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-rbac-rest:latesta156d021775d
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-roles-rest:latestc364711341a0
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-services-grpc:latest1462eb1101db
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-services-rest:lateste0f8ef13842f
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-tenants-rest:latest5762fc421070
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-tenants-worker:latestf476a3084860
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-users-grpc:latest2cff841dd824
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
Snappier@1.0.0
1.3.1
1
codedesignplus/ms-users-worker:latest94094b21a2c5
Snappier@1.0.0
1.3.1
1
fedodo/fedodo.be.activitypub:14728dada8e3216
Snappier@1.0.0
1.3.1
1
fedodo/fedodo.be.auth:208f8eb7a1207e
Snappier@1.0.0
1.3.1
1
janzo83/serviceexample:latestfb3c4ac36f3e
Snappier@1.0.0
1.3.1
1
nethermind/nethermind:1.31.893e57917371a
Snappier@1.1.6
1.3.1
1
nethermind/nethermind:1.31.9aeca3b55bda5
Snappier@1.1.6
1.3.1
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Snappier@1.0.0
1.3.1
1
tibyandocker/serviceexample:latesta4ad592cea84
Snappier@1.0.0
1.3.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.