StackRadar

CVE-2026-44788

Medium

Advisory

Published 8 May 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
48
of 17,781 indexed, latest versions
Container images
54
deployed by those charts
Fix available
1 of 1
affected package

SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

Carried by container images the latest versions of 48 of 17,781 indexed charts deploy, on 54 images.

Affected packageAffected versionsFixed inImages
SharpCompressnuget0.18.2, 0.22.0, 0.23.0, 0.24.0+6 more0.48.054
OSV records
GHSA-6c8g-7p36-r338

Charts affected

48 by stars
ChartLatestAffected imagesRadar Score
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
SharpCompress@0.26.0
0.48.0

Open the chart page →

7,880
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
SharpCompress@0.32.2
0.48.0

Open the chart page →

4,244
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1305a9734d7e83
SharpCompress@0.32.2
0.48.0

Open the chart page →

14,238
eshoponabpabp-charts1.0.06 of 15See more

eshoponabp abp-charts 1.0.0

6 of the 15 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
SharpCompress@0.23.0
0.48.0
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
SharpCompress@0.23.0
0.48.0
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
SharpCompress@0.23.0
0.48.0
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
SharpCompress@0.23.0
0.48.0
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
SharpCompress@0.23.0
0.48.0
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
SharpCompress@0.23.0
0.48.0

Open the chart page →

19,799
duplicaticronce0.1.01 of 1See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
SharpCompress@0.24.0
0.48.0

Open the chart page →

3,026
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
SharpCompress@0.30.1
0.48.0
fedodo/fedodo.be.auth:208f8eb7a1207e
SharpCompress@0.30.1
0.48.0

Open the chart page →

4,399
voice-biometricslumenvox2.0.11 of 26See more

voice-biometrics lumenvox 2.0.1

1 of the 26 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
lumenvox/cloud-binary-storage:2.0.053decadc102d
SharpCompress@0.23.0
0.48.0

Open the chart page →

70,741
embybryanalves0.1.01 of 1See more

emby bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
emby/embyserver:3.6.0.8128a492828e93
SharpCompress@0.22.0
0.48.0

Open the chart page →

276
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
SharpCompress@0.18.2
0.48.0

Open the chart page →

10,776
ms-catalogs-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-catalogs-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-catalogs-rest:latest03b80bec4458
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
SharpCompress@0.30.1
0.48.0

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
SharpCompress@0.30.1
0.48.0

Open the chart page →

9,367
ms-emails-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-worker:latest48fe7e6ceaba
SharpCompress@0.30.1
0.48.0

Open the chart page →

247
ms-filestorage-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-filestorage-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-filestorage-rest:latest7666ccfa0d68
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-licenses-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-grpc:latest360144457f4d
SharpCompress@0.30.1
0.48.0

Open the chart page →

1,136
ms-licenses-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-rest:latest52963715c729
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-licenses-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-worker:latest2c302fb759dc
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-locations-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-grpc:latest26855ebf033b
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-locations-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-rest:latestb8d4447931f4
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-microsoftgraph-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
SharpCompress@0.30.1
0.48.0

Open the chart page →

247
ms-microsoftgraph-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
SharpCompress@0.30.1
0.48.0

Open the chart page →

247
ms-modules-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
SharpCompress@0.30.1
0.48.0

Open the chart page →

1,136
ms-modules-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-rest:latest091de71a83df
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-notification-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-grpc:latestc7525541cb5f
SharpCompress@0.30.1
0.48.0

Open the chart page →

356
ms-notification-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-rest:lateste46e7e36b8e0
SharpCompress@0.30.1
0.48.0

Open the chart page →

87
ms-payments-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-payments-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-rest:latest6a3591b82a40
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-payments-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-worker:latest50171f042666
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-rbac-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-rbac-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-rest:latesta156d021775d
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-roles-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-roles-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-roles-rest:latestc364711341a0
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-services-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-services-grpc:latest1462eb1101db
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-services-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-services-rest:lateste0f8ef13842f
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-tenants-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-tenants-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-rest:latest5762fc421070
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-tenants-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-worker:latestf476a3084860
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latest2cff841dd824
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest94094b21a2c5
SharpCompress@0.30.1
0.48.0

Open the chart page →

235
embyembyVerified publisher1.4.01 of 1See more

emby emby 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
emby/embyserver:4.9.1.8022298eefb428
SharpCompress@0.33.0
0.48.0

Open the chart page →

97
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
SharpCompress@0.26.0
0.48.0

Open the chart page →

8,545
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SharpCompress@0.32.1
0.48.0

Open the chart page →

1,381
rdt-clientk8s-home-lab-repo1.2.31 of 1See more

rdt-client k8s-home-lab-repo 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
SharpCompress@0.42.1
0.48.0

Open the chart page →

227
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
SharpCompress@0.23.0
0.48.0

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
SharpCompress@0.23.0
0.48.0

Open the chart page →

8,361
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
SharpCompress@0.30.1
0.48.0

Open the chart page →

4,292
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
SharpCompress@0.30.1
0.48.0

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-44788.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
SharpCompress@0.30.1
0.48.0

Open the chart page →

7,157

Container images carrying it

54 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
SharpCompress@0.23.0
0.48.0
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
SharpCompress@0.23.0
0.48.0
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
SharpCompress@0.23.0
0.48.0
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
SharpCompress@0.23.0
0.48.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.