StackRadar

CVE-2026-45491

Medium

Advisory

Published 9 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 2
affected packages

Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
Microsoft.NETCore.App.Runtime.linux-x64nuget8.0.3, 8.0.4, 8.0.10, 8.0.11+7 more8.0.28, 9.0.17, 10.0.919
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-7q4v-2mr6-5gpxUBUNTU-CVE-2026-45491
Also known as
BIT-dotnet-2026-45491, BIT-dotnet-sdk-2026-45491

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.14
9.0.17

Open the chart page →

4,127
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28

Open the chart page →

7,190
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.17

Open the chart page →

2,031
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28

Open the chart page →

30,234
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.NETCore.App.Runtime.linux-x64@10.0.2
10.0.9

Open the chart page →

4,010
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28

Open the chart page →

7,190
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28

Open the chart page →

49,025
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.28

Open the chart page →

3,192
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.28

Open the chart page →

3,179
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.17

Open the chart page →

4,292
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
dotnet6@6.0.136-0ubuntu1~22.04.1
8.0.28
no fix listed

Open the chart page →

8,619
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
Microsoft.NETCore.App.Runtime.linux-x64@9.0.15
9.0.17

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.17

Open the chart page →

7,157
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.17

Open the chart page →

2,031
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
8.0.28

Open the chart page →

2,293
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-45491.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28

Open the chart page →

7,440

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
1
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.17
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.28
1
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.17
1
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.17
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.28
1
ryshe/terraria:latestb1c89f7f359a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.14
9.0.17
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
dotnet6@6.0.136-0ubuntu1~22.04.1
8.0.28
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.17
1
sondresjo/bobby-api:latestfe534731909a
Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
8.0.28
1
tibyandocker/serviceexample:latesta4ad592cea84
Microsoft.NETCore.App.Runtime.linux-x64@9.0.15
9.0.17
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.NETCore.App.Runtime.linux-x64@10.0.2
10.0.9
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.28
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.28
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.