StackRadar

CVE-2026-50527

High

Advisory

Published 14 Jul 2026In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
6
of 17,781 indexed, latest versions
Container images
8
deployed by those charts
Fix available
1 of 2
affected packages

Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
System.Security.Cryptography.Xmlnuget8.0.1, 8.0.2, 9.0.18.0.4, 9.0.188
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-mmjf-rqrv-855vUBUNTU-CVE-2026-50527
Also known as
BIT-dotnet-2026-50527, BIT-dotnet-sdk-2026-50527

Charts affected

6 by stars
ChartLatestAffected imagesRadar Score
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
System.Security.Cryptography.Xml@9.0.1
9.0.18

Open the chart page →

2,031
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
System.Security.Cryptography.Xml@9.0.1
9.0.18

Open the chart page →

8,158
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
System.Security.Cryptography.Xml@8.0.1
8.0.4

Open the chart page →

5,292
nfl-walletnfl-walletVerified publisher0.1.33 of 4See more

nfl-wallet nfl-wallet 0.1.3

3 of the 4 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
System.Security.Cryptography.Xml@8.0.2
8.0.4
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
System.Security.Cryptography.Xml@8.0.2
8.0.4
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
System.Security.Cryptography.Xml@8.0.2
8.0.4

Open the chart page →

13,041
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
System.Security.Cryptography.Xml@8.0.2
no fix listed
8.0.4

Open the chart page →

8,619
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-50527.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
System.Security.Cryptography.Xml@9.0.1
9.0.18

Open the chart page →

2,031

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flanksource/batch-runner:v1.0.44689687a7cf95
System.Security.Cryptography.Xml@8.0.1
8.0.4
1
nethermind/nethermind:1.31.893e57917371a
System.Security.Cryptography.Xml@9.0.1
9.0.18
1
nethermind/nethermind:1.31.9aeca3b55bda5
System.Security.Cryptography.Xml@9.0.1
9.0.18
1
prowlercloud/prowler-api:5.31.14f252d579be2
System.Security.Cryptography.Xml@9.0.1
9.0.18
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
System.Security.Cryptography.Xml@8.0.2
no fix listed
8.0.4
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
System.Security.Cryptography.Xml@8.0.2
8.0.4
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
System.Security.Cryptography.Xml@8.0.2
8.0.4
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
System.Security.Cryptography.Xml@8.0.2
8.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.