StackRadar

CVE-2026-58280

High

Advisory

Published 13 Oct 2026In the index since 14 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
83
of 18,117 indexed, latest versions
Container images
104
deployed by those charts
Fix available
2 of 2
affected packages

Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability

Carried by container images the latest versions of 83 of 18,117 indexed charts deploy, on 104 images.

Affected packageAffected versionsFixed inImages
Microsoft.NETCore.App.Runtime.linux-x64nuget8.0.3, 8.0.4, 8.0.8, 8.0.10+13 more8.0.32, 9.0.21, 10.0.1359
Microsoft.NETCore.App.Runtime.linux-musl-x64nuget8.0.30, 9.0.11, 9.0.15, 9.0.20+2 more8.0.32, 9.0.21, 10.0.1345
OSV records
GHSA-mc4q-93x5-f6hj

Charts affected

83 by stars
ChartLatestAffected imagesRadar Score
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latestd18d90701929
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21

Open the chart page →

210
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:latest38a44b940cf6
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21

Open the chart page →

210
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest4e8463697def
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21

Open the chart page →

210
technitiumdeimosfr-charts15.5.11 of 1See more

technitium deimosfr-charts 15.5.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
technitium/dns-server:15.5.1b8efe03a5e3b
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

887
backbone-helm-chartenmeshed-backboneVerified publisher7.2.37 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.3

7 of the 7 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.3eb959d566216
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-admin-ui:7.2.3462b7b384ee6
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-consumer-api:7.2.3c3af06abdae7
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-database-migrator:7.2.39584941d1977
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-event-handler:7.2.3763550d9b404
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-housekeeper:7.2.38a5e3258fc66
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.3734d28a296d9
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.13

Open the chart page →

6,063
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
nethermind/nethermind:latest25f72063f6fc
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

787
garge-apigargeVerified publisher0.1.661 of 1See more

garge-api garge 0.1.66

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.16.14299b540971b
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

1,138
garge-operatorgargeVerified publisher0.1.411 of 1See more

garge-operator garge 0.1.41

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/garge-operator:v1.12.1a414ee2a3d5e
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.32

Open the chart page →

58,805
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.32

Open the chart page →

3,587
innago-vault-k8s-role-operatorinnagoVerified publisher2.0.51 of 1See more

innago-vault-k8s-role-operator innago 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.11
9.0.21

Open the chart page →

1,219
archisteamfarmjuniorjpdj0.1.1371 of 1See more

archisteamfarm juniorjpdj 0.1.137

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:6.3.10.4af5d4b28ef3a
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
rdt-clientk8s-home-lab-repo1.2.31 of 1See more

rdt-client k8s-home-lab-repo 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
Microsoft.NETCore.App.Runtime.linux-musl-x64@10.0.0
10.0.13

Open the chart page →

353
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15
9.0.21

Open the chart page →

2,327
recyclarrm0nsterrr-recyclarrVerified publisher2.7.31 of 1See more

recyclarr m0nsterrr-recyclarr 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/recyclarr/recyclarr:8.7.39c6c74d52cfc
Microsoft.NETCore.App.Runtime.linux-musl-x64@10.0.12
10.0.13

Open the chart page →

205
cleanuparrmedia-servarrVerified publisher0.20.11 of 1See more

cleanuparr media-servarr 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.9cfada3e57214
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

2,037
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.32

Open the chart page →

3,572
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.21

Open the chart page →

4,627
notifynl-omcnotifynlOfficialVerified publisher0.4.381 of 1See more

notifynl-omc notifynl 0.4.38

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
worthnl/notifynl-omc:2.3.1e4e232b4aab9
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
8.0.32

Open the chart page →

9,658
serviceexamplesathya0.1.11 of 1See more

serviceexample sathya 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sathyafire/serviceexample:latest9f023bf424b3
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.21

Open the chart page →

2,456
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
Microsoft.NETCore.App.Runtime.linux-x64@9.0.15
9.0.21

Open the chart page →

4,261
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.21

Open the chart page →

10,454
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.21

Open the chart page →

2,478
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-transfer:master238449cc9f33
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
siscc/dotstatsuite-dbup:masterfcc71a55ad6e
Microsoft.NETCore.App.Runtime.linux-musl-x64@10.0.12
10.0.13

Open the chart page →

5,091
fdi-dotstatsuitestatcan0.3.53 of 3See more

fdi-dotstatsuite statcan 0.3.5

3 of the 3 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:master9c334b91d745
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
siscc/dotstatsuite-core-transfer:master238449cc9f33
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
siscc/sdmxri-nsi-maapi:master6cf1145566f0
Microsoft.NETCore.App.Runtime.linux-musl-x64@8.0.30
8.0.32

Open the chart page →

928
altinnendata-apitumogroup0.1.211 of 1See more

altinnendata-api tumogroup 0.1.21

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/altinnendata-api:v1.8.4401fabc6aa5e
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
8.0.32

Open the chart page →

2,687
nstuning-apitumogroup0.1.261 of 1See more

nstuning-api tumogroup 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/nstuning-api:v1.7.2ce827dcb8284
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
pyttogpanne-apitumogroup0.1.71 of 1See more

pyttogpanne-api tumogroup 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
sondresjo/pyttogpanne-api:v1.0.54789c6031d93
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13

Open the chart page →

609
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32

Open the chart page →

8,628
welcome-apiwelcome-api7.0.01 of 1See more

welcome-api welcome-api 7.0.0

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
lucassandin/welcome-api:latest04551c5d5881
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.32

Open the chart page →

3,506
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-58280.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
Microsoft.NETCore.App.Runtime.linux-x64@10.0.11
10.0.13

Open the chart page →

1,009

Container images carrying it

104 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
emberstack/kubernetes-reflector:10.0.6551dbd5880929
Microsoft.NETCore.App.Runtime.linux-x64@10.0.11
10.0.13
3
siscc/dotstatsuite-core-transfer:master238449cc9f33
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
2
thiagoguaru/alerthawk.monitoring:3.3.104f784331bfd0
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
2
bitnami/aspnet-core:latestc93a17cbfe74
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
1
bitnami/dotnet-sdk:latestf19fc9c48535
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
1
codedesignplus/ms-catalogs-rest:lateste20fbd3e76d7
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-emails-grpc:latesta58910e324ed
Microsoft.NETCore.App.Runtime.linux-x64@9.0.20
9.0.21
1
codedesignplus/ms-emails-rest:latestca3c2f3a0863
Microsoft.NETCore.App.Runtime.linux-x64@9.0.20
9.0.21
1
codedesignplus/ms-emails-worker:latestaa3752d9dcda
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-filestorage-grpc:latest361288f310d6
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-filestorage-rest:latest9c1317edf7f3
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-licenses-grpc:latest4557cf2f2fb4
Microsoft.NETCore.App.Runtime.linux-x64@9.0.20
9.0.21
1
codedesignplus/ms-licenses-rest:latest3e8c9e7f696a
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-licenses-worker:latest5883bc5de971
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-locations-grpc:latest388ad43b1c83
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-locations-rest:latestedf1113fdf18
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-microsoftgraph-rest:latest7b950170df6a
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-microsoftgraph-worker:latest17f121b39abb
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-modules-grpc:latesta6c990ec5315
Microsoft.NETCore.App.Runtime.linux-x64@9.0.20
9.0.21
1
codedesignplus/ms-modules-rest:latesta606d19bcab9
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-notification-grpc:latestf5964ddad876
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-notification-rest:latestac33a1dd2454
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-payments-grpc:latested1273786bb6
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-payments-rest:latest777c1fc6df34
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-payments-worker:latestb6384084a880
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-rbac-grpc:latestaa9e12870e9d
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-rbac-rest:latest09a520dc923b
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-roles-rest:latestf30d564a5385
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-services-grpc:latestd29b57d98197
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-services-rest:latest0460082bdcd9
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-tenants-grpc:latestefd520d9671d
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-tenants-rest:latest8ce672f94542
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-tenants-worker:latest613cffb1bbd8
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-users-grpc:latestd18d90701929
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-users-rest:latest38a44b940cf6
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
codedesignplus/ms-users-worker:latest4e8463697def
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.20
9.0.21
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.32
1
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.21
1
lucassandin/welcome-api:latest04551c5d5881
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.32
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.32
1
nethermind/nethermind:latest25f72063f6fc
Microsoft.NETCore.App.Runtime.linux-x64@10.0.12
10.0.13
1
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.21
1
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.21
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.32
1
ryshe/terraria:latestb1c89f7f359a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.14
9.0.21
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
8.0.32
1
sathyafire/serviceexample:latest9f023bf424b3
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.21
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.32
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.