StackRadar

CVE-2026-62899

Medium

Advisory

Published 11 Aug 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
33
deployed by those charts
Fix available
2 of 3
affected packages

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 33 images.

Affected packageAffected versionsFixed inImages
Microsoft.NETCore.App.Runtime.linux-x64nuget8.0.3, 8.0.4, 8.0.10, 8.0.11+9 more8.0.30, 9.0.19, 10.0.1130
Microsoft.NETCore.App.Runtime.linux-musl-x64nuget9.0.11, 9.0.15, 10.0.09.0.19, 10.0.113
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-r6mh-95jw-g7qgUBUNTU-CVE-2026-62899
Also known as
BIT-dotnet-2026-62899, BIT-dotnet-sdk-2026-62899

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
technitium-dnsserverobeoneVerified publisher1.13.01 of 1See more

technitium-dnsserver obeone 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
Microsoft.NETCore.App.Runtime.linux-x64@10.0.9
10.0.11

Open the chart page →

1,187
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.14
9.0.19

Open the chart page →

4,127
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30

Open the chart page →

7,190
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.19

Open the chart page →

2,031
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11

Open the chart page →

22,420
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30

Open the chart page →

30,234
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.NETCore.App.Runtime.linux-x64@10.0.2
10.0.11

Open the chart page →

4,010
auth0-operatorauth0-operator1.4.121 of 1See more

auth0-operator auth0-operator 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11

Open the chart page →

694
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30

Open the chart page →

7,190
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
Microsoft.NETCore.App.Runtime.linux-x64@10.0.9
10.0.11

Open the chart page →

1,187
backbone-helm-chartenmeshed-backboneVerified publisher7.2.07 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.0

7 of the 7 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.0cece68d17393
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-admin-ui:7.2.0dd359527994c
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-consumer-api:7.2.05656ea8da38d
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-database-migrator:7.2.08b3a2166538d
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-event-handler:7.2.0c7df864d6dba
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-housekeeper:7.2.072b68857c882
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.015d00a765d86
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11

Open the chart page →

3,682
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11

Open the chart page →

933
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30

Open the chart page →

49,025
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.30

Open the chart page →

3,192
innago-vault-k8s-role-operatorinnagoVerified publisher2.0.51 of 1See more

innago-vault-k8s-role-operator innago 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.11
9.0.19

Open the chart page →

1,052
rdt-clientk8s-home-lab-repo1.2.31 of 1See more

rdt-client k8s-home-lab-repo 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
Microsoft.NETCore.App.Runtime.linux-musl-x64@10.0.0
10.0.11

Open the chart page →

227
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15
9.0.19

Open the chart page →

2,025
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.30

Open the chart page →

3,179
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.19

Open the chart page →

4,292
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.30

Open the chart page →

8,619
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
Microsoft.NETCore.App.Runtime.linux-x64@9.0.15
9.0.19

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.19

Open the chart page →

7,157
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.19

Open the chart page →

2,031
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
8.0.30

Open the chart page →

2,293
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-62899.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30

Open the chart page →

7,440

Container images carrying it

33 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
technitium/dns-server:15.4.0df7d90ef0f7b
Microsoft.NETCore.App.Runtime.linux-x64@10.0.9
10.0.11
2
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
1
janzo83/serviceexample:latestfb3c4ac36f3e
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.19
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.NETCore.App.Runtime.linux-x64@8.0.3
8.0.30
1
nethermind/nethermind:latest1b6b01419de4
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
nethermind/nethermind:1.31.893e57917371a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.19
1
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.NETCore.App.Runtime.linux-x64@9.0.4
9.0.19
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.NETCore.App.Runtime.linux-x64@8.0.4
8.0.30
1
ryshe/terraria:latestb1c89f7f359a
Microsoft.NETCore.App.Runtime.linux-x64@9.0.14
9.0.19
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.NETCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.30
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
Microsoft.NETCore.App.Runtime.linux-x64@9.0.11
9.0.19
1
sondresjo/bobby-api:latestfe534731909a
Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
8.0.30
1
tibyandocker/serviceexample:latesta4ad592cea84
Microsoft.NETCore.App.Runtime.linux-x64@9.0.15
9.0.19
1
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
Microsoft.NETCore.App.Runtime.linux-x64@10.0.2
10.0.11
1
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.11
9.0.19
1
ghcr.io/nmshd/backbone-admin-cli:7.2.0cece68d17393
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-admin-ui:7.2.0dd359527994c
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-consumer-api:7.2.05656ea8da38d
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-database-migrator:7.2.08b3a2166538d
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-event-handler:7.2.0c7df864d6dba
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-housekeeper:7.2.072b68857c882
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.015d00a765d86
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.NETCore.App.Runtime.linux-x64@8.0.10
8.0.30
1
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
Microsoft.NETCore.App.Runtime.linux-x64@10.0.10
10.0.11
1
ghcr.io/rogerfar/rdtclient:2.0.1388232cb0ddcf5
Microsoft.NETCore.App.Runtime.linux-musl-x64@10.0.0
10.0.11
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15
9.0.19
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.NETCore.App.Runtime.linux-x64@8.0.11
8.0.30
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.