StackRadar

CVE-2026-96960

High

Advisory

Published 13 Oct 2026In the index since 14 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 18,117 indexed, latest versions
Container images
13
deployed by those charts
Fix available
1 of 1
affected package

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability

Carried by container images the latest versions of 8 of 18,117 indexed charts deploy, on 13 images.

Affected packageAffected versionsFixed inImages
System.Security.Cryptography.Xmlnuget8.0.2, 9.0.1, 9.0.20, 10.0.10+1 more8.0.5, 9.0.21, 10.0.1313
OSV records
GHSA-7hqp-7c5m-4vq6

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
aspnet-corebitnamiVerified publisher9.5.11 of 3See more

aspnet-core bitnami 9.5.1

1 of the 3 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
bitnami/dotnet-sdk:latestf19fc9c48535
System.Security.Cryptography.Xml@10.0.12
10.0.13

Open the chart page →

499
nethermindchronicleVerified publisher0.0.151 of 1See more

nethermind chronicle 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
System.Security.Cryptography.Xml@9.0.1
9.0.21

Open the chart page →

2,478
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
System.Security.Cryptography.Xml@9.0.1
9.0.21

Open the chart page →

10,384
backbone-helm-chartenmeshed-backboneVerified publisher7.2.34 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.3

4 of the 7 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-database-migrator:7.2.39584941d1977
System.Security.Cryptography.Xml@10.0.10
10.0.13
ghcr.io/nmshd/backbone-event-handler:7.2.3763550d9b404
System.Security.Cryptography.Xml@10.0.10
10.0.13
ghcr.io/nmshd/backbone-housekeeper:7.2.38a5e3258fc66
System.Security.Cryptography.Xml@10.0.10
10.0.13
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.3734d28a296d9
System.Security.Cryptography.Xml@10.0.10
10.0.13

Open the chart page →

6,063
nfl-walletnfl-walletVerified publisher0.1.33 of 4See more

nfl-wallet nfl-wallet 0.1.3

3 of the 4 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
System.Security.Cryptography.Xml@8.0.2
8.0.5
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
System.Security.Cryptography.Xml@8.0.2
8.0.5
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
System.Security.Cryptography.Xml@8.0.2
8.0.5

Open the chart page →

13,993
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
System.Security.Cryptography.Xml@9.0.20
9.0.21

Open the chart page →

2,142
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
System.Security.Cryptography.Xml@8.0.2
8.0.5

Open the chart page →

9,658
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-96960.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
System.Security.Cryptography.Xml@9.0.1
9.0.21

Open the chart page →

2,478

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnami/dotnet-sdk:latestf19fc9c48535
System.Security.Cryptography.Xml@10.0.12
10.0.13
1
nethermind/nethermind:1.31.893e57917371a
System.Security.Cryptography.Xml@9.0.1
9.0.21
1
nethermind/nethermind:1.31.9aeca3b55bda5
System.Security.Cryptography.Xml@9.0.1
9.0.21
1
prowlercloud/prowler-api:5.31.14f252d579be2
System.Security.Cryptography.Xml@9.0.1
9.0.21
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
System.Security.Cryptography.Xml@8.0.2
8.0.5
1
toniblyx/prowler:stable9dbcc3c9abd7
System.Security.Cryptography.Xml@9.0.20
9.0.21
1
ghcr.io/nmshd/backbone-database-migrator:7.2.39584941d1977
System.Security.Cryptography.Xml@10.0.10
10.0.13
1
ghcr.io/nmshd/backbone-event-handler:7.2.3763550d9b404
System.Security.Cryptography.Xml@10.0.10
10.0.13
1
ghcr.io/nmshd/backbone-housekeeper:7.2.38a5e3258fc66
System.Security.Cryptography.Xml@10.0.10
10.0.13
1
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.3734d28a296d9
System.Security.Cryptography.Xml@10.0.10
10.0.13
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
System.Security.Cryptography.Xml@8.0.2
8.0.5
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
System.Security.Cryptography.Xml@8.0.2
8.0.5
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
System.Security.Cryptography.Xml@8.0.2
8.0.5
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.