ALPINE-CVE-2026-118747: High severity alpine/dotnet10-runtime vulnerability
Published Nov 10, 2026
·Updated
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Affected Software
4 affected componentsFixes available
alpine/dotnet10-runtime<10.0.15-r0
10.0.15-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet10-runtimeto a version that resolves this vulnerability.Fixed in 10.0.15-r0 - Upgrade
Upgrade
alpine/dotnet8-runtimeto a version that resolves this vulnerability.Fixed in 8.0.34-r0
Event History
Nov 10, 2026
CVE Published
via OSV·07:19 PM
Data Sourced
via OSV·07:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
An unauthorized attacker can exploit it over a network. No privileges or user interaction are required.
2
What is the likely impact of successful exploitation?
Successful exploitation can cause a denial of service. The available impact information indicates availability impact only, with no stated confidentiality or integrity impact.
3
Which Alpine packages are identified as affected?
The affected software listed is alpine/dotnet8-runtime and alpine/dotnet10-runtime.