CVE-2026-57108 (HIGH): detected in Lambda Docker Images.

[the-lambda-watchdog]

CVE Details

CVE ID	Severity	Affected Package	Installed Version	Fixed Version	Date Published	Date of Scan
CVE-2026-57108	HIGH	Microsoft.NETCore.App.Runtime.linux-x64	10.0.9	10.0.10, 9.0.18, 8.0.29	2026-07-14T18:18:35.15Z	2026-07-22T10:18:26.818320541Z

---

Affected Docker Images

Image Name	SHA
public.ecr.aws/lambda/dotnet:latest	public.ecr.aws/lambda/dotnet@sha256:0a667ab698ed982f30db704d88f11c328a8f957aa885bd51a48f8334c852d37b
public.ecr.aws/lambda/dotnet:10	public.ecr.aws/lambda/dotnet@sha256:0a667ab698ed982f30db704d88f11c328a8f957aa885bd51a48f8334c852d37b
public.ecr.aws/lambda/dotnet:9	public.ecr.aws/lambda/dotnet@sha256:ac033adc6a5caeaa952617f1c1c1876f9134b8686ba7ac1df4fe44a608f79976
public.ecr.aws/lambda/dotnet:8	public.ecr.aws/lambda/dotnet@sha256:32efda84323c35b02f6d6c39a85bfae87f2d1cfac8622d1dfe4026a515ba58f1

---

Description

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

---

Remediation Steps

• Update the affected package Microsoft.NETCore.App.Runtime.linux-x64 from version 10.0.9 to 10.0.10, 9.0.18, 8.0.29.

About this issue

• This issue may not contain all the information about the CVE nor the images it affects.
• This issue will not be updated with new information and the list of affected images may have changed since the creation of this issue.
• For more, visit Lambda Watchdog.
• This issue was created automatically by Lambda Watchdog.