CVE-2020-16156

High

Advisory

Published 13 Dec 2021In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 433; of 17,781 indexed, latest versions
Container images: 363; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 433 of 17,781 indexed charts deploy, on 363 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+14 more	5.18.2-2ubuntu1.7+esm4, 5.22.1-9ubuntu0.9+esm1, 5.26.1-6ubuntu0.6, 5.30.0-9ubuntu0.3+1 more	363

OSV records: UBUNTU-CVE-2020-16156
Also known as: USN-5689-1

Charts affected

433 by stars

Chart

Latest

Affected images

Radar Score

sdnc-websmo-helm-chart

6.0.0

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1

Open the chart page →

24,776

ueb-listenersmo-helm-chart

6.0.0

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1

Open the chart page →

25,769

space-engineerssoblivionscall

1.0.2

1 of 2 See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
library/ubuntu :xenial	1f1a2d56de1d	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm1

Open the chart page →

2,766

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

30,687

spotinst-ocean-network-clientspot

1.0.0

1 of 1 See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

6,950

pagessrinipages

1.0.0

2 of 3 See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

operatorstakewise

2.1.1

1 of 5 See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
sigp/lighthouse :v2.1.2	ad501f02cfef	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

6,545

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

14,493

pagesstephendillondell

1.0.0

2 of 3 See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

pagessunilb2590-pages

1.0.0

2 of 3 See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

elasticsearchsvtech-public-helm-charts

1.0.0

1 of 1 See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1

Open the chart page →

12,048

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

12,655

preparationsvtech-public-helm-charts

1.0.0

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1

Open the chart page →

12,048

explorersynapse

0.2.16

1 of 6 See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :latest	1cbf75aabe1e	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

8,518

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

10,568

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

10,514

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1
xeladock/nginx2 :latest	c259a67b1dff	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1

Open the chart page →

17,461

pagestest4322

1.0.0

2 of 3 See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

standard-applicationthebitgram

1.0.12

1 of 1 See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm1

Open the chart page →

11,007

trafficlight-apithecampagnards

0.1.1

1 of 1 See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
thecampagnards/trafficlight-api :main	7dca9d973837	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

4,357

pagesthiru-pages

1.0.0

2 of 3 See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

pagesthuy-pages

1.0.0

2 of 3 See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1

Open the chart page →

15,330

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

7,885

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

11,119

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6

Open the chart page →

9,743

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

15,230

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-16156.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3

Open the chart page →

9,207

Container images carrying it

363 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6	1
yandex/clickhouse-server :19.16	d210dc69321e	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.6	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm1	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm1	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm1	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.1	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6	1