CVE-2023-31486

High

Advisory

Published 29 Apr 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.017; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,519; of 17,803 indexed, latest versions
Container images: 1,574; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: perl-HTTP-Tiny security update

Carried by container images the latest versions of 1,519 of 17,803 indexed charts deploy, on 1,574 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+31 more	no fix listed	1,564
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.076-460.el9	0:0.074-2.el8, 0:0.076-461.el9	10

OSV records: DEBIAN-CVE-2023-31486 RHSA-2023:6542 RHSA-2023:7174 UBUNTU-CVE-2023-31486
Also known as: RHSA-2024:0579, RHSA-2024:4430

Charts affected

1,519 by stars

Chart

Latest

Affected images

Radar Score

juicefs-csi-driverwenerme

0.33.0

1 of 5 See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,992

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

15,437

mesherywenerme

1.0.70

1 of 1 See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,495

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	perl@5.34.0-3ubuntu1.1	no fix listed
openebs/node-disk-operator :2.1.0	6afe2123c457	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

10,613

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

15,376

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

9,354

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,741

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

6,350

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,584

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,519

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,162

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

14,226

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

11,643

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

7,672

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	perl@5.36.0-7+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	perl@5.36.0-7+deb12u1	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

13,875

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,710

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,649

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	perl@5.26.1-6ubuntu0.5	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2023-31486.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

7,949

Container images carrying it

1,574 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	perl@5.22.1-9ubuntu0.9	no fix listed	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.074-2.el8	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	perl@5.22.1-9ubuntu0.9	no fix listed	1
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	perl-HTTP-Tiny@0.074-1.el8	0:0.074-2.el8	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	perl-HTTP-Tiny@0.076-460.el9	0:0.076-461.el9	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	perl-HTTP-Tiny@0.074-1.el8	0:0.074-2.el8	1
quay.io/seamware/onboarding :0.2.2	b406475f9f00	perl@5.36.0-7+deb12u3	no fix listed	1
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	perl@5.36.0-7+deb12u3	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	perl@5.36.0-7	no fix listed	1
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/dyff/dyff-orchestrator :0.22.19	9bd5d93aaff7	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/dyff/workflows-sink :0.16.3	564718e28931	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	perl@5.36.0-7+deb12u1	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	perl@5.30.0-9ubuntu0.2	no fix listed	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	perl@5.36.0-7	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	perl@5.36.0-7+deb12u1	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	perl@5.36.0-7+deb12u2	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	perl@5.36.0-7+deb12u1	no fix listed	1