StackRadar

CVE-2025-15649

Medium

Advisory

Published 27 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,329
of 17,828 indexed, latest versions
Container images
2,362
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,329 of 17,828 indexed charts deploy, on 2,362 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more5.38.2-3.2ubuntu0.4, 5.40.1-6+deb13u1, 5.40.1-6+e82,362
OSV records
DEBIAN-CVE-2025-15649UBUNTU-CVE-2025-15649ECHO-6de8-d6d9-d48a
Also known as
USN-8684-1

Charts affected

2,329 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,362 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
79
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed
79
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
perl@5.40.1-6
5.40.1-6+deb13u1
72
library/postgres:18:18.6:18.6-trixie:latest4ef4dbc939d6
perl@5.40.1-6
5.40.1-6+deb13u1
48
library/redis:8.10.1:latest298e5b3bc566
perl@5.40.1-6
5.40.1-6+deb13u1
28
library/nginx:stabled5792f71a949
perl@5.40.1-6
5.40.1-6+deb13u1
20
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
perl@5.40.1-6
5.40.1-6+deb13u1
17
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
13
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
perl@5.36.0-7+deb12u2
no fix listed
11
oomk8s/readiness-check:2.0.2875814cc853d
perl@5.22.1-9ubuntu0.6
no fix listed
11
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
10
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
no fix listed
10
library/kong:3.6a42d2b4503e7
perl@5.34.0-3ubuntu1.4
no fix listed
8
library/mongo:8:8.3.8:latest5211c51171f5
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
8
valkey/valkey:9.1.2:latestc123e3715db6
perl@5.40.1-6
5.40.1-6+deb13u1
8
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
7
library/postgres:16f1c3376c26f2
perl@5.40.1-6
5.40.1-6+deb13u1
7
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
perl@5.36.0-7+deb12u2
no fix listed
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
perl@5.36.0-7+deb12u2
no fix listed
6
jellyfin/jellyfin:10.11:10.11.11:latestaefb67e6a7ff
perl@5.40.1-6
5.40.1-6+deb13u1
6
library/postgres:18.4a02db8cac496
perl@5.40.1-6
5.40.1-6+deb13u1
6
oomk8s/readiness-check:2.0.07daa08b81954
perl@5.22.1-9ubuntu0.2
no fix listed
6
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
perl@5.36.0-7+deb12u3
no fix listed
6
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
perl@5.40.1-6
5.40.1-6+deb13u1
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
perl@5.36.0-7
no fix listed
6
quay.io/devtron/postgres:14.91b594392f7cb
perl@5.36.0-7
no fix listed
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
perl@5.36.0-7+deb12u1
no fix listed
5
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
perl@5.36.0-7+deb12u2
no fix listed
5
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
perl@5.36.0-7+deb12u3
no fix listed
5
library/mariadb:10.117f22313fc130
perl@5.34.0-3ubuntu1.9
no fix listed
5
library/mariadb:13.0.2:latestd4fdec0510ad
perl@5.40.1-7ubuntu0.3
no fix listed
5
library/mongo:4.44be76f674fc4
perl@5.30.0-9ubuntu0.5
no fix listed
5
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
perl@5.40.1-6
5.40.1-6+deb13u1
5
library/postgres:122f2a8c2a7d10
perl@5.36.0-7+deb12u1
no fix listed
5
library/ubuntu:latest2260313b31c8
perl@5.40.1-7ubuntu0.1
no fix listed
5
solsson/kafka:latest41e5d8f6f290
perl@5.30.0-9ubuntu0.2
no fix listed
5
valkey/valkey:9.1.1:9.1.1-trixie64e361b630ec
perl@5.40.1-6
5.40.1-6+deb13u1
5
vaultwarden/server:1.37.2:latest094b5689ed81
perl@5.40.1-6
5.40.1-6+deb13u1
5
artifacthub/postgres:latest4fd34fa635cc
perl@5.40.1-6
5.40.1-6+deb13u1
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
perl@5.36.0-7+deb12u2
no fix listed
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
perl@5.36.0-7+deb12u2
no fix listed
4
bitnamilegacy/postgresql:16233f361c5819
perl@5.36.0-7+deb12u1
no fix listed
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
perl@5.36.0-7+deb12u2
no fix listed
4
hyperledger/fabric-ca:latesta70b6ba64a08
perl@5.34.0-3ubuntu1.7
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
perl@5.22.1-9ubuntu0.5
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
perl@5.22.1-9ubuntu0.6
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
perl@5.34.0-3ubuntu1.3
no fix listed
4
library/httpd:2.4:2.4.68:latest979c38c2228d
perl@5.40.1-6
5.40.1-6+deb13u1
4
library/mongo:5.0-focal5e15a3f014ed
perl@5.30.0-9ubuntu0.5
no fix listed
4

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.