StackRadar

CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,267
of 17,787 indexed, latest versions
Container images
1,323
deployed by those charts
Fix available
41 of 41
affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,267 of 17,787 indexed charts deploy, on 1,323 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.21,297
perlrpm0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more26
perl-Carprpm1.42-396.el80:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb16
perl-constantrpm1.33-396.el80:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb16
perl-Exporterrpm5.72-396.el80:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb16
perl-File-Pathrpm2.15-2.el80:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb16
perl-parentrpm1:0.237-1.el81:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb16
perl-PathToolsrpm3.74-1.el80:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb16
perl-Scalar-List-Utilsrpm3:1.49-2.el84:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb16
perl-Socketrpm4:2.027-3.el84:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb16
perl-Text-Tabs+Wraprpm2013.0523-395.el80:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb16
perl-threadsrpm1:2.21-2.el81:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb16
perl-threads-sharedrpm1.58-2.el80:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb16
perl-Unicode-Normalizerpm1.25-396.el80:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb16
perl-Encoderpm4:2.97-3.el84:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb15
perl-File-Temprpm0.230.600-1.el81:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb15
perl-Getopt-Longrpm1:2.50-4.el81:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb15
perl-HTTP-Tinyrpm0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb15
perl-MIME-Base64rpm3.15-396.el80:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb15
perl-Pod-Escapesrpm1:1.07-395.el81:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb15
perl-podlatorsrpm4.11-1.el81:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb15
perl-Pod-Perldocrpm3.28-396.el80:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb15
perl-Pod-Simplerpm1:3.35-395.el81:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb15
perl-Pod-Usagerpm4:1.69-395.el84:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb15
perl-Storablerpm1:3.11-3.el81:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb15
perl-Term-ANSIColorrpm4.06-396.el80:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb15
perl-Term-Caprpm1.17-395.el80:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb15
perl-Text-ParseWordsrpm3.30-395.el80:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb15
perl-Time-Localrpm1:1.280-1.el82:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb15
perl-Data-Dumperrpm2.167-399.el80:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb14
perl-Digestrpm1.17-395.el80:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb13
perl-Digest-MD5rpm2.55-396.el80:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb13
perl-IO-Socket-IPrpm0.39-5.el80:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb13
perl-libnetrpm3.11-3.el80:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb13
perl-URIrpm1.73-3.el80:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb13
perl-Thread-Queuerpm3.13-1.el80:3.14-457.module+el8.10.0+21354+3ad137bb2
perl-Compress-Raw-Bzip2rpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
perl-Compress-Raw-Zlibrpm2.081-1.el80:2.096-2.module+el8.10.0+21354+3ad137bb1
perl-Digest-SHArpm1:6.02-1.el81:6.02-2.module+el8.10.0+21354+3ad137bb1
perl-Encode-Localerpm1.05-10.module+el8.3.0+6498+9eecfe510:1.05-10.module+el8.10.0+21354+3ad137bb1
perl-IO-Compressrpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
OSV records
DEBIAN-CVE-2025-40909RHSA-2025:11545RHSA-2025:11804RHSA-2025:11805RHSA-2026:37070RHSA-2026:8096RLSA-2025:11804UBUNTU-CVE-2025-40909openSUSE-SU-2025:15258-1
Also known as
USN-7678-1

Charts affected

1,267 by stars
ChartLatestAffected imagesRadar Score
devtron-operatordevtron-labs0.23.35 of 11See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.2
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
perl@5.36.0-7
5.36.0-7+deb12u3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.2
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.2
quay.io/devtron/postgres:14.91b594392f7cb
perl@5.36.0-7
5.36.0-7+deb12u3

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

11,957
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,699
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
perl@5.26.1-6ubuntu0.5
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

27,608
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

4,053
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
langgenius/dify-sandbox:0.2.009b7e8705673
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

19,063
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,233
alertifydjjudas21Verified publisher0.1.01 of 1See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
djjudas21/alertify:0.1.0ba22be670c37
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

2,384
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
perl@5.36.0-7
5.36.0-7+deb12u3

Open the chart page →

7,167
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

10,129
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.2

Open the chart page →

17,053
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
perl@5.36.0-7
5.36.0-7+deb12u3

Open the chart page →

13,031
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

8,991
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

24,975
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

11,831
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
perl@5.26.1-6ubuntu0.5
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

24,714
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
perl@5.34.0-3ubuntu1
5.34.0-3ubuntu1.5

Open the chart page →

30,759
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
perl@5.22.1-9ubuntu0.6
no fix listed

Open the chart page →

19,820
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

9,251
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2

Open the chart page →

1,970
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

2,399
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

4,593
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

9,805
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

2,397
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

10,995
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,233
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

5,150
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

7,333
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2

Open the chart page →

3,944
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

8,046
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

25,239
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

1,902
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

10,605
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
emqx/ecp-ui:2.5.1e33e9816f147
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
library/telegraf:1.27507a3eecf809
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

22,845
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

2,740
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

6,154
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,946
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
perl@5.30.0-9ubuntu0.4
no fix listed

Open the chart page →

5,150
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
perl@5.26.1-6ubuntu0.5
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

27,349
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0-focal5e15a3f014ed
perl@5.30.0-9ubuntu0.5
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
mastercloudapps/planner:v1.2340a950b311b2
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0-focal5e15a3f014ed
perl@5.30.0-9ubuntu0.5
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
mastercloudapps/planner:v1.2340a950b311b2
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

27,667
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
perl@5.26.1-6ubuntu0.5
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

27,314
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:4.4.66efa05203990
perl@5.26.1-6ubuntu0.5
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

28,539
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

27,188
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0-focal5e15a3f014ed
perl@5.30.0-9ubuntu0.5
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
mastercloudapps/planner:v1.2340a950b311b2
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

27,812
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

9,383
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

5,316

Container images carrying it

1,323 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container imageDigestPackageFixed inUsed by
merlos/zookeeper:3.9.3a38fc7e09ed7
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
middlewareeng/middleware:0.3.1747d880812f1
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
milvusdb/milvus:v2.2.13a3a55e1c1497
perl@5.30.0-9ubuntu0.2
no fix listed
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
perl@5.30.0-9ubuntu0.2
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
miqm/session-scaler:0.1.0c5c211717d9b
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
mlikiowa/napcat-docker:latest1336a777f9a4
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
1
moreillon/api-proxy:latestd7d4a5463525
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
moreillon/camera-viewer:lateste418cc694bd5
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
moreillon/food-manager:lateste8fd856e593d
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
moreillon/user-manager-front:v5.1.06597e6b98d21
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
perl@5.36.0-7
5.36.0-7+deb12u3
1
mshanley80/httpbin2022:latest5b189a70c0fb
perl@5.30.0-9ubuntu0.3
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
muluder/prograncontrollermcord:0.1.843b597a93da7
perl@5.22.1-9ubuntu0.2
no fix listed
1
murtazashah46/helmfile:latest4d11726cf803
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
mvance/unbound:1.20.04bf67b567f39
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
mvance/unbound:1.22.076906da36d18
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
netbirdio/management:0.45.10c9994b393ea
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2
1
netbirdio/management:0.46.0b0adc4ad4ec6
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
perl@5.34.0-3ubuntu1
5.34.0-3ubuntu1.5
1
nethermind/nethermind:1.14.615517708c3b6
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
1
nethermind/nethermind:1.31.893e57917371a
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.2
1
nethermind/nethermind:1.31.9aeca3b55bda5
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.2
1
netrisai/controller-grpc:4.6.0.00753178bf173c2
perl@5.30.0-9ubuntu0.5
no fix listed
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
perl@5.30.0-9ubuntu0.5
no fix listed
1
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
perl@5.30.0-9ubuntu0.5
no fix listed
1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
perl@5.30.0-9ubuntu0.2
no fix listed
1
networkboot/dhcpd:lateste99bbfbd6fb2
perl@5.34.0-3ubuntu1
5.34.0-3ubuntu1.5
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
perl@5.22.1-9ubuntu0.5
no fix listed
1
nirmalnaveen/supermario:latest8541a39162f3
perl@5.36.0-7
5.36.0-7+deb12u3
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
perl@5.30.0-9ubuntu0.2
no fix listed
1
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
perl@5.22.1-9ubuntu0.9
no fix listed
1
obolnetwork/helios:e10e753cb7e97d39d46
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.2
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
oled01/automx2:2025.1.105d3e398e675
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
oled01/db-backup:0.1.06302fd2b5333
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
1
omecproject/c3po-hss:master-latest638671ef4842
perl@5.22.1-9ubuntu0.9
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
perl@5.30.0-9ubuntu0.2
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
perl@5.26.1-6ubuntu0.3
no fix listed
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
perl@5.26.1-6ubuntu0.3
no fix listed
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
perl@5.26.1-6ubuntu0.5
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
perl@5.26.1-6ubuntu0.3
no fix listed
1
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
perl@5.26.1-6ubuntu0.3
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
perl@5.22.1-9ubuntu0.2
no fix listed
1
omecproject/openmme:master-latest64776cb9edb3
perl@5.22.1-9ubuntu0.6
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
perl@5.22.1-9ubuntu0.6
no fix listed
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.