CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,267; of 17,787 indexed, latest versions
Container images: 1,323; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,267 of 17,787 indexed charts deploy, on 1,323 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,297
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,267 by stars

Chart

Latest

Affected images

Radar Score

devtron-operatordevtron-labs

0.23.3

5 of 11 See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	perl@5.36.0-7	5.36.0-7+deb12u3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/postgres :14.9	1b594392f7cb	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

31,447

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,957

migration-incluster-cddevtron-labs

0.10.0

1 of 1 See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,699

eoloplannerdfa-amm-eoloplanner

0.1.0

2 of 7 See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,608

dial-admindial

0.18.0

1 of 3 See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

4,053

difydify

1.0.0

2 of 4 See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.0.0	066035f93856	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
langgenius/dify-sandbox :0.2.0	09b7e8705673	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

19,063

pagesdipak

1.0.0

2 of 3 See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,233

alertifydjjudas21

0.1.0

1 of 1 See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
djjudas21/alertify :0.1.0	ba22be670c37	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,384

domainmoddjjudas21

1.0.0

1 of 1 See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
domainmod/domainmod :4.23.0	4017bfe4c597	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

7,167

ownclouddjjudas21

0.3.23

1 of 3 See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,129

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

17,053

wizarrdjjudas21

0.1.5

1 of 1 See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

13,031

api-postsdniel

0.9.1

1 of 1 See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dniel/api-posts :master	45a667852f2a	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

8,991

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

24,975

seleniumdouban

1.3.2

1 of 1 See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,831

eoloplannerdreyg-jescribanob-chart-eoloplanner

0.1.0

2 of 7 See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

24,714

drogue-cloud-examplesdrogue-iot

0.7.11

1 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

30,759

rundeckdwardu-helm-charts

0.3.4

1 of 2 See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.2.7	4d64fe56f767	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

19,820

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,251

bitcoinddysnix

0.4.3

1 of 2 See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

1,970

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,399

idmeclipse-aerios

2.0.0

1 of 2 See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,593

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

9,805

self-orchestratoreclipse-aerios

1.2.0

1 of 1 See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
eclipseaerios/self-orchestrator :1.2.0	8b123bec5679	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,397

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

10,995

pagesedgwarepages

1.0.0

2 of 3 See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,233

deploy-elibraryeducative-helm-bookapp

0.5.0

1 of 1 See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
maksymhencha/educative-helm-bookapp :0.0.2	7f096a681192	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

5,150

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

7,333

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,944

mongodb-charteks-3-tier-app-chart

0.1.0

1 of 1 See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

8,046

seafileeleksbai

0.1.1

1 of 3 See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.10	6693911bcc40	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

25,239

redisemberstack

1.0.21

1 of 1 See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/redis :8.0.2	b43d2dcbbdb1	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

1,902

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,605

kube-ecp-stackemqx-operator

2.5.1

3 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
datalayers/datalayers :v2.2.10	17b292079239	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
emqx/ecp-ui :2.5.1	e33e9816f147	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
library/telegraf :1.27	507a3eecf809	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

22,845

enclaveenclave

0.1.1

1 of 1 See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
enclavenetworks/enclave :latest	0a99759300d1	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

2,740

kube-packetloss-exporterenix

0.2.1

1 of 2 See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.31	64614ef8290f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,154

monitoring-proxyenix

0.3.0

1 of 2 See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/haproxy :2.9.6	fc5748ff7c72	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,946

mariadbeoc-charts

0.3.14

1 of 1 See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.15	e22328f4d714	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

5,150

eolicplantseolicplants

0.1.0

2 of 7 See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,349

eoloPlanteolo-planner

0.1.0

4 of 7 See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplannereoloplanner

0.1.0

4 of 7 See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/planner :v1.0	800cf520c245	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

32,336

eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelm

0.1.0

4 of 7 See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplanner-mcaeoloplanner-mca

0.1.0

2 of 7 See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,314

eoloplannereoloplanner-molynx-gat

0.1.0

3 of 7 See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

28,539

eolo-plannereolo-planner-repo

0.1.0

3 of 7 See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

27,188

eoloplanteoloplant

1.0.0

4 of 7 See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplantseoloplants-urjc

0.1.0

3 of 7 See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

27,812

servereoloserver

0.1.0

4 of 7 See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/planner :v1.0	800cf520c245	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

32,336

flywayeosc-lot-1

0.7.0

1 of 3 See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
flyway/flyway :9.15	45b5d7cdc75a	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

9,383

matomoeosc-lot-1

0.2.0

1 of 1 See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/matomo :5.1.2-apache	2415789e1602	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,316

Container images carrying it

1,323 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
onosproject/onos :2.2.1	44914a8d4b3f	perl@5.26.1-6ubuntu0.3	no fix listed	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	perl@5.22.1-9	no fix listed	1
opea/asr :1.0	25dd26d9cd09	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/chatqna :1.0	38c51b791efa	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codegen :1.0	58f91683892d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codegen-ui :1.0	2bee4eb66f3e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codetrans :1.0	e2436483b73d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codetrans-ui :1.0	3ef121f34610	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/docsum :1.0	3eaa91849512	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/docsum-ui :1.0	7f854e9bffaf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/guardrails-tgi :1.0	262c6048aab8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/guardrails-tgi :latest	f68bec6a1271	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/speecht5 :1.0	249afad3d268	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/tts :1.0	257ae94709e9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/web-retriever-chroma :1.0	fe08165d7770	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
openbas/caldera-server :5.1.0	a277796d9724	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/kubectl :latest	b6d87e1048c2	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/restcube :latest	91870111837c	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wps :latest	80df355a660b	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
openelevation/open-elevation :latest	82fb21612e86	perl@5.30.0-9ubuntu0.2	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	perl@5.30.0-9ubuntu0.2	no fix listed	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	perl@5.30.0-9ubuntu0.4	no fix listed	1
openthread/otbr :latest	f307f59f6432	perl@5.26.1-6ubuntu0.7	no fix listed	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	perl@5.26.1-6ubuntu0.5	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	perl@5.18.2-2ubuntu1.4	no fix listed	1
outlinewiki/outline :0.82.0	494dfb9249a6	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
owncloud/server :10.15.0	51d9b74fc2a8	perl@5.30.0-9ubuntu0.5	no fix listed	1
oxfordsemantic/rdfox :5.6	db17910eb855	perl@5.30.0-9ubuntu0.2	no fix listed	1
oxfordsemantic/rdfox-init :5.6	baf570ff968d	perl@5.30.0-9ubuntu0.2	no fix listed	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
penpotapp/backend :2.2.1	47853d9bb9dd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
penpotapp/exporter :2.2.1	5c835ffd87ab	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
photoprism/photoprism :220629-jammy	2954334adbda	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	1
photoprism/photoprism :240711-ce	fc6fd632ca74	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
pk910/powfaucet :v2-stable	3dcae6a62896	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
platform9community/admin-server :latest	de3fa9b70df1	perl@5.26.1-6ubuntu0.5	no fix listed	1
platform9community/api-gateway :latest	40a4970de568	perl@5.26.1-6ubuntu0.5	no fix listed	1