CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,267; of 17,787 indexed, latest versions
Container images: 1,323; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,267 of 17,787 indexed charts deploy, on 1,323 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,297
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,267 by stars

Chart

Latest

Affected images

Radar Score

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

23,255

clickhouselohmag

0.2.0

1 of 1 See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :19.17	ab1738a64b70	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

5,910

nublado2lsst-sqre

0.8.5

1 of 2 See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

17,836

elastictranscoderluiscajl

0.46.0

4 of 4 See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
elastictranscoder/media :627e21dc	963ab3858c6b	perl@5.26.1-6ubuntu0.3	no fix listed
elastictranscoder/media-storage :f6d861a0	26208b8c2359	perl@5.26.1-6ubuntu0.3	no fix listed
elastictranscoder/transcoder :627e21dc	b4a0327029e6	perl@5.26.1-6ubuntu0.3	no fix listed
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

58,225

m9sweeperm9sweeper

1.6.0

1 of 6 See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,786

magistralamagistrala-devops

0.16.2

2 of 42 See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.31-latest	caa5b411be16	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

24,488

docker-mailservermailserver

0.2.65

1 of 9 See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mvance/unbound :1.22.0	76906da36d18	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,908

nodecg-chartmarathon-charts

0.1.5

1 of 2 See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

6,722

circleci-runnermatic-insurance

0.1.1

1 of 1 See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
circleci/runner :launch-agent	9bdc62f02162	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

4,150

mauticmautic-chart

1.0.2

1 of 3 See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

8,351

mayastormayastor

2.12.1

2 of 31 See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

21,178

eoloplantmca-eoloplaner

0.1.0

3 of 7 See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
hugohg34/toposervice :0.0.2	812a03b3f274	perl@5.30.0-9ubuntu0.2	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

29,712

cameramedia-streaming-mesh

0.2.5

2 of 3 See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

18,712

crdsmedia-streaming-mesh

0.0.1

1 of 2 See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ciscolabs/msm-nc :07102023	36d02faad958	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

3,707

msmmedia-streaming-mesh

0.1.17

5 of 6 See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

11,478

msm-rtspmedia-streaming-mesh

0.0.2

2 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

18,712

rtspmedia-streaming-mesh

0.0.14

2 of 2 See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

18,712

meerschaummeerschaum

0.2.0

1 of 1 See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bmeares/meerschaum :2.8.4	8e9c5bacaa82	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,849

memgptmemgpt

0.3.19

1 of 2 See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ankane/pgvector :v0.5.1	d3a9d8ac27bb	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

5,872

istiomesosphere

1.25.1

1 of 2 See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,786

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	perl@5.30.0-9build1	no fix listed

Open the chart page →

12,049

kube-prometheus-stackmesosphere

87.16.0

1 of 7 See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,763

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

5,688

nvidiamesosphere

0.4.4

2 of 2 See more

nvidia mesosphere 0.4.4

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	perl@5.30.0-9ubuntu0.2	no fix listed
nvidia/k8s-device-plugin :v0.9.0	964847cc3fd8	perl@5.22.1-9ubuntu0.9	no fix listed

Open the chart page →

10,478

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	perl@5.22.1-9	no fix listed

Open the chart page →

18,583

istiomesosphere-stable

1.25.1

1 of 2 See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,786

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,322

istio-helm-istiodmesosphere-stable

1.23.6

1 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

4,644

kommandermesosphere-stable

0.39.2

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	perl@5.30.0-9build1	no fix listed

Open the chart page →

68,330

kube-prometheus-stackmesosphere-stable

75.9.1

1 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,543

localpathprovisionermesosphere-stable

0.1.2

1 of 1 See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	perl@5.22.1-9ubuntu0.5	no fix listed

Open the chart page →

17,966

valkeymesosphere-stable

3.0.22

1 of 1 See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,559

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

8,940

elasticmicroboxlabs

0.3.0

1 of 1 See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.17.3	2cc40b15dff8	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

4,295

postgresmicroboxlabs

0.3.0

1 of 1 See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/postgres :16.6	557fea37a744	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,699

alluremidokura-community

0.1.3

1 of 2 See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

12,862

folding-at-homemidokura-community

0.0.3

1 of 1 See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
linuxserver/foldingathome :7.6.21	9a997426d71e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

2,938

unifimidokura-community

0.0.6

1 of 1 See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :7.3.83	ab105cc50322	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

11,254

teimilvus-helm

1.6.0

1 of 1 See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,063

mini-blogmini-blog-helm

0.1.0

1 of 3 See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

12,637

MINTmint

8.0.2

2 of 15 See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	perl@5.30.0-9ubuntu0.2	no fix listed
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

42,983

session-scalermiqm

0.1.0

1 of 1 See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
miqm/session-scaler :0.1.0	c5c211717d9b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,865

mariadbmmontes

0.3.0

1 of 1 See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mariadb :10.7.3	07e06f2e7ae9	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,109

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,148

account-lookup-servicemojaloop

13.0.0

1 of 4 See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,734

account-lookup-service-adminmojaloop

13.0.0

1 of 4 See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,734

admin-api-svcmojaloop

12.0.0

1 of 4 See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

12,147

backendmojaloop

0.1.0

1 of 6 See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :8.4.5-debian-12-r0	7089d796fc9b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

16,111

fspiop-transfer-api-svcmojaloop

12.0.1

1 of 3 See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,518

mojaloopmojaloop

14.0.0

1 of 6 See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

19,265

Container images carrying it

1,323 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
onosproject/onos :2.2.1	44914a8d4b3f	perl@5.26.1-6ubuntu0.3	no fix listed	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	perl@5.22.1-9	no fix listed	1
opea/asr :1.0	25dd26d9cd09	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/chatqna :1.0	38c51b791efa	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codegen :1.0	58f91683892d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codegen-ui :1.0	2bee4eb66f3e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codetrans :1.0	e2436483b73d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/codetrans-ui :1.0	3ef121f34610	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/docsum :1.0	3eaa91849512	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/docsum-ui :1.0	7f854e9bffaf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/guardrails-tgi :1.0	262c6048aab8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/guardrails-tgi :latest	f68bec6a1271	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/speecht5 :1.0	249afad3d268	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/tts :1.0	257ae94709e9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opea/web-retriever-chroma :1.0	fe08165d7770	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
openbas/caldera-server :5.1.0	a277796d9724	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
opencsghq/kubectl :latest	b6d87e1048c2	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/restcube :latest	91870111837c	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wps :latest	80df355a660b	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
openelevation/open-elevation :latest	82fb21612e86	perl@5.30.0-9ubuntu0.2	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	perl@5.30.0-9ubuntu0.2	no fix listed	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	perl@5.30.0-9ubuntu0.4	no fix listed	1
openthread/otbr :latest	f307f59f6432	perl@5.26.1-6ubuntu0.7	no fix listed	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	perl@5.26.1-6ubuntu0.5	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	perl@5.18.2-2ubuntu1.4	no fix listed	1
outlinewiki/outline :0.82.0	494dfb9249a6	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
owncloud/server :10.15.0	51d9b74fc2a8	perl@5.30.0-9ubuntu0.5	no fix listed	1
oxfordsemantic/rdfox :5.6	db17910eb855	perl@5.30.0-9ubuntu0.2	no fix listed	1
oxfordsemantic/rdfox-init :5.6	baf570ff968d	perl@5.30.0-9ubuntu0.2	no fix listed	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
penpotapp/backend :2.2.1	47853d9bb9dd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
penpotapp/exporter :2.2.1	5c835ffd87ab	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
photoprism/photoprism :220629-jammy	2954334adbda	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	1
photoprism/photoprism :240711-ce	fc6fd632ca74	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
pk910/powfaucet :v2-stable	3dcae6a62896	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
platform9community/admin-server :latest	de3fa9b70df1	perl@5.26.1-6ubuntu0.5	no fix listed	1
platform9community/api-gateway :latest	40a4970de568	perl@5.26.1-6ubuntu0.5	no fix listed	1