CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,267; of 17,787 indexed, latest versions
Container images: 1,323; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,267 of 17,787 indexed charts deploy, on 1,323 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,297
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,267 by stars

Chart

Latest

Affected images

Radar Score

devtron-operatordevtron-labs

0.23.3

5 of 11 See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	perl@5.36.0-7	5.36.0-7+deb12u3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/postgres :14.9	1b594392f7cb	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

31,447

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,957

migration-incluster-cddevtron-labs

0.10.0

1 of 1 See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,699

eoloplannerdfa-amm-eoloplanner

0.1.0

2 of 7 See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,608

dial-admindial

0.18.0

1 of 3 See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

4,053

difydify

1.0.0

2 of 4 See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.0.0	066035f93856	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
langgenius/dify-sandbox :0.2.0	09b7e8705673	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

19,063

pagesdipak

1.0.0

2 of 3 See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,233

alertifydjjudas21

0.1.0

1 of 1 See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
djjudas21/alertify :0.1.0	ba22be670c37	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,384

domainmoddjjudas21

1.0.0

1 of 1 See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
domainmod/domainmod :4.23.0	4017bfe4c597	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

7,167

ownclouddjjudas21

0.3.23

1 of 3 See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,129

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

17,053

wizarrdjjudas21

0.1.5

1 of 1 See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

13,031

api-postsdniel

0.9.1

1 of 1 See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dniel/api-posts :master	45a667852f2a	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

8,991

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

24,975

seleniumdouban

1.3.2

1 of 1 See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,831

eoloplannerdreyg-jescribanob-chart-eoloplanner

0.1.0

2 of 7 See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

24,714

drogue-cloud-examplesdrogue-iot

0.7.11

1 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

30,759

rundeckdwardu-helm-charts

0.3.4

1 of 2 See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.2.7	4d64fe56f767	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

19,820

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,251

bitcoinddysnix

0.4.3

1 of 2 See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

1,970

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,399

idmeclipse-aerios

2.0.0

1 of 2 See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,593

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

9,805

self-orchestratoreclipse-aerios

1.2.0

1 of 1 See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
eclipseaerios/self-orchestrator :1.2.0	8b123bec5679	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,397

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

10,995

pagesedgwarepages

1.0.0

2 of 3 See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,233

deploy-elibraryeducative-helm-bookapp

0.5.0

1 of 1 See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
maksymhencha/educative-helm-bookapp :0.0.2	7f096a681192	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

5,150

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

7,333

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,944

mongodb-charteks-3-tier-app-chart

0.1.0

1 of 1 See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

8,046

seafileeleksbai

0.1.1

1 of 3 See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.10	6693911bcc40	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

25,239

redisemberstack

1.0.21

1 of 1 See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/redis :8.0.2	b43d2dcbbdb1	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

1,902

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,605

kube-ecp-stackemqx-operator

2.5.1

3 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
datalayers/datalayers :v2.2.10	17b292079239	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
emqx/ecp-ui :2.5.1	e33e9816f147	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
library/telegraf :1.27	507a3eecf809	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

22,845

enclaveenclave

0.1.1

1 of 1 See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
enclavenetworks/enclave :latest	0a99759300d1	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

2,740

kube-packetloss-exporterenix

0.2.1

1 of 2 See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.31	64614ef8290f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,154

monitoring-proxyenix

0.3.0

1 of 2 See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/haproxy :2.9.6	fc5748ff7c72	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,946

mariadbeoc-charts

0.3.14

1 of 1 See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.15	e22328f4d714	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

5,150

eolicplantseolicplants

0.1.0

2 of 7 See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,349

eoloPlanteolo-planner

0.1.0

4 of 7 See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplannereoloplanner

0.1.0

4 of 7 See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/planner :v1.0	800cf520c245	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

32,336

eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelm

0.1.0

4 of 7 See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplanner-mcaeoloplanner-mca

0.1.0

2 of 7 See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

27,314

eoloplannereoloplanner-molynx-gat

0.1.0

3 of 7 See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

28,539

eolo-plannereolo-planner-repo

0.1.0

3 of 7 See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

27,188

eoloplanteoloplant

1.0.0

4 of 7 See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

27,667

eoloplantseoloplants-urjc

0.1.0

3 of 7 See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

27,812

servereoloserver

0.1.0

4 of 7 See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
codeurjc/planner :v1.0	800cf520c245	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5
codeurjc/toposervice :v1.0	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

32,336

flywayeosc-lot-1

0.7.0

1 of 3 See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
flyway/flyway :9.15	45b5d7cdc75a	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

9,383

matomoeosc-lot-1

0.2.0

1 of 1 See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/matomo :5.1.2-apache	2415789e1602	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,316

Container images carrying it

1,323 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/apache/flink-kubernetes-operator :c703255	e9c2ce635b89	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/appscode/s3proxy :sha-a82ca68	20518335f9f9	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	perl@5.30.0-9ubuntu0.3	no fix listed	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/developmentseed/titiler :0.22.4	8ac53eb38393	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
ghcr.io/drewburr-labs/evobot :3.0.0	4ddbb244c82f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	perl@5.26.1-6ubuntu0.5	no fix listed	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	perl@5.30.0-9ubuntu0.3	no fix listed	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/esphome/esphome :2026.4.0	78a82d810709	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/firecrawl/playwright-service :latest	1f6eba640320	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/formancehq/console :console-on.v1.1.1	a4d32c2f68b3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/hemslo/chat-search :latest	39d48995a5bd	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/hypolia/kanri :0.1.2-rc4	fa7d5cc7fb7d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
ghcr.io/it-at-m/wjh-rechner :1.0.0	bc70cdb5a01a	perl@0:5.74-480.el9	0:5.74-481.1.el9_6	1