CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,262; of 17,781 indexed, latest versions
Container images: 1,319; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,262 of 17,781 indexed charts deploy, on 1,319 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,293
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,262 by stars

Chart

Latest

Affected images

Radar Score

polkabtc-parachaininterlay

0.2.41

1 of 4 See more

polkabtc-parachain interlay 0.2.41

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
interlayhq/interbtc :latest	a66d0e35e70f	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

3,899

polkabtc-vaultinterlay

0.1.11

1 of 1 See more

polkabtc-vault interlay 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
interlayhq/interbtc-clients :vault-master	c3e311de67da	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

3,831

istio-aws-private-ingress-customizedistio-aws-private-ingress-customized

1.0.0

1 of 1 See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

5,530

istio-azure-private-ingress-customizedistio-azure-private-ingress-customized

1.0.0

1 of 1 See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

5,530

istio-bookinfoistio-bookinfo

1.2.2

3 of 6 See more

istio-bookinfo istio-bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	perl@5.22.1-9ubuntu0.6	no fix listed
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	perl@5.22.1-9ubuntu0.6	no fix listed
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

18,980

ztunnelistio-ztunnel

1.25.0

1 of 1 See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/ztunnel :1.25.0	05f3972d80a9	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

2,457

appswitcher-serverit-at-m

2.0.2

1 of 1 See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5

Open the chart page →

3,774

daveit-at-m

0.2.15

3 of 11 See more

dave it-at-m 0.2.15

3 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/postgresql :latest	42a8200d3597	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

15,089

wjh-rechnerit-at-m

1.0.4

1 of 1 See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/wjh-rechner :1.0.0	bc70cdb5a01a	perl@0:5.74-480.el9	0:5.74-481.1.el9_6

Open the chart page →

3,460

opencloudjacobcolvin

0.2.3

7 of 13 See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

45,239

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,780

esphomejeffresc

0.2.2

1 of 1 See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/esphome/esphome :2026.4.0	78a82d810709	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

5,040

jellyfinjellyfin-helm

10.9.10

1 of 1 See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.9.10	79fb3d73a3e9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,489

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

3,999

dayz-dedicated-server-razorbladex401jespernohr

1.0.3

1 of 1 See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
razorbladex401/dayz :latest	6a4d79248e7d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

5,208

discord-experiencebotjfwenisch

0.7.4

1 of 1 See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

7,826

steamcmd-managerjfwenisch

0.4.5

1 of 1 See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

6,586

webtoolsjfwenisch

0.1.4

1 of 1 See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

6,568

image-storage-servicejtekt

0.4.3

3 of 4 See more

image-storage-service jtekt 0.4.3

3 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/kong :3.6	a42d2b4503e7	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

22,589

shinsei-managerjtekt

0.2.0

5 of 8 See more

shinsei-manager jtekt 0.2.0

5 of the 8 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
moreillon/api-proxy :latest	d7d4a5463525	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
moreillon/user-manager :v5.0.2	e1c9bfab5c16	perl@5.36.0-7	5.36.0-7+deb12u3
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	perl@5.36.0-7	5.36.0-7+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

63,461

time-series-storagejtekt

0.1.10

1 of 2 See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

16,600

actual-budgetk8s-charts

0.2.3

1 of 1 See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
actualbudget/actual-server :25.3.1	58fecd9088b7	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,611

bitcoin-stackk8s-charts

1.0.1

1 of 1 See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
blockstream/bitcoind :27.2	9472492530e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,419

jellyfink8s-charts

0.2.4

1 of 1 See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.10.6	96b09723b22f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,105

nostr-rs-relayk8s-charts

1.0.1

1 of 1 See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
scsibug/nostr-rs-relay :0.9.0	03f54bfbffff	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

3,354

valheim-serverk8s-charts

1.3.0

1 of 1 See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mbround18/valheim :3.1.0	70bd4da591cd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

6,075

k8s-dev-podk8s-dev-pod

0.3.1

1 of 1 See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

8,811

youtubedl-materialk8s-home-lab-repo

5.1.1

1 of 1 See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :4.3.2	2f943d584711	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

9,783

librephotosk8sonlab

1.1.6

2 of 7 See more

librephotos k8sonlab 1.1.6

2 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/redis :latest	5927ff3702df	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

14,801

unifik8sonlab

0.3.7

1 of 1 See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

7,268

k8s-ssh-bastionk8s-ssh-bastion

0.5.4

1 of 1 See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

3,281

kadeck-webkadeck

0.6.0

1 of 1 See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
xeotek/kadeck :4.2.9	4c6b04d9ce55	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

7,254

kanrikanri

0.1.0

1 of 1 See more

kanri kanri 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/hypolia/kanri :0.1.2-rc4	fa7d5cc7fb7d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,077

huekatool

1.0.8

1 of 1 See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
gethue/hue :4.11.0	11b649636e68	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

16,417

kc-chartkc-chart

1.0.0

1 of 3 See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

8,860

kenerkener-chart

0.0.7

1 of 1 See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,228

helm-mongodb-operatorkeyporttech

0.1.0

1 of 1 See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	perl@5.22.1-9ubuntu0.9	no fix listed

Open the chart page →

8,811

allurekfirfer

0.1.8

1 of 2 See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

12,527

phppgadminkfirfer

0.1.12

1 of 1 See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

10,248

quickwitkfirfer

0.7.2

1 of 1 See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quickwit/quickwit :v0.8.2	363ff56ce456	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,480

rabbitmqkfirfer

0.7.21

1 of 2 See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/rabbitmq :3.12.10	0742852455ad	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

2,445

kiaekiae

0.1.6

1 of 9 See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/pilot :1.15.2	db08d6963975	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

19,168

graphiti-mcpkiberonlabs

0.1.2

1 of 1 See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

3,393

cdashkitware

0.19.0

2 of 3 See more

cdash kitware 0.19.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

12,062

visual-regression-trackerkokuwa

5.1.0

2 of 4 See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
visualregressiontracker/api :5.0.11	941aeb8c8bf9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,098

kovi-appkovi-charts

0.8.1

1 of 1 See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
kennethreitz/httpbin :latest	599fe5e50731	perl@5.26.1-6ubuntu0.2	no fix listed

Open the chart page →

14,813

kubeflowkromanow94-kubeflow

0.5.1

9 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.13.0	73486345a602	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
kubeflownotebookswg/jupyter-web-app :v1.9.2	afb52057c997	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
kubeflownotebookswg/tensorboards-web-app :v1.9.2	77f07f52a84a	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
kubeflownotebookswg/volumes-web-app :v1.9.2	f63c3e550af3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
library/python :3.7	eedf63967cdb	perl@5.36.0-7	5.36.0-7+deb12u3
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	perl@5.30.0-9ubuntu0.5	no fix listed
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
gcr.io/tfx-oss-public/ml_metadata_store_server :1.14.0	51404ef4419c	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

70,530

kron-aapm-agentkron-aapm-agent

1.1.0

1 of 1 See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
krontechnology/aapm-agent :1.1.0	7feef7d2ab42	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

8,884

adventureworkskronkltd

0.1.0

1 of 1 See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
chriseaton/adventureworks :latest	54c3384ce701	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5

Open the chart page →

4,414

fileserverkronkltd

0.3.10

1 of 1 See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
duck1123/lnd-fileserver :latest	9d6fb247b714	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

3,729

Container images carrying it

1,319 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
quickwit/quickwit :v0.8.2	363ff56ce456	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
rajnandan1/kener :3.2.19	30407afca731	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	perl@5.30.0-9ubuntu0.3	no fix listed	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	perl@5.30.0-9ubuntu0.5	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	2
uffizzi/controller :latest	0344805f267b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
vdiogov/glpi-conteiner :latest	6945f84f0058	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
wurstmeister/zookeeper :latest	7a7fd44a7210	perl@5.18.2-2ubuntu1	no fix listed	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	perl@5.22.1-9	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	perl@5.30.0-9ubuntu0.2	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	perl@5.30.0-9ubuntu0.2	no fix listed	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	perl@5.30.0-9ubuntu0.2	no fix listed	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	perl@5.26.1-6ubuntu0.5	no fix listed	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	perl@5.30.0-9ubuntu0.4	no fix listed	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	2
1dev/server :11.9.0	cd5b12fe5471	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	perl@5.36.0-7	5.36.0-7+deb12u3	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	perl@5.30.0-9ubuntu0.5	no fix listed	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	perl@5.26.1-6ubuntu0.3	no fix listed	1
aboogie/login_test_backend :new	9c41a4483ac8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
actualbudget/actual-server :25.3.1	58fecd9088b7	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	perl@5.30.0-9ubuntu0.2	no fix listed	1
aibrix/metadata-service :v0.7.0	63fb81a64377	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	perl@5.30.0-9ubuntu0.2	no fix listed	1
akaunting/akaunting :3.0.15	52811b36ec3a	perl@5.36.0-7	5.36.0-7+deb12u3	1
akeyless/base-rhel :0.0.1	4ba8900a0061	perl@0:1.28-422.el8 perl-Carp@1.42-396.el8 perl-Compress-Raw-Bzip2@2.081-1.el8 perl-Compress-Raw-Zlib@2.081-1.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Digest-SHA@1:6.02-1.el8 perl-Encode@4:2.97-3.el8 perl-Encode-Locale@1.05-10.module+el8.3.0+6498+9eecfe51 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-2.el8 perl-IO-Compress@2.081-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:2.096-1.module+el8.10.0+21354+3ad137bb 0:2.096-2.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 1:6.02-2.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:1.05-10.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:2.096-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb	1
allegroai/clearml :2.0.0-613	713ae38f7daf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	perl@5.26.1-6ubuntu0.5	no fix listed	1