CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,262; of 17,781 indexed, latest versions
Container images: 1,319; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,262 of 17,781 indexed charts deploy, on 1,319 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,293
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,262 by stars

Chart

Latest

Affected images

Radar Score

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	perl@5.30.0-9ubuntu0.2	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

84,444

cert-vaultcert-vault

2.12.0

4 of 7 See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

15,863

passbolt-hachristianhuth

6.0.1

2 of 4 See more

passbolt-ha christianhuth 6.0.1

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

10,817

squestchristianhuth

6.6.7

3 of 4 See more

squest christianhuth 6.6.7

3 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

9,971

typo3christianhuth

7.7.0

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

8,466

nethermindchronicle

0.0.13

1 of 1 See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.31.9	aeca3b55bda5	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

2,031

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	perl@5.22.1-9ubuntu0.2	no fix listed

Open the chart page →

36,094

clustereye-stackclustereye

0.1.1

1 of 5 See more

clustereye-stack clustereye 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.31.0	2bf7f042e396	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

4,855

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

9,724

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

5,398

aibrixdanchev

0.7.0

1 of 5 See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
aibrix/metadata-service :v0.7.0	63fb81a64377	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,274

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	perl@5.30.0-9ubuntu0.5	no fix listed
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

38,346

dbrepodbrepo

1.13.3

15 of 25 See more

dbrepo dbrepo 1.13.3

15 of the 25 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/valkey :latest	0384ca2eec63	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

52,635

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

6,940

directusdirectus-io

2.1.0

2 of 3 See more

directus directus-io 2.1.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

7,473

dominodomino

0.1.11

1 of 3 See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

8,823

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

18,376

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

5,670

elchi-stackelchi

1.13.0

3 of 10 See more

elchi-stack elchi 1.13.0

3 of the 10 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.8	1ffa82edee00	perl@5.30.0-9ubuntu0.5	no fix listed
envoyproxy/envoy :v1.33.0	56da5afd7df3	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
library/mongo :6.0.12	646902910d6a	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

15,383

enbuildenbuild

0.0.50

1 of 6 See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

31,510

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5

Open the chart page →

3,048

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

11,458

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	perl@5.26.1-6ubuntu0.6	no fix listed

Open the chart page →

6,500

akauntingf3k-tech

1.3121.0

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

4,333

fastapi-microservice-appfast-api-microservice-app

1.3.0

3 of 4 See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
omkara25/simple-microservice-app-order-service :v2.1	8327546c7aac	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
omkara25/simple-microservice-app-payment-service :v2	afff40172b6b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
omkara25/simple-microservice-app-user-service :v2	d62cba548580	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

9,562

federidfederid

0.1.2

1 of 1 See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
federid/webhook :0.1.0	fbfb7c6510a7	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,064

zabbix-server-mysqlfermosit

3.0.2

3 of 4 See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

12,840

flink-operatorflink-operator

0.1.1

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

12,908

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

17,377

games-on-whalesgeek-cookbook

1.8.2

3 of 7 See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

15,653

lazylibrariangeek-cookbook

7.4.2

1 of 1 See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

11,662

omada-controllergeek-cookbook

4.4.2

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

11,553

ombigeek-cookbook

11.5.2

1 of 1 See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

5,136

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

8,029

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,558

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,231

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

13,025

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

15,856

tdarrgeek-cookbook

4.6.2

2 of 2 See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr :2.00.18	1256348872ce	perl@5.30.0-9ubuntu0.2	no fix listed
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

31,000

wireguardgeek-cookbook

1.4.2

1 of 1 See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,660

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.8	512bb8a21483	perl@5.30.0-9ubuntu0.5	no fix listed
library/postgres :15.3	8775adb39f0d	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

15,562

leantimegissilabs

1.3.0

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.21	8a16204dc96c	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

6,416

meta-monitoringgrafana

1.3.0

1 of 2 See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.4.3	06bdcbb51fc2	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

3,518

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,072

haproxy-redis-sentinelhaproxy-redis-sentinel

0.1.3

2 of 2 See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/haproxy :3.1-bookworm	49a0a0d6f0b8	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,277

Container images carrying it

1,319 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
altinity/clickhouse-server :25.3.6.10034.altinitystable	3396b15c51a2	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
andrianrf/backoffice :latest	047a7837651e	perl@0:1.28-422.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-3.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb	1
anguda/ant-media :2.5	c435285fc241	perl@5.30.0-9ubuntu0.3	no fix listed	1
ankane/pgvector :v0.5.1	d3a9d8ac27bb	perl@5.36.0-7	5.36.0-7+deb12u3	1
anujdatar/cups :25.07.01	685df04a643b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
apache/activemq-artemis :2.37.0	bae523439ee3	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
apache/airflow :2.8.1	e5560ad0b86e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
apache/iotdb :0.13.3-node	afa47bf1692a	perl@5.30.0-9ubuntu0.2	no fix listed	1
apache/nifi-registry :1.27.0	63b8e3e40742	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	perl@5.30.0-9ubuntu0.2	no fix listed	1
apachepulsar/pulsar :3.0.7	9c9947de139d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
apachepulsar/pulsar :2.9.0	d056c89b7131	perl@5.30.0-9ubuntu0.2	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	perl@5.30.0-9ubuntu0.2	no fix listed	1
apache/ranger :2.7.0	76c176e8a0e4	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	1
apache/rocketmq :5.3.0	434d8398f996	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	perl@5.30.0-9ubuntu0.2	no fix listed	1
apache/skywalking-ui :9.2.0	295f1dc87d98	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5	1
apache/skywalking-ui :8.9.1	80530f0308a5	perl@5.30.0-9ubuntu0.2	no fix listed	1
apache/superset :4.0.1	ab9467fd712c	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
apache/tika :2.9.0.0	92d055a84e9e	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8	0:1.28-423.el8_10 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	perl@5.22.1-9ubuntu0.6	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	perl@5.30.0-9ubuntu0.4	no fix listed	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	perl@5.30.0-9ubuntu0.2	no fix listed	1
assistiot/identity-manager_db :latest	0d3e6d35f168	perl@5.36.0-7	5.36.0-7+deb12u3	1
assistiot/location_processing :latest	e9bae124095f	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	1
assistiot/open_api_backend :1.1.2	30812ba93555	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	perl@5.30.0-9ubuntu0.2	no fix listed	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	perl@5.36.0-7	5.36.0-7+deb12u3	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	perl@5.30.0-9ubuntu0.3	no fix listed	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	1
atlassian/jira-software :8.14.0	37bc46cbec1a	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
avinash263/pyredis263 :latest	aa2b8727f1a6	perl@5.36.0-7	5.36.0-7+deb12u3	1
avzini/web-app :latest	f40b30210ed0	perl@5.36.0-7	5.36.0-7+deb12u3	1
baserow/backend :1.31.1	e0b3c8130b91	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1