StackRadar

CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,252
of 17,787 indexed, latest versions
Container images
1,312
deployed by those charts
Fix available
41 of 41
affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,252 of 17,787 indexed charts deploy, on 1,312 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.21,286
perlrpm0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more26
perl-Carprpm1.42-396.el80:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb16
perl-constantrpm1.33-396.el80:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb16
perl-Exporterrpm5.72-396.el80:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb16
perl-File-Pathrpm2.15-2.el80:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb16
perl-parentrpm1:0.237-1.el81:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb16
perl-PathToolsrpm3.74-1.el80:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb16
perl-Scalar-List-Utilsrpm3:1.49-2.el84:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb16
perl-Socketrpm4:2.027-3.el84:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb16
perl-Text-Tabs+Wraprpm2013.0523-395.el80:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb16
perl-threadsrpm1:2.21-2.el81:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb16
perl-threads-sharedrpm1.58-2.el80:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb16
perl-Unicode-Normalizerpm1.25-396.el80:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb16
perl-Encoderpm4:2.97-3.el84:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb15
perl-File-Temprpm0.230.600-1.el81:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb15
perl-Getopt-Longrpm1:2.50-4.el81:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb15
perl-HTTP-Tinyrpm0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb15
perl-MIME-Base64rpm3.15-396.el80:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb15
perl-Pod-Escapesrpm1:1.07-395.el81:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb15
perl-podlatorsrpm4.11-1.el81:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb15
perl-Pod-Perldocrpm3.28-396.el80:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb15
perl-Pod-Simplerpm1:3.35-395.el81:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb15
perl-Pod-Usagerpm4:1.69-395.el84:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb15
perl-Storablerpm1:3.11-3.el81:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb15
perl-Term-ANSIColorrpm4.06-396.el80:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb15
perl-Term-Caprpm1.17-395.el80:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb15
perl-Text-ParseWordsrpm3.30-395.el80:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb15
perl-Time-Localrpm1:1.280-1.el82:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb15
perl-Data-Dumperrpm2.167-399.el80:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb14
perl-Digestrpm1.17-395.el80:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb13
perl-Digest-MD5rpm2.55-396.el80:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb13
perl-IO-Socket-IPrpm0.39-5.el80:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb13
perl-libnetrpm3.11-3.el80:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb13
perl-URIrpm1.73-3.el80:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb13
perl-Thread-Queuerpm3.13-1.el80:3.14-457.module+el8.10.0+21354+3ad137bb2
perl-Compress-Raw-Bzip2rpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
perl-Compress-Raw-Zlibrpm2.081-1.el80:2.096-2.module+el8.10.0+21354+3ad137bb1
perl-Digest-SHArpm1:6.02-1.el81:6.02-2.module+el8.10.0+21354+3ad137bb1
perl-Encode-Localerpm1.05-10.module+el8.3.0+6498+9eecfe510:1.05-10.module+el8.10.0+21354+3ad137bb1
perl-IO-Compressrpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
OSV records
DEBIAN-CVE-2025-40909RHSA-2025:11545RHSA-2025:11804RHSA-2025:11805RHSA-2026:37070RHSA-2026:8096RLSA-2025:11804UBUNTU-CVE-2025-40909openSUSE-SU-2025:15258-1
Also known as
USN-7678-1

Charts affected

1,252 by stars
ChartLatestAffected imagesRadar Score
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,190
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
perl@5.34.0-3ubuntu1.4
5.34.0-3ubuntu1.5

Open the chart page →

6,015
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

5,973
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

14,290
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5
hmediade/printserver-init:latest7f005eb6c718
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

10,839
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

3,048
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
perl@5.36.0-7
5.36.0-7+deb12u3

Open the chart page →

16,384
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

3,131
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

8,685
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
perl@5.34.0-3ubuntu1
5.34.0-3ubuntu1.5
apache/skywalking-ui:9.2.0295f1dc87d98
perl@5.34.0-3ubuntu1
5.34.0-3ubuntu1.5

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
perl@5.30.0-9ubuntu0.2
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

20,650
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
perl@5.26.1-6ubuntu0.6
no fix listed

Open the chart page →

3,747
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5

Open the chart page →

7,862
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

5,959
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
perl@5.22.1-9ubuntu0.2
no fix listed

Open the chart page →

57,669
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

12,611
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
perl@5.22.1-9ubuntu0.3
no fix listed

Open the chart page →

25,160
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
perl@5.22.1-9ubuntu0.5
no fix listed

Open the chart page →

19,295
ibm-ucv-prodibm-helm5.2.62 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

2 of the 16 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
bitnamilegacy/rabbitmq:4.1.2fac502149c40
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

12,105
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
perl@5.26.1-6ubuntu0.6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
perl@5.30.0-9ubuntu0.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.94 of 58See more

ikigai ikigai-chart 0.0.9

4 of the 58 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.5
jupyterhub/k8s-hub:1.2.0e4770285aaf7
perl@5.30.0-9ubuntu0.2
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
perl@5.34.0-3ubuntu1.2
5.34.0-3ubuntu1.5
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

37,671
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,571
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

6,254
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

11,812
plausible-analyticsimioVerified publisher0.4.23 of 5See more

plausible-analytics imio 0.4.2

3 of the 5 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3

Open the chart page →

10,418
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,192
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

3,310
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
perl@5.26.1-6ubuntu0.6
no fix listed

Open the chart page →

16,212
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

5,320
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,775
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

3,493
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

5,062
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

2,868
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.5

Open the chart page →

10,494
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

7,650
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

18,066
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

7,650
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

11,069
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

5,958
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3

Open the chart page →

17,852
interbtc-parachaininterlay0.4.131 of 1See more

interbtc-parachain interlay 0.4.13

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

3,157
interbtc-vaultinterlay0.1.131 of 1See more

interbtc-vault interlay 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
interlayhq/interbtc-clients:vault-masterc3e311de67da
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

3,831
polkabtc-parachaininterlay0.2.411 of 4See more

polkabtc-parachain interlay 0.2.41

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

3,899
polkabtc-vaultinterlay0.1.111 of 1See more

polkabtc-vault interlay 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
interlayhq/interbtc-clients:vault-masterc3e311de67da
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

3,831
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
perl@5.34.0-3ubuntu1.2
5.34.0-3ubuntu1.5

Open the chart page →

5,530
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
perl@5.34.0-3ubuntu1.2
5.34.0-3ubuntu1.5

Open the chart page →

5,530
istio-bookinfoistio-bookinfo1.2.23 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
perl@5.22.1-9ubuntu0.6
no fix listed
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
perl@5.22.1-9ubuntu0.6
no fix listed
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
perl@5.22.1-9ubuntu0.6
no fix listed

Open the chart page →

18,980
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.2

Open the chart page →

2,457

Container images carrying it

1,312 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container imageDigestPackageFixed inUsed by
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
perl@5.30.0-9ubuntu0.3
no fix listed
1
bicarus/mx-notifier:1.1.8bed688d16762
perl@5.30.0-9ubuntu0.2
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/git:latest4b08d0c5af8d
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/kubectl:1.301249fc292e84
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/kubectl:1.3164614ef8290f
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/kube-state-metrics:204a3044b384b
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/mongodb:latestb0652af9c8d0
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
perl@5.36.0-7+deb12u1
5.36.0-7+deb12u3
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
perl@5.36.0-7+deb12u2
5.36.0-7+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.