CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,262; of 17,781 indexed, latest versions
Container images: 1,319; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,262 of 17,781 indexed charts deploy, on 1,319 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,293
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,262 by stars

Chart

Latest

Affected images

Radar Score

giteagitea

12.7.0

3 of 4 See more

gitea gitea 12.7.0

3 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

8,811

sonarqubesonarqube

10.0.0+521

1 of 3 See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/sonarqube :10.0.0-community	ef9723cf4fe4	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

6,556

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

11,367

openebsopenebs

4.6.1

2 of 35 See more

openebs openebs 4.6.1

2 of the 35 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

23,894

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

3,045

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	perl@5.26.1-6ubuntu0.6	no fix listed

Open the chart page →

5,552

openldap-stack-hahelm-openldap

4.3.3

1 of 5 See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jpgouin/openldap :2.6.9-fix	bfdd0088c776	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,919

netboxbootc

4.1.1

1 of 4 See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.2.8	3d652dca5351	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

9,145

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

3,475

milvusmilvus

4.0.31

2 of 5 See more

milvus milvus 4.0.31

2 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.8.2	d538416d5afe	perl@5.30.0-9ubuntu0.2	no fix listed
milvusdb/milvus :v2.2.13	a3a55e1c1497	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

32,259

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
allegroai/clearml :2.0.0-613	713ae38f7daf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

10,622

signozsignoz

0.141.1

1 of 5 See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

7,568

weblateweblate

0.5.36

2 of 3 See more

weblate weblate 0.5.36

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :latest	42a8200d3597	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/redis :latest	5927ff3702df	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

6,699

locustdeliveryhero

0.35.0

1 of 1 See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
locustio/locust :2.32.2	a0d4b88e42c1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,800

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

4,802

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

19,391

guacamoleberyju-org

1.4.2

1 of 3 See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.6.0	f344085e618b	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,606

vertical-pod-autoscalercowboysysop

11.1.1

1 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,927

stacks-blockchainhirosystems

2.2.2

1 of 1 See more

stacks-blockchain hirosystems 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
blockstack/stacks-core :3.2.0.0.0	f79944317326	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

1,374

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	perl@5.22.1-9ubuntu0.6	no fix listed
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

23,964

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

4,154

openprojectopenproject-helm-charts

13.11.0

2 of 5 See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
openproject/hocuspocus :release-338001b2	88dc1359dfb5	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

19,926

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

11,384

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

33,725

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

4,293

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,543

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
blockstack/stacks-core :3.2.0.0.0	f79944317326	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

8,364

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

5,987

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	perl@5.30.0-9ubuntu0.5	no fix listed
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

12,746

netbirdjaconi

0.15.1

1 of 4 See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

8,390

litellm-helmlitellm

1.100.1

1 of 2 See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,003

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

3,382

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

15,592

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,880

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5

Open the chart page →

11,933

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,352

milvusmilvus-helm

5.0.27

1 of 4 See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

10,670

prefect-serverprefect

2026.9.3212605

1 of 2 See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,786

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

18,509

codefreshcodefresh-onprem

2.12.13

4 of 42 See more

codefresh codefresh-onprem 2.12.13

4 of the 42 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

14,956

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2api :3.8	6f56d239d280	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2auth :3.8	33ecfda16608	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2notifier :3.8	f190a6212195	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2rulesengine :3.8	259503496ff9	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2scheduler :3.8	b1de2055c362	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2sensorcontainer :3.8	b1a338f64773	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2stream :3.8	1c8904a3bf67	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2timersengine :3.8	1bf35bfaf00c	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2web :3.8	09989a26c8b7	perl@5.30.0-9ubuntu0.5	no fix listed
stackstorm/st2workflowengine :3.8	19fdfffdbba8	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

96,419

supabasetokens-studio

1.0.0

5 of 14 See more

supabase tokens-studio 1.0.0

5 of the 14 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
supabase/edge-runtime :v1.59.0	eff9c554d649	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
supabase/postgres-meta :v0.84.2	d0a96973e9f1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
supabase/realtime :v2.33.8	d207e6e23ad3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
supabase/studio :20241021-9f9b083	26d8070c55e9	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

23,123

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

8,493

bitcoindfold

0.3.2

1 of 2 See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
thesisrobot/bitcoind :v23.0	16b368e4d52c	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

3,454

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
hivemq/hivemq-operator :4.7.10	241d6a8e1963	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

7,857

quickwitquickwit

0.8.16

1 of 1 See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quickwit/quickwit :v0.8.2	363ff56ce456	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,480

transmission-openvpnutkuozdemir

2.5.0

1 of 1 See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
haugene/transmission-openvpn :4.0	059216cfae4b	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

11,405

jellyfinbeluga-cloud

2.3.0

1 of 1 See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

4,244

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	perl@5.36.0-7	5.36.0-7+deb12u3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
quay.io/devtron/postgres :14.9	1b594392f7cb	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

32,902

guacamoledmunozv04

0.3.4

1 of 2 See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.6.0	f344085e618b	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,606

Container images carrying it

1,319 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/pgbouncer :1.23.1	92356da09704	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.4.0-debian-12-r11	02e2f47a405e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.5.0-debian-12-r16	687034f33da6	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.3.0-debian-12-r14	cc55da2fa366	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.2.0-debian-12-r2	e6fa49bb0347	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/rabbitmq :4.1.2-debian-12-r0	74a3d7c747eb	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis :8.0.2-debian-12-r4	cdc2efa9c306	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnamilegacy/redis-sentinel :8.2.1-debian-12-r0	0ca3ea1d2f82	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/valkey :latest	0384ca2eec63	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnami/mariadb :11.7.2	16a7dae804fb	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bitnami/memcached :1.6.38	dd8f2cba9a5b	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
bitnami/redis :7.4.2	4e65bf641805	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	perl@5.30.0-9ubuntu0.2	no fix listed	1
blockstream/bitcoind :27.2	9472492530e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bmeares/meerschaum :2.8.4	8e9c5bacaa82	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
bnjbvr/kresus :0.22.1	37e216b182c8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
boky/postfix :4.4.0	f3f247fd4252	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1
boxcutter/meshcmd :1.1.3	84e13f01bcab	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.5	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	perl@5.30.0-9ubuntu0.2	no fix listed	1
btcpayserver/tor :0.4.8.10	e9585b68dc6b	perl@5.36.0-7	5.36.0-7+deb12u3	1
calltelemetry/web :0.8.1-rc72	05d13269e350	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	1