CVE-2025-40909

Medium

Advisory

Published 30 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,262; of 17,787 indexed, latest versions
Container images: 1,318; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 1,262 of 17,787 indexed charts deploy, on 1,318 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+29 more	5.34.0-3ubuntu1.5, 5.36.0-7+deb12u3, 5.38.2-3.2ubuntu0.2	1,292
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+8 more	0:1.28-423.el8_10, 0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 0:5.74-481.1.el9_6+3 more	26
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397, 0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397, 0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397, 0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397, 0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397, 1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397, 0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397, 4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397, 4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397, 0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397, 1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397, 0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397, 0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397, 4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397, 1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397, 1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.6.0+13324+628a2397, 0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397, 0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397, 1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397, 1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397, 0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397, 1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397, 4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397, 1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397, 0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397, 0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397, 0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397, 2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397, 0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397, 0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397, 0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397, 0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397, 0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397, 0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2025-40909 RHSA-2025:11545 RHSA-2025:11804 RHSA-2025:11805 RHSA-2026:37070 RHSA-2026:8096 RLSA-2025:11804 UBUNTU-CVE-2025-40909 openSUSE-SU-2025:15258-1
Also known as: USN-7678-1

Charts affected

1,262 by stars

Chart

Latest

Affected images

Radar Score

rethstakewise

1.2.1

1 of 3 See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

1,977

ssv-nodestakewise

2.2.0

1 of 2 See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

6,779

teku-validatorstakewise

4.3.2

1 of 2 See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
consensys/teku :25.4.1	bf6ecd2ea716	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.2

Open the chart page →

3,153

verostakewise

0.8.3

1 of 2 See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

3,458

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

14,493

trinostatcan

1.23.4

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5

Open the chart page →

13,767

static-src-people-detector-appstatic-src-people-detector-chart

1.5.5

1 of 6 See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4.18	d23ec07162ca	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

13,646

pagesstephendillondell

1.0.0

2 of 3 See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,190

sn-platform-slimstreamnative

1.11.44

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

10,134

artifactory-cleanupsubshell

1.0.1

1 of 1 See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3

Open the chart page →

2,534

group-challengesubshell-lab

2.1.0

1 of 2 See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

2,540

substra-backendsubstra

26.15.3

1 of 7 See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2

Open the chart page →

4,731

verbasubstratus

0.4.0

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

13,390

pagessunilb2590-pages

1.0.0

2 of 3 See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,190

convert-datasvtech

0.13.2

1 of 3 See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

7,588

elasticsearchsvtech-public-helm-charts

1.0.0

1 of 1 See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

12,048

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

12,655

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

10,902

icinga2svtech-public-helm-charts

1.0.0

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,511

maxscalesvtech-public-helm-charts

1.0.0

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

5,841

nagvissvtech-public-helm-charts

1.0.0

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,102

preparationsvtech-public-helm-charts

1.0.0

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

12,048

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

18,756

swr-cache-proxyswr-cache-proxy

0.2.0

1 of 1 See more

swr-cache-proxy swr-cache-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
vividplanet/swr-cache-proxy :v1	ae1c5b1cbecb	perl@0:1.28-422.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-2.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

13,719

stash-boxswuuper-github

0.1.1

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2

Open the chart page →

8,193

explorersynapse

0.2.16

1 of 6 See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :latest	1cbf75aabe1e	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

8,518

topolvmsyself

1.3.0

1 of 1 See more

topolvm syself 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

3,522

cronjobt3n

0.1.0

1 of 1 See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/python :3.8	d41127070014	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

11,199

stateful-data-generatortalhajuikar-helm-charts

0.1.2

1 of 2 See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

4,860

super-mariotechpreta

0.1.1

1 of 1 See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
nirmalnaveen/supermario :latest	8541a39162f3	perl@5.36.0-7	5.36.0-7+deb12u3

Open the chart page →

6,297

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

10,568

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

10,514

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5
xeladock/nginx2 :latest	c259a67b1dff	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.5

Open the chart page →

17,461

pagestest4322

1.0.0

2 of 3 See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,190

flask-contactstest-configmap

1.0.1

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,704

helm-testtest-helm-artifacthub

1.0.0

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

11,648

asrtest-opea

1.0.0

1 of 1 See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/asr :1.0	25dd26d9cd09	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,393

chatqnatest-opea

1.0.0

8 of 11 See more

chatqna test-opea 1.0.0

8 of the 11 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/chatqna :1.0	38c51b791efa	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/embedding-tei :1.0	5c9639de61c1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/llm-tgi :1.0	0c25aab3f106	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/reranking-tei :1.0	e48613afb191	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/retriever-redis :1.0	eb746b263705	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

39,090

codegentest-opea

1.0.0

4 of 5 See more

codegen test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/codegen :1.0	58f91683892d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/codegen-ui :1.0	2bee4eb66f3e	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/llm-tgi :1.0	0c25aab3f106	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

28,814

codetranstest-opea

1.0.0

4 of 5 See more

codetrans test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/codetrans :1.0	e2436483b73d	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/codetrans-ui :1.0	3ef121f34610	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/llm-tgi :1.0	0c25aab3f106	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

28,385

docsumtest-opea

1.0.0

4 of 5 See more

docsum test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/docsum :1.0	3eaa91849512	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/docsum-ui :1.0	7f854e9bffaf	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

28,858

embedding-usvctest-opea

1.0.0

1 of 1 See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/embedding-tei :1.0	5c9639de61c1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,185

guardrails-usvctest-opea

1.0.0

1 of 1 See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/guardrails-tgi :1.0	262c6048aab8	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,221

llm-uservicetest-opea

1.0.0

1 of 1 See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/llm-tgi :1.0	0c25aab3f106	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,720

redis-vector-dbtest-opea

1.0.0

1 of 1 See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5

Open the chart page →

5,604

reranking-usvctest-opea

1.0.0

1 of 1 See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/reranking-tei :1.0	e48613afb191	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

4,985

retriever-usvctest-opea

1.0.0

1 of 1 See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/retriever-redis :1.0	eb746b263705	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

5,198

speecht5test-opea

1.0.0

1 of 1 See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
opea/speecht5 :1.0	249afad3d268	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

9,616

teitest-opea

1.0.0

1 of 1 See more

tei test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,277

teireranktest-opea

1.0.0

1 of 1 See more

teirerank test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40909.

Container image	Digest	Package	Fixed in
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3

Open the chart page →

2,277

Container images carrying it

1,318 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed	79
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed	79
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	no fix listed	13
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	11
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	no fix listed	11
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	no fix listed	10
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	10
library/kong :3.6	a42d2b4503e7	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.5	7
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	6
bitnamilegacy/rabbitmq :4.1.3 :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	6
oomk8s/readiness-check :2.0.0	7daa08b81954	perl@5.22.1-9ubuntu0.2	no fix listed	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	perl@5.36.0-7	5.36.0-7+deb12u3	6
quay.io/devtron/postgres :14.9	1b594392f7cb	perl@5.36.0-7	5.36.0-7+deb12u3	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	5
library/mongo :4.4	4be76f674fc4	perl@5.30.0-9ubuntu0.5	no fix listed	5
library/postgres :12	2f2a8c2a7d10	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	5
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	no fix listed	5
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	4
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	4
bitnamilegacy/postgresql :16	233f361c5819	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	4
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	4
bitnamilegacy/rabbitmq :4.1.2 :4.1.2-debian-12-r1	fac502149c40	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	perl@5.22.1-9ubuntu0.5	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	perl@5.22.1-9ubuntu0.6	no fix listed	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	4
library/mongo :5.0-focal	5e15a3f014ed	perl@5.30.0-9ubuntu0.5	no fix listed	4
library/mongo :4.2.12-bionic	628741415fc9	perl@5.26.1-6ubuntu0.5	no fix listed	4
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed	4
library/nginx :1.27.1	287ff321f9e3	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	4
library/rabbitmq :3.11-management	c3f70098e01d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	4
mastercloudapps/planner :v1.23	40a950b311b2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	4
opea/llm-tgi :1.0	0c25aab3f106	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	perl@5.26.1-6ubuntu0.5	no fix listed	4
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	4
bitnamilegacy/kubectl :latest	cd354d5b2556	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	3
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed	3
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	perl@5.30.0-9ubuntu0.2	no fix listed	3
codeurjc/planner :v1.0	800cf520c245	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.5	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	perl@5.30.0-9ubuntu0.2	no fix listed	3
envoyproxy/envoy :v1.31.0	2bf7f042e396	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5	3
gchq/hdfs :3.3.3	5ec58edbb2db	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2	3
guacamole/guacamole :1.6.0	f344085e618b	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	perl@5.30.0-9ubuntu0.5	no fix listed	3
library/nginx :1.25 :1.25.5	a484819eb602	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	perl@5.22.1-9ubuntu0.6	no fix listed	3
selenium/hub :3.141.59	02f251d48d5f	perl@5.30.0-9ubuntu0.2	no fix listed	3