CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,409; of 17,790 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,409 of 17,790 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,352
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	39
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,409 by stars

Chart

Latest

Affected images

Radar Score

yelbfairwinds-incubator

0.1.1

1 of 5 See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,113

event-generatorfalcosecurity

0.4.0

1 of 1 See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
falcosecurity/event-generator :latest	932956d86c99	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,796

farm-observabilityfarm-observability

0.27.2

2 of 18 See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.16.3	84b76d56c594	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
grafana/alloy :v1.12.2	f94b1c82957a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

13,409

jenkinsfatihtepe-jenkins

1.0.0

1 of 1 See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,498

quickstartfeatureform

0.1.1

2 of 3 See more

quickstart featureform 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,575

activityrelayfedihost

0.1.4

1 of 2 See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8

Open the chart page →

13,502

rospoferama

0.4.3

1 of 1 See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

6,049

vipienferama

0.2.8

1 of 1 See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,523

azure-pipelines-agentfermosit

0.0.1

1 of 1 See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jmferrer/azure-devops-agent :latest	030f68ec6998	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

14,692

ferriscompanyferriscompany

0.1.0

1 of 1 See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,814

fibfibonacci-cluster-apps

1.0.0

3 of 5 See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
golenski/fibonacci-msg-relay :1.0.0	c863dcb0c513	perl@5.36.0-7	no fix listed
golenski/fibonacci-task-manager :2.0.0	3a2b36df247b	perl@5.36.0-7	no fix listed
golenski/fibonacci-worker :2.0.0	954caf4aaf6a	perl@5.36.0-7	no fix listed

Open the chart page →

17,003

infrafibonacci-cluster-infra

1.0.0

3 of 4 See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apache/activemq-artemis :2.37.0	bae523439ee3	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	no fix listed
library/redis :7.4.1	bb142a9c18ac	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

12,538

fineractfineract-openshift

0.1.1

2 of 4 See more

fineract fineract-openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,866

firefly-iiifirefly-iii

1.10.1

1 of 1 See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,107

firefly-iii-stackfirefly-iii

0.10.2

2 of 4 See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	perl@5.40.1-6	5.40.1-6+deb13u1
fireflyiii/data-importer :version-2.2.3	ab52bf932546	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

10,396

importerfirefly-iii

1.6.0

1 of 1 See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/data-importer :version-2.2.3	ab52bf932546	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,897

flask-contactsfirst-idror-chart

1.0.1

2 of 3 See more

flask-contacts first-idror-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	perl@5.40.1-6	5.40.1-6+deb13u1
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,789

business-api-ecosystemfiware

1.1.0

2 of 4 See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

64,668

consent-managerfiware

0.1.2

1 of 1 See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,869

onboarding-portalfiware

1.4.3

1 of 1 See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/seamware/onboarding :0.2.2	b406475f9f00	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,511

apm-hubflanksource

0.0.47

2 of 2 See more

apm-hub flanksource 0.0.47

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/apm-hub :v0.0.47	1dacc3195bf9	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8
library/postgres :14	156f0b253fd6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

6,150

batchrunnerflanksource

1.0.44

1 of 1 See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/batch-runner :v1.0.44	689687a7cf95	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,355

canary-checkerflanksource

1.2.0

1 of 2 See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/canary-checker-ui :v1.4.281	764c84e550db	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,672

flanksource-uiflanksource

1.4.318

1 of 1 See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/incident-manager-ui :v1.4.318	891f21df54fb	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,580

mission-controlflanksource

0.1.336

2 of 8 See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	perl@5.36.0-7+deb12u3	no fix listed
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,959

mission-control-ai-assistantflanksource

1.0.12

1 of 1 See more

mission-control-ai-assistant flanksource 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flanksource/mission-control-ai-assistant :1.0.12	29a635cbeeb5	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,315

flask-contactsflask-contacts-generic

1.0.1

2 of 3 See more

flask-contacts flask-contacts-generic 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	perl@5.40.1-6	5.40.1-6+deb13u1
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,789

flask-appflask-mysql

1.0.1

1 of 2 See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jjorozco20/flask-mysql-app :1.0.0	b5e44e3ba09c	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,089

flinkflink

0.5.1

1 of 1 See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/flink :1.14.6-scala_2.12	2461f02672b3	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

5,693

floriapp-mongodbfloriapp

1.0.0

1 of 1 See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

8,049

fluentd-aggregatorfluentd-aggregator

1.0.0

1 of 2 See more

fluentd-aggregator fluentd-aggregator 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/fluent/fluentd-aggregator-docker-image :2.1.0	ad25916eebbb	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,765

flyteconnectorflyte

2.0.0

1 of 1 See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,544

dump1090fnzv

0.2.8

1 of 1 See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fnzv/dump1090 :latest	b3079b95c336	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

4,126

fr24feederfnzv

0.1.2

1 of 1 See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,303

mod-z3950folio-org

0.1.3

1 of 1 See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
folioci/mod-z3950 :latest	2493041ce880	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,465

ledgerformance

1.2.0

1 of 1 See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

4,650

ff-testfrankframework

0.7.6

1 of 2 See more

ff-test frankframework 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,759

frank2examplefrankframework

0.7.4

1 of 2 See more

frank2example frankframework 0.7.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,759

plexfydrah-charts

2.2.0

1 of 1 See more

plex fydrah-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

8,974

passboltg0dscookie

0.5.2

1 of 2 See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,986

changedetection-iogabe565

0.12.0

1 of 2 See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :latest	ecacd9fd0c66	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,612

esphomegabe565

0.15.0

1 of 1 See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/esphome/esphome :latest	000c5ee5ee96	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,179

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	perl@5.36.0-7	no fix listed

Open the chart page →

13,250

guacamolegabibbo97

0.3.0

1 of 3 See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

6,437

wekan-oldgabisonfire

0.1.2

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	perl@5.30.0-9build1	5.30.0-9ubuntu0.5+esm3

Open the chart page →

5,982

accumulogaffer

2.2.1

2 of 4 See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gchq/accumulo :2.0.1	c460bb587d6d	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
gchq/hdfs :3.3.3	5ec58edbb2db	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

16,984

gaffer-road-trafficgaffer

2.2.1

1 of 8 See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gchq/hdfs :3.3.3	5ec58edbb2db	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

9,389

garge-appgarge

0.1.47

1 of 1 See more

garge-app garge 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/garge-app :v1.20.7	0382ebf9dfc8	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

1,855

garge-operatorgarge

0.1.34

1 of 1 See more

garge-operator garge 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/garge-operator :v1.9.4	16cb6643dae6	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

689

pagesgary-pages

1.0.0

2 of 3 See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,242

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/rabbitmq :4.1.2-debian-12-r0	74a3d7c747eb	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis :8.0.2-debian-12-r4	cdc2efa9c306	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/redis-sentinel :8.2.1-debian-12-r0	0ca3ea1d2f82	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/valkey :latest	0384ca2eec63	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	perl@5.36.0-7+deb12u2	no fix listed	1
bitnami/mariadb :11.7.2	16a7dae804fb	perl@5.36.0-7+deb12u1	no fix listed	1
bitnami/memcached :1.6.38	dd8f2cba9a5b	perl@5.36.0-7+deb12u2	no fix listed	1
bitnami/minideb :latest	835e5f8392c3	perl@5.40.1-6	5.40.1-6+deb13u1	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	perl@5.36.0-7+deb12u2	no fix listed	1
bitnami/redis :7.4.2	4e65bf641805	perl@5.36.0-7+deb12u2	no fix listed	1
blackducksoftware/bdba-fluentd :2026.6.3	c14bbbf45536	perl@5.40.1-6	5.40.1-6+deb13u1	1
blackducksoftware/bdba-frontend :2026.6.3	b10eaea94fd3	perl@5.40.1-6	5.40.1-6+deb13u1	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
blockstream/bitcoind :27.2	9472492530e3	perl@5.36.0-7+deb12u1	no fix listed	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	perl@5.36.0-7+deb12u1	no fix listed	1
bmeares/meerschaum :2.8.4	8e9c5bacaa82	perl@5.36.0-7+deb12u1	no fix listed	1
bnjbvr/kresus :0.22.1	37e216b182c8	perl@5.36.0-7+deb12u1	no fix listed	1
boky/postfix :5.1.0	aafc77238423	perl@5.40.1-6	5.40.1-6+deb13u1	1
boky/postfix :4.4.0	f3f247fd4252	perl@5.36.0-7+deb12u1	no fix listed	1
boxcutter/meshcmd :1.1.3	84e13f01bcab	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
btcpayserver/tor :0.4.8.10	e9585b68dc6b	perl@5.36.0-7	no fix listed	1
budibase/database :2.1.0	d90f656261c9	perl@5.36.0-7+deb12u3	no fix listed	1
budibase/proxy :3.41.3	8d780b6ee602	perl@5.40.1-6	5.40.1-6+deb13u1	1
bugsink/bugsink :2	ecdd84587746	perl@5.40.1-6	5.40.1-6+deb13u1	1
calltelemetry/web :0.8.1-rc72	05d13269e350	perl@5.36.0-7+deb12u1	no fix listed	1
camunda/zeebe :8.4.5	ab5abc09e407	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
carbone/carbone-ee :full-5.11.0	518172cbad49	perl@5.40.1-6	5.40.1-6+deb13u1	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	perl@5.36.0-7+deb12u1	no fix listed	1
castai/hibernate :v0.14	da62858c8381	perl@5.40.1-6	5.40.1-6+deb13u1	1
castlemock/castlemock :latest	b7f3f1527ba9	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
castopod/castopod :1.12.10	1fd37280cbb2	perl@5.36.0-7+deb12u1	no fix listed	1
castopod/castopod :1.15.5	4e4f0440520f	perl@5.40.1-6	5.40.1-6+deb13u1	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
cccs/assemblyline-core :4.7.4.stable19	c914f21a41d7	perl@5.36.0-7+deb12u3	no fix listed	1
cccs/assemblyline-rust :4.7.4.stable19	c2f9619d9bcd	perl@5.36.0-7+deb12u3	no fix listed	1