CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,402; of 17,792 indexed, latest versions
Container images: 2,380; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,402 of 17,792 indexed charts deploy, on 2,380 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,342
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,402 by stars

Chart

Latest

Affected images

Radar Score

servicexssl-hep

1.8.5

11 of 16 See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/python :3.10	70c9cc675605	perl@5.40.1-6	5.40.1-6+deb13u1
ncsa/checks :main	0b738bbc8d70	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_app :v1.8.5	1d12f943cec5	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_code_gen_atlas_xaod :v1.8.5	e7aff7f97b89	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_code_gen_func_adl_uproot :v1.8.5	b01b8ee966ed	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_code_gen_python :v1.8.5	0e4175a4e1eb	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_code_gen_raw_uproot :v1.8.5	671980005c57	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex_code_gen_topcp :v1.8.5	596db2abdd09	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex-did-finder-atlasopenmagic :v1.8.5	54aaf1721d03	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex-did-finder-cernopendata :v1.8.5	2cb88ceab5bb	perl@5.40.1-6	5.40.1-6+deb13u1
sslhep/servicex-did-finder-xrootd :v1.8.5	c284442b44e3	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

68,323

allurestakater

1.0.1

1 of 1 See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

28,515

jenkinsstakater

0.21.0

1 of 1 See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,498

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	perl@5.36.0-7	no fix listed

Open the chart page →

20,317

erigonstakewise

2.61.2

1 of 3 See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
erigontech/erigon :v2.61.2	88706754b627	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,975

lighthouse-validatorstakewise

7.0.1

1 of 2 See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sigp/lighthouse :v7.0.1	2cae720e9a35	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,029

lodestar-validatorstakewise

1.2.0

1 of 1 See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,082

nethermindstakewise

2.8.2

1 of 3 See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.31.8	93e57917371a	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

2,087

operatorstakewise

2.1.1

1 of 5 See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sigp/lighthouse :v2.1.2	ad501f02cfef	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

6,595

rethstakewise

1.2.1

1 of 3 See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,025

ssv-nodestakewise

2.2.0

1 of 2 See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

6,951

teku-validatorstakewise

4.3.2

1 of 2 See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
consensys/teku :25.4.1	bf6ecd2ea716	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

3,205

verostakewise

0.8.3

1 of 2 See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,484

stalwartstalwart-helm

0.7.18

1 of 2 See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
stalwartlabs/stalwart :v0.16.22	388dcb75a707	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,425

multus-cnistartechnica

0.1.4

1 of 1 See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :latest-thick	b2136983532b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,036

open-appsec-injectorstartechnica

1.1.2

1 of 3 See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/openappsec/openappsec-waf-webhook :1.1.34	5b979b962043	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,335

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

14,596

trinostatcan

1.23.4

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

13,900

static-src-people-detector-appstatic-src-people-detector-chart

1.5.5

1 of 6 See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :4.4.18	d23ec07162ca	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

13,704

steadybit-agentsteadybit

3.1.163

3 of 6 See more

steadybit-agent steadybit 3.1.163

3 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/steadybit/agent :2.4.5	2bc7b260e44e	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/steadybit/extension-container :v1.8.0	dd31d4713ef6	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/steadybit/extension-host :v1.8.0	a198ac7bc8c1	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,566

pagesstephendillondell

1.0.0

2 of 3 See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,262

its-mytabsstone

0.3.0

1 of 1 See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
louislam/its-mytabs :1.7.0	2e478d3170bd	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,507

minkstoneshi-tscharts

0.1.0

1 of 1 See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

sn-platform-slimstreamnative

1.11.44

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3

Open the chart page →

10,270

wonder-mesh-netstrrl-helm

2026.629.0

1 of 3 See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,130

kurento_webrtc_demostunner

0.1.0

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

12,613

stunner-kurento-one2one-callstunner

0.1.0

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

12,613

artifactory-cleanupsubshell

1.0.1

1 of 1 See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,558

group-challengesubshell-lab

2.1.0

1 of 2 See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4

Open the chart page →

2,602

orchestratorsubstra

8.8.0

1 of 3 See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,039

substra-backendsubstra

26.15.3

2 of 7 See more

substra-backend substra 26.15.3

2 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,827

verbasubstratus

0.4.0

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

13,476

stresssudermanjr

0.2.0

1 of 1 See more

stress sudermanjr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	2260313b31c8	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3

Open the chart page →

749

3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculators

0.1.4

1 of 1 See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators :v1.1.1	220c5e4e1a3d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,697

authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxy

0.1.4

1 of 1 See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy :v1.1.1	e1351a977607	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,777

fantasy-dice-chambersudo-kraken-fantasy-dice-chamber

0.1.3

1 of 1 See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber :v1.3.2	99fd4cb0f4fe	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,809

finances-trackersudo-kraken-finances-tracker

0.1.5

1 of 1 See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sudo-kraken/finances-tracker :v1.1.1	c73527cde81c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,777

flaresolverrsudo-kraken-flaresolverr

2.1.4

1 of 1 See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

33,965

jellyfinsudo-kraken-jellyfin

2.1.3

1 of 1 See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.6	333b64771663	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,424

jf-pushover-webhooksudo-kraken-jf-pushover-webhook

0.1.3

1 of 1 See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,777

nginx-chartsuin-nginx

0.1.0

1 of 1 See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

pagessunilb2590-pages

1.0.0

2 of 3 See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,262

surogate-hubsurogate-hub

2.1.5

1 of 1 See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/invergent-ai/surogate-hub :latest	6d4106724d56	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,474

svc-lb-muxsvc-lb-mux

0.1.3

1 of 1 See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/nowakeai/svc-lb-mux :0.1.3	7d8fb8e996b6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,454

convert-datasvtech

0.13.2

1 of 3 See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

7,659

netforge-besvtech

0.0.2

1 of 3 See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
conductoross/conductor :3.31.0	9fba127693e6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,711

elasticsearchsvtech-public-helm-charts

1.0.0

1 of 1 See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8

Open the chart page →

12,122

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

12,732

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm3

Open the chart page →

10,980

icinga2svtech-public-helm-charts

1.0.0

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,542

Container images carrying it

2,380 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
cccs/assemblyline-socketio :4.7.4.stable20	2b88493b62f7	perl@5.36.0-7+deb12u3	no fix listed	1
cccs/assemblyline-ui :4.7.4.stable20	efa75509b854	perl@5.36.0-7+deb12u3	no fix listed	1
chaerr/kridge :demo-operator-v0.1.2	66833deec017	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm3	1
chainsafe/lodestar :latest	5593f6e97912	perl@5.36.0-7+deb12u3	no fix listed	1
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	perl@5.36.0-7+deb12u1	no fix listed	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	perl@5.18.2-2ubuntu1.7	5.18.2-2ubuntu1.7+esm8	1
chetangautamm/repo :sipp.v3	e7f7049e1544	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
cheveo/azp-agent :1.0.2	82240f890884	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
cheyang/distributed-tf :1.6.0	46cc34755493	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	1
chiefonboarding/chiefonboarding :v2.5.0	d0964135ea82	perl@5.40.1-6	5.40.1-6+deb13u1	1
chocobozzz/peertube :v8.1.5	052712130691	perl@5.40.1-6	5.40.1-6+deb13u1	1
chriseaton/adventureworks :latest	54c3384ce701	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8	1
chromadb/chroma :1.5.7	fc8dc8e11fb2	perl@5.40.1-6	5.40.1-6+deb13u1	1
circleci/runner :launch-agent	9bdc62f02162	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
ciscolabs/msm-nc :07102023	36d02faad958	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
citizenstig/httpbin :latest	b81c818ccb86	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm3	1
ckan/ckan-base :2.12.0	87ecf3f27ad6	perl@5.36.0-7+deb12u3	no fix listed	1
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
ckulka/baikal :0.10.1-nginx	434bdd162247	perl@5.36.0-7+deb12u2	no fix listed	1
clickhouse/clickhouse-server :24.8	1ffa82edee00	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
clickhouse/clickhouse-server :23.8	512bb8a21483	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
clickhouse/clickhouse-server :26.3	810861a2e2d0	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :25.3.2.39	8745843b17f9	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :26.3.10	92098d3b31dd	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :24.12.6	a65ca89ddbe8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :25.3.14.14	b627d7a9bc0e	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
clickhouse/clickhouse-server :26.8.2 :latest	fa394da808cc	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	1
cloudtooling/moodle :5.2.3	f4f04e0fc401	perl@5.36.0-7+deb12u3	no fix listed	1
cloudve/janis-terminal :latest	af56e77ca587	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
cloudve/ttyd :latest	d79c1c5881c0	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	perl@5.36.0-7+deb12u3	no fix listed	1
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	perl@5.36.0-7+deb12u3	no fix listed	1
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	perl@5.36.0-7+deb12u3	no fix listed	1
cm2network/squad :latest	8cba47f53df5	perl@5.40.1-6	5.40.1-6+deb13u1	1
codedesignplus/ms-emails-grpc :latest	e336012bc781	perl@5.36.0-7+deb12u3	no fix listed	1
codedesignplus/ms-emails-rest :latest	ac84661c605e	perl@5.36.0-7+deb12u3	no fix listed	1
codedesignplus/ms-licenses-grpc :latest	360144457f4d	perl@5.36.0-7+deb12u3	no fix listed	1
codedesignplus/ms-modules-grpc :latest	3f6aaa32d526	perl@5.36.0-7+deb12u3	no fix listed	1
coderenvs/timescale :1.44.6	76fd37fe6830	perl@0:1.28-422.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-2.el8_9.1 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb	1
conductoross/conductor :3.31.0	9fba127693e6	perl@5.40.1-6	5.40.1-6+deb13u1	1
consensys/teku :latest	3a4f5761ae1c	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
consensys/teku :25.4.1	bf6ecd2ea716	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
consensys/web3signer :latest	f146a51a1ba3	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	perl@5.36.0-7+deb12u1	no fix listed	1
continuoussecuritytooling/keycloak-reporting-cli :1.3.3	f04ecefab64e	perl@5.36.0-7+deb12u3	no fix listed	1
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1