CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,409; of 17,790 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,409 of 17,790 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,352
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	39
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,409 by stars

Chart

Latest

Affected images

Radar Score

kc-chartkc-chart

1.0.0

1 of 3 See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,877

web-chartkcilab

0.1.0

1 of 1 See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kenerkener-chart

0.0.7

1 of 1 See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,245

kestra-starterkestra

2.0.2

1 of 5 See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17.5	aadf2c0696f5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,455

helm-mongodb-operatorkeyporttech

0.1.0

1 of 1 See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3

Open the chart page →

8,819

xwikikeyporttech

0.2.0

1 of 2 See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/xwiki :lts-postgres-tomcat	56490ac14a31	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

1,640

allurekfirfer

0.1.8

1 of 2 See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

12,538

phppgadminkfirfer

0.1.12

1 of 1 See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

10,297

quickwitkfirfer

0.7.2

1 of 1 See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quickwit/quickwit :v0.8.2	363ff56ce456	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,503

rabbitmqkfirfer

0.7.21

1 of 2 See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/rabbitmq :3.12.10	0742852455ad	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,487

web-chartkgw-ktcloudlab

0.1.0

1 of 1 See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kiaekiae

0.1.6

1 of 9 See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
istio/pilot :1.15.2	db08d6963975	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8

Open the chart page →

19,257

graphiti-mcpkiberonlabs

0.1.2

1 of 1 See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

3,410

cdashkitware

0.19.0

3 of 3 See more

cdash kitware 0.19.0

3 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	perl@5.36.0-7+deb12u1	no fix listed
kitware/cdash :v5.3.0	d7767d9b9da4	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

12,206

csa-exporterklicktipp

0.1.4

1 of 1 See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/csa-exporter :0.3.1	2c69513f9d85	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,022

proxysqlklicktipp

1.3.0

1 of 1 See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
proxysql/proxysql :3.0.8	947a7abad45b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,543

rspamdklicktipp

1.6.0

1 of 1 See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
rspamd/rspamd :4.1.4	e870599c970d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,843

snds-exporterklicktipp

0.2.5

1 of 1 See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/snds-exporter :v0.2.4	a23b389cb3c5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,031

visual-regression-trackerkokuwa

5.1.0

2 of 4 See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	perl@5.36.0-7+deb12u1	no fix listed
visualregressiontracker/api :5.0.11	941aeb8c8bf9	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,147

kollectkollect

0.20.0

1 of 1 See more

kollect kollect 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/platformrelay/kollect :v0.20.0	c95fa31ead03	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,953

nginx-chartkosunjo-nginx

0.1.0

1 of 1 See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kovi-appkovi-charts

0.8.1

1 of 1 See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kennethreitz/httpbin :latest	599fe5e50731	perl@5.26.1-6ubuntu0.2	5.26.1-6ubuntu0.7+esm3

Open the chart page →

14,846

kpingkping

0.3.5

1 of 1 See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kayrosuno/kping :latest	f3bd44b29b0d	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,234

autopilotkrateo

1.0.0

1 of 2 See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,649

kubeflowkromanow94-kubeflow

0.5.1

9 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.13.0	73486345a602	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/jupyter-web-app :v1.9.2	afb52057c997	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/tensorboards-web-app :v1.9.2	77f07f52a84a	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/volumes-web-app :v1.9.2	f63c3e550af3	perl@5.36.0-7+deb12u1	no fix listed
library/python :3.7	eedf63967cdb	perl@5.36.0-7	no fix listed
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/tfx-oss-public/ml_metadata_store_server :1.14.0	51404ef4419c	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

70,968

kron-aapm-agentkron-aapm-agent

1.1.0

1 of 1 See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-agent :1.1.0	7feef7d2ab42	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

8,927

adventureworkskronkltd

0.1.0

1 of 1 See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
chriseaton/adventureworks :latest	54c3384ce701	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8

Open the chart page →

4,491

fileserverkronkltd

0.3.10

1 of 1 See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
duck1123/lnd-fileserver :latest	9d6fb247b714	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

3,772

mindsdbkronkltd

0.1.0

1 of 1 See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
mindsdb/mindsdb :latest	163011c09299	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

9,698

rtlkronkltd

0.1.0

1 of 2 See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
duck1123/cert-downloader :latest	0e29f19fa67c	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

5,647

world-dbkronkltd

0.1.0

1 of 1 See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghusta/postgres-world-db :latest	879d0919fdcc	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,684

aapm-servicekron-pam-aapm-helmcharts

1.2.5

1 of 1 See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-service :1.1.3	9dd602db8baa	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

2,648

kron-aapm-agentkron-pam-aapm-helmcharts

1.2.5

1 of 1 See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-agent :1.8.4	1cc7d5be6529	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

2,749

web-chartktcloudhelm

0.1.0

1 of 1 See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudlab

0.1.0

1 of 1 See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudlabstudent

0.1.0

1 of 1 See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudljw

0.1.0

1 of 1 See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kubeadapt-k8s-pulsekubeadapt

1.0.1

1 of 1 See more

kubeadapt-k8s-pulse kubeadapt 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,432

aperagkubeblocks

0.0.0-nightly

1 of 3 See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

8,478

chaos-meshkubeblocks

2.7.2

2 of 4 See more

chaos-mesh kubeblocks 2.7.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	perl@5.36.0-7+deb12u2	no fix listed
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

13,572

ciliumkubeblocks

1.15.1

1 of 2 See more

cilium kubeblocks 1.15.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

5,130

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

4,502

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
openebs/node-disk-operator :2.1.0	6afe2123c457	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

10,587

spiderpoolkubeblocks

1.2.0

2 of 4 See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3

Open the chart page →

8,470

kube-bootkube-boot

1.2.2

1 of 1 See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/eclipse-temurin :21	85f00967bcc6	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3

Open the chart page →

1,257

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,306

kubeintellectkubeintellect

2.5.0

1 of 2 See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,882

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	perl@5.36.0-7	no fix listed

Open the chart page →

4,310

kube-netlagkube-netlag

1.1.0

1 of 1 See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

1,488

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,208

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
cortezaproject/corteza :2024.9.0	8eb7a26605c9	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8	1
cortezaproject/corteza-server-corredor :2024.9.4	4ea78dfe5364	perl@5.36.0-7+deb12u2	no fix listed	1
coturn/coturn :4.10.0-r1	f4c2af06c3c5	perl@5.40.1-6	5.40.1-6+deb13u1	1
countly/countly-server :25.05.4	e3c238248f99	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
cradlepoint/pgbouncer :1.0.1	8f5720b0cd03	perl@5.26.1-6ubuntu0.2	5.26.1-6ubuntu0.7+esm3	1
cribl/cribl :3.0.2	762747cb6796	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3	1
cspconsole/config-provider :1.0.36	5524a26a6c23	perl@5.36.0-7+deb12u3	no fix listed	1
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	perl@5.36.0-7+deb12u3	no fix listed	1
cspconsole/report-collector :1.0.158	39750248193b	perl@5.36.0-7+deb12u3	no fix listed	1
cspconsole/report-processor :1.0.27	9a2d8840bfdf	perl@5.36.0-7+deb12u3	no fix listed	1
cubejs/cubestore :v1.5.3	34ac523a9bab	perl@5.36.0-7+deb12u3	no fix listed	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	perl@5.40.1-6	5.40.1-6+deb13u1	1
cyfershepard/jellystat :1.1.11	c4e2dfa8bddf	perl@5.36.0-7+deb12u3	no fix listed	1
cznic/knot-resolver :v6.4.2	fe71c5214fdc	perl@5.40.1-6	5.40.1-6+deb13u1	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	perl@5.36.0-7	no fix listed	1
daedalusproject/base_kubectl :latest	6f72b5119eda	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
dagster/dagster-celery-k8s :1.13.22	e29a64392e12	perl@5.40.1-6	5.40.1-6+deb13u1	1
dagster/dagster-cloud-agent :1.13.22	9674f3b94a3b	perl@5.40.1-6	5.40.1-6+deb13u1	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	perl@5.36.0-7+deb12u3	no fix listed	1
dannielkil/book-frontend :latest	937993927694	perl@5.36.0-7+deb12u1	no fix listed	1
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
darthsim/imgproxy :v3.26	476cb08c816a	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
daskdev/dask-notebook :1.1.0	052630f5ca04	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	perl@5.26.1-6ubuntu0.6	5.26.1-6ubuntu0.7+esm3	1
datadog/agent :6	aad9994de6a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	perl@5.36.0-7+deb12u1	no fix listed	1
datafuselabs/databend-query :v1.2.279	a936843b85b4	perl@5.36.0-7+deb12u1	no fix listed	1
datalayers/datalayers :v2.2.10	17b292079239	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
datalust/seq :5.0.832-pre	9c731bb207a6	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	1
datalust/seq-input-gelf :3.0.441-x64	3de34aed5642	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
datamate/seafile-professional :11.0.20	2dd66b722464	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
dbeaver/cloudbeaver :26.1.2	87ab86d00f8c	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
dbgate/dbgate :7.2.3	f2dc7423ea88	perl@5.36.0-7+deb12u3	no fix listed	1
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
ddosify/alaz :v0.12.0	ea602056d9ce	perl@5.36.0-7+deb12u1	no fix listed	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	perl@5.36.0-7+deb12u1	no fix listed	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	perl@5.36.0-7+deb12u1	no fix listed	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	perl@5.36.0-7+deb12u1	no fix listed	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	perl@5.36.0-7+deb12u1	no fix listed	1
decisionrules/ai-engine :latest	38c377e7c01e	perl@5.40.1-6	5.40.1-6+deb13u1	1
deconzcommunity/deconz :2.29.2	062de2362641	perl@5.36.0-7+deb12u1	no fix listed	1
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
defactops/defactops-backend :1.0.23	07b663c0092a	perl@5.36.0-7+deb12u1	no fix listed	1
defectdojo/defectdojo-django :3.3.100	c597abdbb535	perl@5.40.1-6	5.40.1-6+deb13u1	1
deimosfr/dnsmasq-k8s :1.4.1	284c4040fc6d	perl@5.40.1-6	5.40.1-6+deb13u1	1
dellcloud/category :distributed	02fc234353a9	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1