CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,409; of 17,790 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,409 of 17,790 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,352
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	39
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,409 by stars

Chart

Latest

Affected images

Radar Score

yelbfairwinds-incubator

0.1.1

1 of 5 See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,113

event-generatorfalcosecurity

0.4.0

1 of 1 See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
falcosecurity/event-generator :latest	932956d86c99	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,796

farm-observabilityfarm-observability

0.27.2

2 of 18 See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.16.3	84b76d56c594	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
grafana/alloy :v1.12.2	f94b1c82957a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

13,409

jenkinsfatihtepe-jenkins

1.0.0

1 of 1 See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,498

quickstartfeatureform

0.1.1

2 of 3 See more

quickstart featureform 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,575

activityrelayfedihost

0.1.4

1 of 2 See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8

Open the chart page →

13,502

rospoferama

0.4.3

1 of 1 See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

6,049

vipienferama

0.2.8

1 of 1 See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,523

azure-pipelines-agentfermosit

0.0.1

1 of 1 See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jmferrer/azure-devops-agent :latest	030f68ec6998	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

14,692

ferriscompanyferriscompany

0.1.0

1 of 1 See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,814

fibfibonacci-cluster-apps

1.0.0

3 of 5 See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
golenski/fibonacci-msg-relay :1.0.0	c863dcb0c513	perl@5.36.0-7	no fix listed
golenski/fibonacci-task-manager :2.0.0	3a2b36df247b	perl@5.36.0-7	no fix listed
golenski/fibonacci-worker :2.0.0	954caf4aaf6a	perl@5.36.0-7	no fix listed

Open the chart page →

17,003

infrafibonacci-cluster-infra

1.0.0

3 of 4 See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apache/activemq-artemis :2.37.0	bae523439ee3	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	no fix listed
library/redis :7.4.1	bb142a9c18ac	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

12,538

fineractfineract-openshift

0.1.1

2 of 4 See more

fineract fineract-openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,866

firefly-iiifirefly-iii

1.10.1

1 of 1 See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,107

firefly-iii-stackfirefly-iii

0.10.2

2 of 4 See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	perl@5.40.1-6	5.40.1-6+deb13u1
fireflyiii/data-importer :version-2.2.3	ab52bf932546	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

10,396

importerfirefly-iii

1.6.0

1 of 1 See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fireflyiii/data-importer :version-2.2.3	ab52bf932546	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,897

flask-contactsfirst-idror-chart

1.0.1

2 of 3 See more

flask-contacts first-idror-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	perl@5.40.1-6	5.40.1-6+deb13u1
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,789

business-api-ecosystemfiware

1.1.0

2 of 4 See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

64,668

consent-managerfiware

0.1.2

1 of 1 See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,869

onboarding-portalfiware

1.4.3

1 of 1 See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/seamware/onboarding :0.2.2	b406475f9f00	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,511

apm-hubflanksource

0.0.47

2 of 2 See more

apm-hub flanksource 0.0.47

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/apm-hub :v0.0.47	1dacc3195bf9	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8
library/postgres :14	156f0b253fd6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

6,150

batchrunnerflanksource

1.0.44

1 of 1 See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/batch-runner :v1.0.44	689687a7cf95	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,355

canary-checkerflanksource

1.2.0

1 of 2 See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/canary-checker-ui :v1.4.281	764c84e550db	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,672

flanksource-uiflanksource

1.4.318

1 of 1 See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
flanksource/incident-manager-ui :v1.4.318	891f21df54fb	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,580

mission-controlflanksource

0.1.336

2 of 8 See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	perl@5.36.0-7+deb12u3	no fix listed
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,959

mission-control-ai-assistantflanksource

1.0.12

1 of 1 See more

mission-control-ai-assistant flanksource 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flanksource/mission-control-ai-assistant :1.0.12	29a635cbeeb5	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,315

flask-contactsflask-contacts-generic

1.0.1

2 of 3 See more

flask-contacts flask-contacts-generic 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	perl@5.40.1-6	5.40.1-6+deb13u1
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,789

flask-appflask-mysql

1.0.1

1 of 2 See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jjorozco20/flask-mysql-app :1.0.0	b5e44e3ba09c	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,089

flinkflink

0.5.1

1 of 1 See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/flink :1.14.6-scala_2.12	2461f02672b3	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

5,693

floriapp-mongodbfloriapp

1.0.0

1 of 1 See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

8,049

fluentd-aggregatorfluentd-aggregator

1.0.0

1 of 2 See more

fluentd-aggregator fluentd-aggregator 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/fluent/fluentd-aggregator-docker-image :2.1.0	ad25916eebbb	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,765

flyteconnectorflyte

2.0.0

1 of 1 See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,544

dump1090fnzv

0.2.8

1 of 1 See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fnzv/dump1090 :latest	b3079b95c336	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

4,126

fr24feederfnzv

0.1.2

1 of 1 See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,303

mod-z3950folio-org

0.1.3

1 of 1 See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
folioci/mod-z3950 :latest	2493041ce880	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,465

ledgerformance

1.2.0

1 of 1 See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

4,650

ff-testfrankframework

0.7.6

1 of 2 See more

ff-test frankframework 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,759

frank2examplefrankframework

0.7.4

1 of 2 See more

frank2example frankframework 0.7.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,759

plexfydrah-charts

2.2.0

1 of 1 See more

plex fydrah-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

8,974

passboltg0dscookie

0.5.2

1 of 2 See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,986

changedetection-iogabe565

0.12.0

1 of 2 See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :latest	ecacd9fd0c66	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,612

esphomegabe565

0.15.0

1 of 1 See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/esphome/esphome :latest	000c5ee5ee96	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,179

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	perl@5.36.0-7	no fix listed

Open the chart page →

13,250

guacamolegabibbo97

0.3.0

1 of 3 See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

6,437

wekan-oldgabisonfire

0.1.2

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	perl@5.30.0-9build1	5.30.0-9ubuntu0.5+esm3

Open the chart page →

5,982

accumulogaffer

2.2.1

2 of 4 See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gchq/accumulo :2.0.1	c460bb587d6d	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
gchq/hdfs :3.3.3	5ec58edbb2db	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

16,984

gaffer-road-trafficgaffer

2.2.1

1 of 8 See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gchq/hdfs :3.3.3	5ec58edbb2db	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

9,389

garge-appgarge

0.1.47

1 of 1 See more

garge-app garge 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/garge-app :v1.20.7	0382ebf9dfc8	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

1,855

garge-operatorgarge

0.1.34

1 of 1 See more

garge-operator garge 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/garge-operator :v1.9.4	16cb6643dae6	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

689

pagesgary-pages

1.0.0

2 of 3 See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,242

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
flanksource/canary-checker-ui :v1.4.281	764c84e550db	perl@5.36.0-7+deb12u1	no fix listed	1
flanksource/incident-manager-ui :v1.4.318	891f21df54fb	perl@5.36.0-7+deb12u1	no fix listed	1
flashcatcloud/categraf :latest	42e6ab16472e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
flashcatcloud/nightingale :8.5.1	421acb36181b	perl@5.40.1-6	5.40.1-6+deb13u1	1
fluent/fluent-bit :4.0-debug	e76397ef3983	perl@5.36.0-7+deb12u3	no fix listed	1
fluent/fluentd-kubernetes-daemonset :v1.19.3-debian-elasticsearch7-1.1	de9cf5f1127a	perl@5.40.1-6	5.40.1-6+deb13u1	1
fluent/fluentd-kubernetes-daemonset :v1-debian-graylog	fda93f768f98	perl@5.40.1-6	5.40.1-6+deb13u1	1
flyway/flyway :9.15	45b5d7cdc75a	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
fnzv/dump1090 :latest	b3079b95c336	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
foldingathome/fah-gpu :latest	5ef7742d1eb4	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
folioci/mod-z3950 :latest	2493041ce880	perl@5.40.1-6	5.40.1-6+deb13u1	1
fosrl/pangolin :latest	83a55f933b4d	perl@5.36.0-7+deb12u3	no fix listed	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
frankescobar/allure-docker-service :latest	dc171ec796d5	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
free5gmano/nextepc-mongodb :latest	36f806935519	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
freedom98/flask :k3.0	d7ce1533f297	perl@5.36.0-7+deb12u1	no fix listed	1
freeradius/freeradius-server :3.2.8	af6fd34a5b78	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
galaxy/cloudman-server :latest	e5c265fe9fcd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
galaxy/galaxy-init :v18.01	0267bad550e6	perl@5.18.2-2ubuntu1.4	5.18.2-2ubuntu1.7+esm8	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	perl@5.18.2-2ubuntu1.4	5.18.2-2ubuntu1.7+esm8	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	perl@5.36.0-7+deb12u2	no fix listed	1
galexrt/extended-ceph-exporter :v1.8.0	5373078a3a08	perl@5.40.1-6	5.40.1-6+deb13u1	1
gchq/accumulo :2.0.1	c460bb587d6d	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	perl@5.26.1-6ubuntu0.7	5.26.1-6ubuntu0.7+esm3	1
geonode/geoserver :2.28.4-latest	81b1d431b7e9	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	perl@5.36.0-7+deb12u3	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-gateway :3.0.1.1	de0b20bd2a43	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-gwc :3.0.1.1	b04ed89b5d2b	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-rest :3.0.1.1	318254b52f96	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-wcs :3.0.1.1	4f077124f591	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-webui :3.0.1.1	4f91e3048ac8	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-wfs :3.0.1.1	299f0d6232d1	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
geoservercloud/geoserver-cloud-wms :3.0.1.1	5164f687ce4d	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
gethue/hue :4.11.0	11b649636e68	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
gethue/hue :4.10.0	5702b2c37ff9	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
gethue/hue :latest	7d5c1b9f8a79	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8	1
getsentry/relay :24.10.0	ba7bf9163219	perl@5.36.0-7+deb12u1	no fix listed	1
ghostfolio/ghostfolio :3.7.0	e3c6ab53e49b	perl@5.36.0-7+deb12u3	no fix listed	1
ghusta/postgres-world-db :latest	879d0919fdcc	perl@5.40.1-6	5.40.1-6+deb13u1	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
glasskube/operator :0.12.2	be5133100d63	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
glpi/glpi :latest	4b681082a79e	perl@5.40.1-6	5.40.1-6+deb13u1	1