CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,409; of 17,790 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,409 of 17,790 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,352
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	39
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,409 by stars

Chart

Latest

Affected images

Radar Score

kc-chartkc-chart

1.0.0

1 of 3 See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,877

web-chartkcilab

0.1.0

1 of 1 See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kenerkener-chart

0.0.7

1 of 1 See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,245

kestra-starterkestra

2.0.2

1 of 5 See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17.5	aadf2c0696f5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,455

helm-mongodb-operatorkeyporttech

0.1.0

1 of 1 See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3

Open the chart page →

8,819

xwikikeyporttech

0.2.0

1 of 2 See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/xwiki :lts-postgres-tomcat	56490ac14a31	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

1,640

allurekfirfer

0.1.8

1 of 2 See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

12,538

phppgadminkfirfer

0.1.12

1 of 1 See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

10,297

quickwitkfirfer

0.7.2

1 of 1 See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quickwit/quickwit :v0.8.2	363ff56ce456	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,503

rabbitmqkfirfer

0.7.21

1 of 2 See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/rabbitmq :3.12.10	0742852455ad	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,487

web-chartkgw-ktcloudlab

0.1.0

1 of 1 See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kiaekiae

0.1.6

1 of 9 See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
istio/pilot :1.15.2	db08d6963975	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8

Open the chart page →

19,257

graphiti-mcpkiberonlabs

0.1.2

1 of 1 See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

3,410

cdashkitware

0.19.0

3 of 3 See more

cdash kitware 0.19.0

3 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	perl@5.36.0-7+deb12u1	no fix listed
kitware/cdash :v5.3.0	d7767d9b9da4	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

12,206

csa-exporterklicktipp

0.1.4

1 of 1 See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/csa-exporter :0.3.1	2c69513f9d85	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,022

proxysqlklicktipp

1.3.0

1 of 1 See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
proxysql/proxysql :3.0.8	947a7abad45b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,543

rspamdklicktipp

1.6.0

1 of 1 See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
rspamd/rspamd :4.1.4	e870599c970d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,843

snds-exporterklicktipp

0.2.5

1 of 1 See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/snds-exporter :v0.2.4	a23b389cb3c5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,031

visual-regression-trackerkokuwa

5.1.0

2 of 4 See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	perl@5.36.0-7+deb12u1	no fix listed
visualregressiontracker/api :5.0.11	941aeb8c8bf9	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,147

kollectkollect

0.20.0

1 of 1 See more

kollect kollect 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/platformrelay/kollect :v0.20.0	c95fa31ead03	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,953

nginx-chartkosunjo-nginx

0.1.0

1 of 1 See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kovi-appkovi-charts

0.8.1

1 of 1 See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kennethreitz/httpbin :latest	599fe5e50731	perl@5.26.1-6ubuntu0.2	5.26.1-6ubuntu0.7+esm3

Open the chart page →

14,846

kpingkping

0.3.5

1 of 1 See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kayrosuno/kping :latest	f3bd44b29b0d	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,234

autopilotkrateo

1.0.0

1 of 2 See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,649

kubeflowkromanow94-kubeflow

0.5.1

9 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.13.0	73486345a602	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/jupyter-web-app :v1.9.2	afb52057c997	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/tensorboards-web-app :v1.9.2	77f07f52a84a	perl@5.36.0-7+deb12u1	no fix listed
kubeflownotebookswg/volumes-web-app :v1.9.2	f63c3e550af3	perl@5.36.0-7+deb12u1	no fix listed
library/python :3.7	eedf63967cdb	perl@5.36.0-7	no fix listed
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/tfx-oss-public/ml_metadata_store_server :1.14.0	51404ef4419c	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

70,968

kron-aapm-agentkron-aapm-agent

1.1.0

1 of 1 See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-agent :1.1.0	7feef7d2ab42	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

8,927

adventureworkskronkltd

0.1.0

1 of 1 See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
chriseaton/adventureworks :latest	54c3384ce701	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8

Open the chart page →

4,491

fileserverkronkltd

0.3.10

1 of 1 See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
duck1123/lnd-fileserver :latest	9d6fb247b714	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

3,772

mindsdbkronkltd

0.1.0

1 of 1 See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
mindsdb/mindsdb :latest	163011c09299	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

9,698

rtlkronkltd

0.1.0

1 of 2 See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
duck1123/cert-downloader :latest	0e29f19fa67c	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

5,647

world-dbkronkltd

0.1.0

1 of 1 See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghusta/postgres-world-db :latest	879d0919fdcc	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,684

aapm-servicekron-pam-aapm-helmcharts

1.2.5

1 of 1 See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-service :1.1.3	9dd602db8baa	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

2,648

kron-aapm-agentkron-pam-aapm-helmcharts

1.2.5

1 of 1 See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
krontechnology/aapm-agent :1.8.4	1cc7d5be6529	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

2,749

web-chartktcloudhelm

0.1.0

1 of 1 See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudlab

0.1.0

1 of 1 See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudlabstudent

0.1.0

1 of 1 See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

web-chartktcloudljw

0.1.0

1 of 1 See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

kubeadapt-k8s-pulsekubeadapt

1.0.1

1 of 1 See more

kubeadapt-k8s-pulse kubeadapt 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,432

aperagkubeblocks

0.0.0-nightly

1 of 3 See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

8,478

chaos-meshkubeblocks

2.7.2

2 of 4 See more

chaos-mesh kubeblocks 2.7.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	perl@5.36.0-7+deb12u2	no fix listed
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

13,572

ciliumkubeblocks

1.15.1

1 of 2 See more

cilium kubeblocks 1.15.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

5,130

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

4,502

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
openebs/node-disk-operator :2.1.0	6afe2123c457	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

10,587

spiderpoolkubeblocks

1.2.0

2 of 4 See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3

Open the chart page →

8,470

kube-bootkube-boot

1.2.2

1 of 1 See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/eclipse-temurin :21	85f00967bcc6	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3

Open the chart page →

1,257

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

4,306

kubeintellectkubeintellect

2.5.0

1 of 2 See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,882

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	perl@5.36.0-7	no fix listed

Open the chart page →

4,310

kube-netlagkube-netlag

1.1.0

1 of 1 See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

1,488

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,208

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8	1
golenski/fibonacci-msg-relay :1.0.0	c863dcb0c513	perl@5.36.0-7	no fix listed	1
golenski/fibonacci-task-manager :2.0.0	3a2b36df247b	perl@5.36.0-7	no fix listed	1
golenski/fibonacci-worker :2.0.0	954caf4aaf6a	perl@5.36.0-7	no fix listed	1
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	perl@5.22.1-9ubuntu0.3	5.22.1-9ubuntu0.9+esm3	1
gotenberg/gotenberg :8.30	206a6c708fc6	perl@5.40.1-6	5.40.1-6+deb13u1	1
gotenberg/gotenberg :8.34	67097317623a	perl@5.40.1-6	5.40.1-6+deb13u1	1
gotenberg/gotenberg :8-chromium	a40f92d7419a	perl@5.40.1-6	5.40.1-6+deb13u1	1
gotson/komga :0.99.4	9b15ea6bfc30	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
gradiant/open5gs-dbctl :0.10.3	332031245fce	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
grafana/agent :v0.44.2	3364714a2f64	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.5.1	01a63f4e032c	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.4.3	06bdcbb51fc2	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.18.1	0f4434c92b3e	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.18.0	491b0578c049	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.16.3	84b76d56c594	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.11.3	8c7256f412fe	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.19.2	b8ec653c4423	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
grafana/alloy :v1.14.0	f50931848bd8	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
grafana/beyla :1.3.3	36d07f8d276e	perl@5.36.0-7+deb12u1	no fix listed	1
grafana/fluent-plugin-loki :latest	8a3882e8c28b	perl@5.36.0-7+deb12u2	no fix listed	1
grafana/mcp-grafana :0.14.0	42f541f22063	perl@5.36.0-7+deb12u3	no fix listed	1
grafana/mcp-grafana :1.4.2	f87fa67a561f	perl@5.36.0-7+deb12u3	no fix listed	1
grafana/promtail :3.5.1	65bfae480b57	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
grafana/promtail :3.6.1	8dcfdf466da0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
graphprotocol/graph-node :latest	b0436347fb24	perl@5.36.0-7+deb12u1	no fix listed	1
graphprotocol/graph-node :v0.37.0	f4452cdedd68	perl@5.36.0-7+deb12u1	no fix listed	1
graylog/graylog :6.1.10	19de1aff48c2	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
graylog/graylog-enterprise :7.1.8	8a1f641cd7aa	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
greenkube/greenkube :0.3.0	0c01932282a4	perl@5.36.0-7+deb12u3	no fix listed	1
grpl/grapple-cli :0.2.127	c00aafee6629	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
guacamole/guacamole :1.5.5	0f62f6d17ab3	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
guillh/web3-prometheus-exporter :0.3.0	4fb99dbc32b2	perl@5.36.0-7+deb12u1	no fix listed	1
gulacedia/web-dvwa-new :v3	67b467d961ca	perl@5.36.0-7	no fix listed	1
hamidyousefi93/saam-test :latest	c34f071f6ed0	perl@5.36.0-7	no fix listed	1
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	perl@5.36.0-7+deb12u1	no fix listed	1
hamzaarshad10/querypodpy :1.7	154f38e8668e	perl@5.36.0-7+deb12u1	no fix listed	1
hansehe/locust :1.1.0	bc8e45262bc4	perl@5.36.0-7+deb12u1	no fix listed	1
haohanyang/compass-web :0.5.0	54f2112602ee	perl@5.36.0-7+deb12u3	no fix listed	1
haohanyang/compass-web :0.5.1	f4f8fe4e21f1	perl@5.36.0-7+deb12u3	no fix listed	1
hassroutyyoussef/accountservice :latest	1f01edf1ee0c	perl@5.36.0-7+deb12u1	no fix listed	1
hassroutyyoussef/orderservice :latest	2fc3d1617928	perl@5.36.0-7+deb12u1	no fix listed	1
hassroutyyoussef/userservice :latest	e0392e2b4a90	perl@5.36.0-7+deb12u1	no fix listed	1
hasura/graphql-engine :v2.34.0-ce	0111b0204136	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
hasura/graphql-engine :v2.48.10	f6c1c4b957d2	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
haugene/transmission-openvpn :4.0	059216cfae4b	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
haveagitgat/tdarr :2.00.18	1256348872ce	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm3	1
hazegoodlife/haaze :veggiesite	50f02d2d5d4d	perl@5.36.0-7+deb12u1	no fix listed	1