CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,395; of 17,797 indexed, latest versions
Container images: 2,368; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,395 of 17,797 indexed charts deploy, on 2,368 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,330
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,395 by stars

Chart

Latest

Affected images

Radar Score

pagessekharpkube

1.0.0

2 of 3 See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,262

seldon-core-loadtestingseldon

0.2.0

1 of 1 See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
seldonio/locust-core :0.8	1d0da98a2d76	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

23,099

seldon-deployseldon

1.4.0

1 of 2 See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-Thread-Queue@3.13-1.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 0:3.14-457.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

22,363

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,415

valkeyself-hosters-by-night

0.1.0

1 of 1 See more

valkey self-hosters-by-night 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.1	64e361b630ec	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

836

sentry-dbsentry

0.9.4

1 of 10 See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :19.16	d210dc69321e	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

10,984

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

3,341

guacamolesergiotocalini

1.0.0

1 of 2 See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.5.5	0f62f6d17ab3	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

5,510

service-exampleservice-example-1

0.1.0

2 of 7 See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

9,109

serviceexampleserviceexample-chart

0.3.0

3 of 4 See more

serviceexample serviceexample-chart 0.3.0

3 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1
tibyandocker/serviceexample :latest	a4ad592cea84	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,042

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,309

service-exampleservice-example-jt

0.1.1

1 of 9 See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
janzo83/serviceexample :latest	fb3c4ac36f3e	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,208

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,070

my-nginx-appsherif-nginx-app

0.1.0

1 of 1 See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

shopwareshopware-store

2.1.2

1 of 5 See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
valkey/valkey :8	3fbd2e3e4b6e	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,098

pagesshrutiujlan-pages

1.0.0

2 of 3 See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,262

hedgedocsi-gitops

0.12.3

1 of 2 See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.4	3a82e1f56c8f	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,681

backendsignalen

4.24.0

1 of 4 See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.14	760256000738	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

11,719

postgresqlsignoz

0.0.2

1 of 1 See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :15	9b1d34adbce1	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,667

local-static-provisionersig-storage-local-static-provisioner

2.9.0

1 of 1 See more

local-static-provisioner sig-storage-local-static-provisioner 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,261

counter-dhlsikademo

0.3.0

3 of 3 See more

counter-dhl sikademo 0.3.0

3 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1
ondrejsika/counter :latest	d95eaeee2172	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,910

gordy-redissikademo

0.1.0

1 of 1 See more

gordy-redis sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

985

test-hello-worldsikademo

0.1.0

1 of 1 See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sikalabs/hello-world-server :latest	5f49bf889a64	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,196

hello-worldsikalabs

0.17.0

1 of 1 See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sikalabs/hello-world-server :latest	cf8538bf6489	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,196

hello-world-examplesikalabs

0.1.3

1 of 1 See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sikalabs/hello-world-server :latest	5f49bf889a64	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,196

kubernetes-dashboard-gatewaysikalabs

0.1.0

1 of 1 See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

wordpress-mysqlsikalabs

0.1.2

1 of 2 See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,919

simple-websimple-web

1.1.1

1 of 1 See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

bitwardensinextra

0.10.2

1 of 1 See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.37.2	094b5689ed81	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,766

clickhouse-keepersinextra

0.7.2

1 of 1 See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.12.6	a65ca89ddbe8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,229

fluentdsinextra

1.4.5

1 of 1 See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/fluentd :1.19.3	3273d13f1e75	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,115

infisicalsinextra

0.6.0

1 of 1 See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
infisical/infisical :v0.165.6	02082bf13163	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,055

mongosqldsinextra

0.3.7

1 of 1 See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8

Open the chart page →

2,609

mongosyncsinextra

0.4.0

1 of 1 See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,867

pgbouncersinextra

0.17.0

1 of 1 See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,950

service-commonsinextra

0.3.16

1 of 1 See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/haproxy :2.8.28	8baa7d29a27a	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

853

sistas-chatbotsistas-chatbot

5.0.2

1 of 6 See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jhipster/jhipster-registry :latest	7184525acd4d	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3

Open the chart page →

5,908

mariadbsitepilot

1.0.3

1 of 1 See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :10.6	92e50059ea0a	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8

Open the chart page →

2,872

yopasssky-sail

1.3.1

1 of 2 See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/memcached :1.6.40	9ae868852d0b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,040

envoyslamdev

0.0.17

1 of 2 See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.18.2	e8b37c1d7578	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

4,716

gitlab-runnerslamdev

0.0.1

1 of 1 See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

9,256

slothsloth

0.16.0

1 of 2 See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,988

oi-slurm-cluster-chartslurm-cluster-chart

0.25.1

1 of 4 See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :10.10	334b315c10e5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

4,386

slurm-cluster-chartslurm-cluster-chart

0.25.0

1 of 4 See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :10.10	334b315c10e5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

4,386

amt-configuresmarthall

0.1.1

1 of 1 See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
boxcutter/meshcmd :1.1.3	84e13f01bcab	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

2,769

mealiesmarthall

0.0.10

1 of 1 See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,592

aafsmo-helm-chart

6.0.0

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

25,874

aaismo-helm-chart

6.0.0

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

25,908

dgbuildersmo-helm-chart

6.0.0

1 of 3 See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3

Open the chart page →

28,576

dmaap-listenersmo-helm-chart

6.0.0

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

25,874

Container images carrying it

2,368 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
jakowenko/double-take :1.6.0	b858bac9e32a	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
janzo83/serviceexample :latest	fb3c4ac36f3e	perl@5.36.0-7+deb12u3	no fix listed	1
jbtronics/part-db1 :latest	5db71f6db59d	perl@5.36.0-7+deb12u3	no fix listed	1
jedi132000/nextapp :latest	dc2a81e92f23	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
jellyfin/jellyfin :10.11.8	1694ff069f0c	perl@5.40.1-6	5.40.1-6+deb13u1	1
jellyfin/jellyfin :10.11.7	17285f9cce63	perl@5.40.1-6	5.40.1-6+deb13u1	1
jellyfin/jellyfin :10.10.3	17c3a8d9dddb	perl@5.36.0-7+deb12u1	no fix listed	1
jellyfin/jellyfin :10.11.6	333b64771663	perl@5.40.1-6	5.40.1-6+deb13u1	1
jellyfin/jellyfin :10.9.10	79fb3d73a3e9	perl@5.36.0-7+deb12u1	no fix listed	1
jellyfin/jellyfin :10.10.7	7ae36aab93ef	perl@5.36.0-7+deb12u1	no fix listed	1
jellyfin/jellyfin :10.10.6	96b09723b22f	perl@5.36.0-7+deb12u1	no fix listed	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	perl@5.36.0-7+deb12u1	no fix listed	1
jenkins/jenkins :2.440.3-jdk17	de4fea113221	perl@5.36.0-7+deb12u1	no fix listed	1
jertel/elastalert2 :2.31.0	3cbf63f9b7dc	perl@5.40.1-6	5.40.1-6+deb13u1	1
jhipster/jhipster-registry :latest	7184525acd4d	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	perl@5.36.0-7+deb12u1	no fix listed	1
jingking/geonetwork-hnap :4.2.8	43e74ab234e1	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
jjorozco20/flask-mysql-app :1.0.0	b5e44e3ba09c	perl@5.36.0-7+deb12u1	no fix listed	1
jmferrer/azure-devops-agent :latest	030f68ec6998	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
jodogne/orthanc-plugins :latest	6ff510aa29c2	perl@5.40.1-6	5.40.1-6+deb13u1	1
johly/airtrail :v3.11.1	9f702b91e0e7	perl@5.36.0-7+deb12u3	no fix listed	1
joplin/server :latest	3f7b852959aa	perl@5.36.0-7+deb12u3	no fix listed	1
jordan/icinga2 :latest	f75025fe8ea8	perl@5.36.0-7+deb12u3	no fix listed	1
josh5/unmanic :0.2.6	4d49c4816260	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
journeyapps/powersync-service :latest	bf46f66e5dcc	perl@5.40.1-6	5.40.1-6+deb13u1	1
jpgouin/openldap :2.6.9-fix	bfdd0088c776	perl@5.36.0-7+deb12u1	no fix listed	1
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	perl@5.36.0-7+deb12u1	no fix listed	1
jupyterhub/jupyterhub :5.4.6	3974ba945e65	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
kafkace/kafka :v3.7.1-63ba8d2	7adc206bf5a4	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
kafkakraft/kafka-connect :3.7.0	062d697db7e5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
kafkakraft/kafka-controller :3.7.0	f261ad288fce	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
kafkakraft/kafkakraft :3.7.0	2e4b593b878b	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
kayrosuno/kping :latest	f3bd44b29b0d	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
kennethreitz/httpbin :latest	599fe5e50731	perl@5.26.1-6ubuntu0.2	5.26.1-6ubuntu0.7+esm3	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
kimai/kimai2 :2.67.0	3084f1e5ecdc	perl@5.36.0-7+deb12u3	no fix listed	1
kinseii/wazuh-agent :4.14.1	7160eb143728	perl@5.36.0-7+deb12u1	no fix listed	1
kitware/cdash :v5.3.0	d7767d9b9da4	perl@5.40.1-6	5.40.1-6+deb13u1	1
kixote/typemill	4e9dff179519	perl@5.40.1-6	5.40.1-6+deb13u1	1
kixote/typemill	628f79a08cc7	perl@5.40.1-6	5.40.1-6+deb13u1	1
knspar/phronetis :0.1.46	09499d2dc91a	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
knspar/phronetis-operator :0.1.6	0c4f0543ee58	perl@5.36.0-7+deb12u1	no fix listed	1
kong/httpbin :latest	a6ac46531193	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
kong/kong :3.9.1	6addf50e6bd8	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
krontechnology/aapm-agent :1.8.4	1cc7d5be6529	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
krontechnology/aapm-agent :1.1.0	7feef7d2ab42	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
krontechnology/aapm-service :1.1.3	9dd602db8baa	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1