StackRadar

CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,398
of 17,803 indexed, latest versions
Container images
2,370
deployed by those charts
Fix available
41 of 41
affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,398 of 17,803 indexed charts deploy, on 2,370 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more2,332
perlrpm0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more38
perl-Carprpm1.42-396.el80:1.50-439.module+el8.10.0+21354+3ad137bb16
perl-constantrpm1.33-396.el80:1.33-1001.module+el8.10.0+21354+3ad137bb16
perl-Exporterrpm5.72-396.el80:5.74-458.module+el8.10.0+21354+3ad137bb16
perl-File-Pathrpm2.15-2.el80:2.16-439.module+el8.10.0+21354+3ad137bb16
perl-parentrpm1:0.237-1.el81:0.238-457.module+el8.10.0+21354+3ad137bb16
perl-PathToolsrpm3.74-1.el80:3.78-439.module+el8.10.0+21354+3ad137bb16
perl-Scalar-List-Utilsrpm3:1.49-2.el84:1.55-457.module+el8.10.0+21354+3ad137bb16
perl-Socketrpm4:2.027-3.el84:2.031-1.module+el8.10.0+21354+3ad137bb16
perl-Text-Tabs+Wraprpm2013.0523-395.el80:2013.0523-396.module+el8.10.0+21354+3ad137bb16
perl-threadsrpm1:2.21-2.el81:2.25-457.module+el8.10.0+21354+3ad137bb16
perl-threads-sharedrpm1.58-2.el80:1.61-457.module+el8.10.0+21354+3ad137bb16
perl-Unicode-Normalizerpm1.25-396.el80:1.27-458.module+el8.10.0+21354+3ad137bb16
perl-Encoderpm4:2.97-3.el84:3.08-461.module+el8.10.0+21354+3ad137bb15
perl-File-Temprpm0.230.600-1.el81:0.231.100-1.module+el8.10.0+21354+3ad137bb15
perl-Getopt-Longrpm1:2.50-4.el81:2.52-1.module+el8.10.0+21354+3ad137bb15
perl-HTTP-Tinyrpm0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more0:0.078-1.module+el8.10.0+21354+3ad137bb15
perl-MIME-Base64rpm3.15-396.el80:3.15-1001.module+el8.10.0+21354+3ad137bb15
perl-Pod-Escapesrpm1:1.07-395.el81:1.07-396.module+el8.10.0+21354+3ad137bb15
perl-podlatorsrpm4.11-1.el81:4.14-457.module+el8.10.0+21354+3ad137bb15
perl-Pod-Perldocrpm3.28-396.el80:3.28.01-443.module+el8.10.0+21354+3ad137bb15
perl-Pod-Simplerpm1:3.35-395.el81:3.42-1.module+el8.10.0+21354+3ad137bb15
perl-Pod-Usagerpm4:1.69-395.el84:2.01-1.module+el8.10.0+21354+3ad137bb15
perl-Storablerpm1:3.11-3.el81:3.21-457.module+el8.10.0+21354+3ad137bb15
perl-Term-ANSIColorrpm4.06-396.el80:5.01-458.module+el8.10.0+21354+3ad137bb15
perl-Term-Caprpm1.17-395.el80:1.17-396.module+el8.10.0+21354+3ad137bb15
perl-Text-ParseWordsrpm3.30-395.el80:3.30-396.module+el8.10.0+21354+3ad137bb15
perl-Time-Localrpm1:1.280-1.el82:1.300-4.module+el8.10.0+21354+3ad137bb15
perl-Data-Dumperrpm2.167-399.el80:2.174-440.module+el8.10.0+21354+3ad137bb14
perl-Digestrpm1.17-395.el80:1.20-1.module+el8.10.0+21354+3ad137bb13
perl-Digest-MD5rpm2.55-396.el80:2.58-1.module+el8.10.0+21354+3ad137bb13
perl-IO-Socket-IPrpm0.39-5.el80:0.41-2.module+el8.10.0+21354+3ad137bb13
perl-libnetrpm3.11-3.el80:3.13-1.module+el8.10.0+21354+3ad137bb13
perl-URIrpm1.73-3.el80:1.76-5.module+el8.10.0+21354+3ad137bb13
perl-Thread-Queuerpm3.13-1.el80:3.14-457.module+el8.10.0+21354+3ad137bb2
perl-Compress-Raw-Bzip2rpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
perl-Compress-Raw-Zlibrpm2.081-1.el80:2.096-2.module+el8.10.0+21354+3ad137bb1
perl-Digest-SHArpm1:6.02-1.el81:6.02-2.module+el8.10.0+21354+3ad137bb1
perl-Encode-Localerpm1.05-10.module+el8.3.0+6498+9eecfe510:1.05-10.module+el8.10.0+21354+3ad137bb1
perl-IO-Compressrpm2.081-1.el80:2.096-2.module+el8.10.0+24402+ce90c7a01
OSV records
DEBIAN-CVE-2026-13221UBUNTU-CVE-2026-13221RHSA-2026:67155RHSA-2026:67156RHSA-2026:67162RHSA-2026:67278RLSA-2026:67155ECHO-6100-7255-ee29
Also known as
USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,398 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container imageDigestPackageFixed inUsed by
library/python:3.1070c9cc675605
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/python:3.11-slim9534e5a8e315
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/python:3.8d41127070014
perl@5.36.0-7+deb12u1
no fix listed
1
library/python:3.9da5aee29682d
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/rabbitmq:3.12.100742852455ad
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.8
1
library/rabbitmq:3.11.5-management1b0f675d2f24
perl@5.30.0-9ubuntu0.3
5.30.0-9ubuntu0.5+esm3
1
library/rabbitmq:4.2.87561d672fae4
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
library/rabbitmq:3.7-managementb6dd45cc35b3
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.7+esm3
1
library/rabbitmq:4.3.4-managementeb5295d08332
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
library/redis:8.6.2009cc37796fb
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/redis:8.8.0234c902a2db4
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/redis:8.4.03906b477e4b6
perl@5.36.0-7+deb12u3
no fix listed
1
library/redis:8.8.1-trixie3eafabb4c93f
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/redis:8.2.24521b581dbdd
perl@5.36.0-7+deb12u3
no fix listed
1
library/redis:8.6.34d25e2fe601f
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/redis:8.2.15fa2edb1e408
perl@5.36.0-7+deb12u3
no fix listed
1
library/redis83edc2b8e9ff
perl@5.36.0-7+deb12u3
no fix listed
1
library/redis:8.48df317692c59
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/redis:8.0.2b43d2dcbbdb1
perl@5.36.0-7+deb12u2
no fix listed
1
library/redis:7.4.1bb142a9c18ac
perl@5.36.0-7+deb12u1
no fix listed
1
library/redis:8.0.3be0a135f1955
perl@5.36.0-7+deb12u3
no fix listed
1
library/redis:8.2.3d31852005202
perl@5.36.0-7+deb12u3
no fix listed
1
library/redmine:6.1.204ac44a2595b
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/sonarqube:10.7.0-community0842dcd4c8f8
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.8
1
library/sonarqube:10.0.0-communityef9723cf4fe4
perl@5.34.0-3ubuntu1.2
5.34.0-3ubuntu1.8
1
library/telegraf:1.27507a3eecf809
perl@5.36.0-7+deb12u1
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
library/ubuntu:bionic152dc042452c
perl@5.26.1-6ubuntu0.7
5.26.1-6ubuntu0.7+esm3
1
library/ubuntu:22.042edbbc5dc405
perl@5.34.0-3ubuntu1.7
5.34.0-3ubuntu1.8
1
library/varnish:7.5.04d0bb287d87b
perl@5.36.0-7+deb12u1
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
perl@5.36.0-7+deb12u1
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/wordpress:php8.1-apachef73396626d2f
perl@5.40.1-6
5.40.1-6+deb13u1
1
library/xwiki:lts-postgres-tomcat56490ac14a31
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
library/zookeeper:3.8-temurin55d1e5b2e601
perl@5.34.0-3ubuntu1.2
5.34.0-3ubuntu1.8
1
library/zookeeper:3.9.4dfa9ba46d14b
perl@5.34.0-3ubuntu1.5
5.34.0-3ubuntu1.8
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
perl@5.36.0-7+deb12u3
no fix listed
1
lightbend/curl:7.47.0b0c9894ac8dd
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9+esm3
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1
linuxserver/calibre-web:0.6.24241009026e6f
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
perl@5.30.0-9ubuntu0.2
5.30.0-9ubuntu0.5+esm3
1
linuxserver/cloud9:latest45c5fe102ff3
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1
linuxserver/code-server:4.10.1a5e43a05ae79
perl@5.34.0-3ubuntu1.1
5.34.0-3ubuntu1.8
1
linuxserver/codimd:latestb801bbcf6386
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1
linuxserver/deluge:18.04.10ac871624394
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1
linuxserver/foldingathome:8.5.67477f6455f47
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
linuxserver/foldingathome:7.6.219a997426d71e
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4
1
linuxserver/jellyfin:10.7.72427dde159a2
perl@5.30.0-9ubuntu0.2
5.30.0-9ubuntu0.5+esm3
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
perl@5.26.1-6ubuntu0.5
5.26.1-6ubuntu0.7+esm3
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.