CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,409; of 17,790 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,409 of 17,790 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,352
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	39
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,409 by stars

Chart

Latest

Affected images

Radar Score

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
assistiot/location_processing :latest	e9bae124095f	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

10,127

openapiassist-iot-open-api-management

0.2.2

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

18,357

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/buildpack-deps :curl	04907bdd423b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

8,052

sdn-controllerassist-iot-sdn-controller

2.4.0

1 of 1 See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
assistiot/sdn_controller :2.4.0	ea254b6d8a31	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

7,985

sd-wanassist-iot-sd-wan

1.0.0

1 of 2 See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :4.2.21-bionic	9cb28f7291d9	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

5,371

smartorchestratorassist-iot-smart-orchestrator

4.0.0

4 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	perl@5.36.0-7	no fix listed
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

45,656

videoaugmentationassist-iot-video-augmentation

0.1.0

2 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

14,013

account-monitorastria

0.0.1

1 of 1 See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,952

astrotrekastria

0.0.2

2 of 4 See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

32,638

auctioneerastria

0.0.2

1 of 1 See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,201

evm-bridge-withdrawerastria

1.0.6

1 of 1 See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,177

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,010

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,010

flame-rollupastria

0.1.3

1 of 2 See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,710

graph-nodeastria

0.2.2

2 of 3 See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :latest	b0436347fb24	perl@5.36.0-7+deb12u1	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,547

hermesastria

0.7.1

1 of 1 See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

1,996

hyperlane-agentsastria

0.1.4

1 of 2 See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gcr.io/abacus-labs-dev/hyperlane-agent :10c0ab1-20231215-220639	f33e88324a40	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

2,540

sequencerastria

4.0.0

1 of 3 See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

6,335

sequencer-relayerastria

2.0.0

1 of 1 See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,952

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,429

auth0-operatorauth0-operator

1.4.12

1 of 1 See more

auth0-operator auth0-operator 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/alethic/auth0-operator-image :1.4.12	2468990a8521	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

738

autopushautopush

0.0.49

3 of 4 See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.2	c123e3715db6	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/wrenix/autopush-rs/autoconnect :1.84.2	85f93ced88b2	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint :1.84.2	d95e9a124eed	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,995

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8

Open the chart page →

6,958

webappavzi-webapp

0.1.0

1 of 1 See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
avzini/web-app :latest	f40b30210ed0	perl@5.36.0-7	no fix listed

Open the chart page →

6,321

nas-appsawesome

2.0.0

1 of 8 See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,176

aws9helmaws9helm

0.1.0

4 of 4 See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kuzwolka/aws9 :main	1ad759b961b1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :news	3e8880fbbb96	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :blog	4a7707410bf1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :shop	84a9d9766345	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

18,436

aws-web-service-proxifiedaws-web-service-proxified

1.8.0

1 of 2 See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,031

azp-agentazp-agent

1.2.0

1 of 1 See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cheveo/azp-agent :1.0.2	82240f890884	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

3,310

azure-voteazure-sample

0.1.1

1 of 2 See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,248

ragflowbaboulinet

0.1.1

2 of 5 See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
infiniflow/infinity :v0.7.0	992c87a68612	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
valkey/valkey :8	3fbd2e3e4b6e	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,894

backstage-pyactionsbackstage-pyactions

0.1.0

1 of 1 See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
mawad98/backstage-pyactions :demo	99422c56a274	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,760

basic-auth-s3-nginxbasic-auth-s3-nginx

1.0.0

1 of 1 See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	perl@5.36.0-7	no fix listed

Open the chart page →

6,321

bookinfobasictechno

0.1.0

3 of 6 See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

20,794

my-nginx-appbassant-nginx-app

0.1.0

1 of 1 See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

mealiebdclark-helm-charts

0.1.15

1 of 1 See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,059

wyoming-piperbdclark-helm-charts

0.1.4

1 of 1 See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-piper :2.5.2	7d39aafac409	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,202

pangolinbdcode

0.14.1

1 of 1 See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
fosrl/pangolin :latest	83a55f933b4d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,923

helm-samplebehnambm-helm-chart

1.0.1

1 of 3 See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :7	71da9275c5f3	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,750

pagesberrutig-pages

1.0.0

2 of 3 See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,242

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

7,246

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,117

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

8,029

mx-notifierbicarus-labs

1.1.9

1 of 1 See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bicarus/mx-notifier :1.1.8	bed688d16762	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

3,763

huebigdata-charts

1.0.4

1 of 2 See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
gethue/hue :4.10.0	5702b2c37ff9	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

22,929

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
baserow/backend :1.31.1	e0b3c8130b91	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,225

bdbablackduck

2026.6.3

5 of 9 See more

bdba blackduck 2026.6.3

5 of the 9 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
blackducksoftware/bdba-fluentd :2026.6.3	c14bbbf45536	perl@5.40.1-6	5.40.1-6+deb13u1
blackducksoftware/bdba-frontend :2026.6.3	b10eaea94fd3	perl@5.40.1-6	5.40.1-6+deb13u1
library/memcached :1.6.42-trixie	e2a8683c7fbb	perl@5.40.1-6	5.40.1-6+deb13u1
library/postgres :15.18-bookworm	e8db9bd3e9e1	perl@5.36.0-7+deb12u3	no fix listed
library/rabbitmq :4.2.8	7561d672fae4	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

9,667

firehoseblip-firehose

0.0.18

1 of 11 See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

13,517

bluespacebluespace

0.3.0

1 of 1 See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,849

bnkrbnkr

1.0.5

1 of 2 See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
engrmth/bnkr :2.1.0	6d8464e6f0e8	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

15,302

istio-bookinfobookinfo

1.2.2

3 of 6 See more

istio-bookinfo bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

19,006

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
nethermind/nethermind :1.31.8	93e57917371a	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
nethermind/nethermind :1.31.9	aeca3b55bda5	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
netrisai/bare-metal-dpu-agent :4.7.0.003	c271efe749d0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
netrisai/controller-grpc :4.6.0.007	53178bf173c2	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
netrisai/controller-telescope :4.6.0.004	14d82948a8b2	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
netrisai/controller-telescope-notifier :3.0.4	55e826ef9a5d	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
netrisai/controller-web-session-generator :0.2.0	a030a31289f4	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	1
networkboot/dhcpd :latest	e99bbfbd6fb2	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8	1
networkstatic/iperf3 :latest	0592f012c636	perl@5.40.1-6	5.40.1-6+deb13u1	1
networktocode/nautobot :3.0-py3.13	ed484336b1ad	perl@5.40.1-6	5.40.1-6+deb13u1	1
newrelic/newrelic-agent-control-cli :0.48.0	1a448492b55a	perl@5.40.1-6	5.40.1-6+deb13u1	1
newrelic/newrelic-agent-control-cli :1.24.0	47520b65d6b2	perl@5.40.1-6	5.40.1-6+deb13u1	1
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3	1
nginxinc/nginx-unprivileged :latest	4210a3296e7c	perl@5.40.1-6	5.40.1-6+deb13u1	1
nginxinc/nginx-unprivileged :1.29.5	c5b989ebc150	perl@5.40.1-6	5.40.1-6+deb13u1	1
nginx/nginx-ingress :edge	520d439f9a9a	perl@5.40.1-6	5.40.1-6+deb13u1	1
nirmalnaveen/supermario :latest	8541a39162f3	perl@5.36.0-7	no fix listed	1
nouchka/sqlite3 :latest	d183308f201c	perl@5.40.1-6	5.40.1-6+deb13u1	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	perl@5.40.1-6	5.40.1-6+deb13u1	1
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
nvidia/k8s-device-plugin :v0.9.0	964847cc3fd8	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3	1
obolnetwork/helios :e10e753	cb7e97d39d46	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	perl@5.36.0-7+deb12u3	no fix listed	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	perl@5.36.0-7+deb12u1	no fix listed	1
oled01/automx2 :2025.1.1	05d3e398e675	perl@5.36.0-7+deb12u2	no fix listed	1
oled01/db-backup :0.1.0	6302fd2b5333	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
olvid/bot-daemon :2.0.1	e0e6b165d879	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
omecproject/c3po-hss :master-latest	638671ef4842	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
omecproject/ngic-cp :central-cp-multi-upfs-latest	24a389a0a4fe	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
omecproject/onos-progran :1.0.0	5715e5648aa0	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	1
omecproject/openmme :master-latest	64776cb9edb3	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
omkara25/simple-microservice-app-order-service :v2.1	8327546c7aac	perl@5.36.0-7+deb12u2	no fix listed	1
omkara25/simple-microservice-app-payment-service :v2	afff40172b6b	perl@5.36.0-7+deb12u2	no fix listed	1
omkara25/simple-microservice-app-user-service :v2	d62cba548580	perl@5.36.0-7+deb12u2	no fix listed	1
ondrejsika/counter :latest	d95eaeee2172	perl@5.40.1-6	5.40.1-6+deb13u1	1
oneuptime/probe :release	1069c9458fe7	perl@5.36.0-7+deb12u3	no fix listed	1
onosproject/onos :2.2.1	44914a8d4b3f	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm3	1
opea/asr :1.0	25dd26d9cd09	perl@5.36.0-7+deb12u1	no fix listed	1
opea/chatqna :1.0	38c51b791efa	perl@5.36.0-7+deb12u1	no fix listed	1
opea/codegen :1.0	58f91683892d	perl@5.36.0-7+deb12u1	no fix listed	1
opea/codegen-ui :1.0	2bee4eb66f3e	perl@5.36.0-7+deb12u1	no fix listed	1
opea/codetrans :1.0	e2436483b73d	perl@5.36.0-7+deb12u1	no fix listed	1