CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,398; of 17,803 indexed, latest versions
Container images: 2,370; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,398 of 17,803 indexed charts deploy, on 2,370 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,332
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,398 by stars

Chart

Latest

Affected images

Radar Score

joplintobiassackmann

0.1.7

2 of 2 See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
joplin/server :latest	3f7b852959aa	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,650

todoapitodoapi-app

0.1.0

1 of 2 See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	perl@5.26.1-6ubuntu0.7	5.26.1-6ubuntu0.7+esm3

Open the chart page →

6,861

todolist-charttodolist-chart

0.1.7

1 of 10 See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
erenozcan17/flask_analytics :v3.1	c9b6f0dfbffc	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,076

test0tohlejezkouska

0.1.0

1 of 2 See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,348

netbirdtotmicro

1.8.2

1 of 4 See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
netbirdio/management :0.60.2	52682e5f48f9	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

6,064

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb

Open the chart page →

12,726

traefik-external-dns-controllertraefik-external-dns-operator

2.2.0

1 of 1 See more

traefik-external-dns-controller traefik-external-dns-operator 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ybucci/traefik-external-dns-controller :2.2.0	8d27ad8b5f73	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,525

apptreenity

0.1.53

1 of 2 See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,854

treenitytreenity

0.1.3

1 of 4 See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,402

orchestra-login-portaltremolo

2.3.98

1 of 1 See more

orchestra-login-portal tremolo 2.3.98

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8

Open the chart page →

3,019

saleor-appstrieb-work

0.6.0

1 of 5 See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :8.2.2	f0957bcaa75f	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,487

trowtrow

0.13.0

1 of 1 See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/trow-registry/trow :0.10.0	75b7d2dcdb91	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,317

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

17,427

altinnendata-apptumogroup

0.1.17

1 of 1 See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/altinnendata-app :v1.9.1	c2707839d8a3	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

1,883

bobby-apitumogroup

1.0.1

1 of 1 See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/bobby-api :latest	fe534731909a	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,343

nstuning-apptumogroup

0.1.18

1 of 1 See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
sondresjo/nstuning-app :v1.6.11	3a6795bf36da	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

1,883

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

5,634

simple-mongodbtyk-helm

0.1.1

1 of 1 See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3

Open the chart page →

4,139

umbrella-chartumbrella-chart

0.1.1

3 of 5 See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hassroutyyoussef/accountservice :latest	1f01edf1ee0c	perl@5.36.0-7+deb12u1	no fix listed
hassroutyyoussef/orderservice :latest	2fc3d1617928	perl@5.36.0-7+deb12u1	no fix listed
hassroutyyoussef/userservice :latest	e0392e2b4a90	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

7,590

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

8,694

applicationuniversal-helm-chart

0.4.3

1 of 1 See more

application universal-helm-chart 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,879

kenerunxwares

2026.2.5

1 of 1 See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,282

opencloudunxwares

0.2.3

7 of 13 See more

opencloud unxwares 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	perl@5.36.0-7+deb12u1	no fix listed
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	perl@5.36.0-7+deb12u1	no fix listed
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	perl@5.36.0-7+deb12u1	no fix listed
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	perl@5.36.0-7+deb12u1	no fix listed
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	perl@5.36.0-7+deb12u1	no fix listed
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

45,468

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

15,488

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	perl@5.36.0-7	no fix listed

Open the chart page →

14,468

telegram-rebotvcnngr

1.0.0

2 of 3 See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
vcnngr/telegram-login :latest	1a849a997b6d	perl@5.36.0-7+deb12u2	no fix listed
vcnngr/telegram-rebot :latest	30f1f05e57a6	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

5,112

scrutinyvhdirk

0.1.3

1 of 1 See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,434

tdarrvhdirk

5.0.5

2 of 2 See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm3
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

150,073

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

72,549

maybe-financevicsufer

0.2.7

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,859

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,342

bugsinkvictorlane

0.3.7

2 of 2 See more

bugsink victorlane 0.3.7

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bugsink/bugsink :2	ecdd84587746	perl@5.40.1-6	5.40.1-6+deb13u1
library/mariadb :12.0-noble	607835cd628b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,169

twenty-crmvictorlane

0.0.1

2 of 3 See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :latest	798ab84d9f26	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

64,741

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,261

video-dl-botvideo-dl-bot

1.4.3

1 of 1 See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,015

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3

Open the chart page →

7,896

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

7,741

argus-test-envvk-helm-charts

2.0.0

1 of 1 See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,879

ciliumvks-helm-charts

1.17.14

2 of 3 See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,183

postgresappvoting-app-helm-charts-repo

1.0.0

1 of 1 See more

postgresapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,686

redisappvoting-app-helm-charts-repo

1.0.0

1 of 1 See more

redisapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,004

voteappvoting-app-helm-charts-repo

1.0.0

2 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

8,374

postgresappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 1 See more

postgresapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,686

redisappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 1 See more

redisapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,004

voteappvoting-app-helm-charts-repo-cloud

1.0.0

2 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

8,374

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,049

api-gatewaywallarm

0.2.0

1 of 1 See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wallarm/api-gateway :0.2.0	a3d4d2f780e8	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,334

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

70,298

wallarm-gatewaywallarm

0.4.0

1 of 1 See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
wallarm/gateway-controller :0.4.0	9c6ed23e2f0e	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,059

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,261

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3	1
razorbladex401/dayz :latest	6a4d79248e7d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
readysettech/sqp :latest	588f3507280e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
readysettech/sqp-duckdb :latest	67a83203ce60	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
reallibrephotos/librephotos-proxy :1.0.3	98a13dabbadc	perl@5.40.1-6	5.40.1-6+deb13u1	1
redash/redash :25.8.0	00d813437db5	perl@5.36.0-7+deb12u2	no fix listed	1
redash/redash :26.3.0	c5c9148f5c38	perl@5.36.0-7+deb12u3	no fix listed	1
redimp/otterwiki :2	778bf30da3da	perl@5.36.0-7+deb12u3	no fix listed	1
redis/redis-stack-server :6.2.6-v2	51a58f32d412	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
redis/redis-stack-server :latest	798ab84d9f26	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
redis/redis-stack-server :7.4.0-v0	887cf87cc744	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
redpandadata/redpanda :latest	468bd13a9f2b	perl@5.40.1-6	5.40.1-6+deb13u1	1
resouer/redis-slave :v2	e2f198b49ba7	perl@5.18.2-2ubuntu1	5.18.2-2ubuntu1.7+esm8	1
resurfaceio/resurface :3.7.84	d5cda2f64109	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
rezachalak/bzen-mongo :1.0.0	34f694325191	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm3	1
rhasspy/wyoming-piper :2.3.1	69b7f797ae3a	perl@5.36.0-7+deb12u3	no fix listed	1
rhasspy/wyoming-piper :2.5.2	7d39aafac409	perl@5.40.1-6	5.40.1-6+deb13u1	1
rhasspy/wyoming-speech-to-phrase :1.4.3	e532f0dbc6b2	perl@5.36.0-7+deb12u3	no fix listed	1
rhasspy/wyoming-whisper :3.5.0	308b7959a925	perl@5.36.0-7+deb12u3	no fix listed	1
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
rnwood/smtp4dev :3.6.1	912304153668	perl@5.36.0-7+deb12u1	no fix listed	1
robotshop/rs-mongodb :latest	119b545823cd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
rocketadmin/rocketadmin :1.17.7	10955ef540b9	perl@5.36.0-7+deb12u3	no fix listed	1
rocketchat/freeswitch :stable	cfba5c20a5cc	perl@5.36.0-7+deb12u2	no fix listed	1
rotationalio/endeavor :1.3.0	ac566baddc06	perl@5.36.0-7+deb12u3	no fix listed	1
rotationalio/genoa :1.2.0	3ab583519215	perl@5.36.0-7+deb12u3	no fix listed	1
rotationalio/honu :0.5.0	69fd30c2e31c	perl@5.36.0-7+deb12u3	no fix listed	1
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	perl@5.40.1-6	5.40.1-6+deb13u1	1
rraahul/test :latest	bfe2c1183bc0	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
rrobetti/ojp :0.1.0-beta	1141bd88232b	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
rspamd/rspamd :4.1.4	e870599c970d	perl@5.40.1-6	5.40.1-6+deb13u1	1
rstmdb/rstmdb :latest	e5187f2aaace	perl@5.36.0-7+deb12u3	no fix listed	1
rtuszik/photon-docker :2.4.0	21549c60f9e6	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
rundeck/rundeck :3.2.7	4d64fe56f767	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
rundeck/rundeck :3.0.16	b13e8059ad72	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	1
ryshe/terraria :latest	b1c89f7f359a	perl@5.36.0-7+deb12u3	no fix listed	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ryuunosukeds3/orbital :latest	0879f7261b10	perl@5.36.0-7+deb12u2	no fix listed	1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3	ce9ce8293e4e	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9	bb64bf14467d	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525	799c35f9f306	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
santisbon/evwatcher :latest	c4e994ca4540	perl@5.36.0-7	no fix listed	1
santisbon/evworker :latest	e807283f8d69	perl@5.36.0-7	no fix listed	1
santisbon/speedtest :latest	8ee3a1697227	perl@5.36.0-7	no fix listed	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	perl@5.36.0-7+deb12u1	no fix listed	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	perl@5.36.0-7	no fix listed	1
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1