CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,395; of 17,797 indexed, latest versions
Container images: 2,368; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,395 of 17,797 indexed charts deploy, on 2,368 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,330
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,395 by stars

Chart

Latest

Affected images

Radar Score

routergroundcover

1.12.375

2 See more

router groundcover 1.12.375

2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	perl@5.40.1-6+e4	5.40.1-6+e15

Open the chart page →

—

librechat-exporterhajowieland

1.0.0

1 of 1 See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,308

rag-apihajowieland

1.0.0

1 of 1 See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite :latest	f9f34c8ed688	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,723

web-checkhajowieland

1.0.1

1 of 1 See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,434

hatchet-apihatchet

0.19.0

1 of 4 See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,707

hatchet-hahatchet

0.19.0

3 of 8 See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,447

hatchet-stackhatchet

0.19.0

3 of 8 See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,447

hawk-envoy-pluginhawk

0.1.0

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
kong/httpbin :latest	a6ac46531193	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

9,233

web-charthcpark-ktcloudlab

0.1.0

1 of 1 See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3

Open the chart page →

6,758

heliconehelicone

0.1.42

3 of 14 See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	perl@5.36.0-7	no fix listed

Open the chart page →

25,250

helixhelix

1.4.3

1 of 2 See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,696

test-apphellnet

0.1.1

1 of 1 See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

hello-worldhello-world-ppony

0.3.0

1 of 1 See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :1.25.4	9ff236ed47fe	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,880

7dtdhelm-7dtd

0.1.0

1 of 1 See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	perl@5.26.1-6ubuntu0.6	5.26.1-6ubuntu0.7+esm3

Open the chart page →

10,730

my_web1helm-chart-by-piyush

0.1.0

1 of 1 See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,715

pageshelm-chart-repos-camden

1.0.0

2 of 3 See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

20,262

esphomehelm-chart-roei

2025.3.0

1 of 1 See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
esphome/esphome :2025.3.0	def8b6e4f517	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

6,018

home-assistant-matter-hubhelm-chart-roei

3.0.2

1 of 1 See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
luligu/matterbridge :3.0.2	8f97884bebc2	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

3,835

iofoghelm-charts

0.1.1

1 of 3 See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
iofog/router :2.0.1	7260cf861479	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

24,205

nginx-charthelm-chart-sample-app

0.1.0

1 of 1 See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
rraahul/test :latest	bfe2c1183bc0	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8

Open the chart page →

4,609

kube-downscalerhelm-charts-nr

0.7.6

1 of 1 See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	perl@5.36.0-7	no fix listed

Open the chart page →

4,319

locusthelm-charts-nr

0.32.4

1 of 1 See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
locustio/locust :2.32.2	a0d4b88e42c1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,824

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,470

supersethelm-charts-nr

1.1.3

1 of 1 See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
apache/superset :latest	16b50bbef664	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,332

hello-world-charthelm-chart-test-hello-world

0.1.0

1 of 1 See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

mywebhelmchartwebapp

0.0.5

1 of 1 See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,715

my-apphelm-demo8564

0.2.7

1 of 2 See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

chart-bookhelm-deploy-book

0.1.0

1 of 3 See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
dannielkil/book-frontend :latest	937993927694	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,165

affinehelmforge

1.0.0

3 of 3 See more

affine helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1
pgvector/pgvector :0.8.6-pg16-bookworm	ccc6e83d6e35	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/toeverything/affine :0.27.4	b649f5ce2384	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,115

alfiohelmforge

1.2.12

1 of 3 See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,132

apachehelmforge

1.0.6

1 of 1 See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/httpd :2.4.68	979c38c2228d	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,715

appwritehelmforge

2.0.0

2 of 5 See more

appwrite helmforge 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
appwrite/new :1.1.96-self-hosted	af65a77db50e	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,717

archiveboxhelmforge

1.1.12

1 of 1 See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
archivebox/archivebox :0.7.4	1a5a37331091	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,666

automatischhelmforge

1.3.7

2 of 4 See more

automatisch helmforge 1.3.7

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,843

booklorehelmforge

2.0.1

1 of 3 See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.3	dd9b303aed4f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

2,343

castopodhelmforge

1.2.7

2 of 3 See more

castopod helmforge 1.2.7

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
castopod/castopod :1.15.5	4e4f0440520f	perl@5.40.1-6	5.40.1-6+deb13u1
library/mariadb :12.3.3	dd9b303aed4f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

9,524

changedetectionhelmforge

1.1.16

1 of 1 See more

changedetection helmforge 1.1.16

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.5	f69554198005	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,630

chiefonboardinghelmforge

1.1.15

2 of 3 See more

chiefonboarding helmforge 1.1.15

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
chiefonboarding/chiefonboarding :v2.5.0	d0964135ea82	perl@5.40.1-6	5.40.1-6+deb13u1
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,209

ckanhelmforge

1.3.8

4 of 6 See more

ckan helmforge 1.3.8

4 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ckan/ckan-base :2.12.0	87ecf3f27ad6	perl@5.36.0-7+deb12u3	no fix listed
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

10,064

countlyhelmforge

1.2.6

2 of 3 See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
library/mongo :8.3.8	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

18,967

dawarichhelmforge

1.0.1

2 of 4 See more

dawarich helmforge 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1
postgis/postgis :18-3.6	7e00e8c3539f	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

10,497

discount-bandithelmforge

2.0.8

1 of 3 See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

30,281

druidhelmforge

1.3.6

2 of 4 See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
library/zookeeper :3.9.5	f258365d4882	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8

Open the chart page →

8,660

drupalhelmforge

1.2.13

1 of 2 See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/drupal :11.4.6-php8.5-apache-bookworm	28f7931ecbcb	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,902

entehelmforge

1.0.2

2 of 4 See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1
ghcr.io/ente/web :5ab0c5b4c7a89c4e470ef6f793600da33cebf35d	3f4864eb7f11	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

4,283

fastmcp-serverhelmforge

1.7.4

1 of 1 See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
helmforge/fastmcp-server :0.11.2	fcb7017327d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

3,306

generichelmforge

3.1.5

1 of 1 See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :1.31.5	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

ghosthelmforge

1.2.7

1 of 3 See more

ghost helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/ghost :6.63.0	e05bc1169fb2	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,493

hoppscotchhelmforge

1.1.11

1 of 2 See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,094

Container images carrying it

2,368 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
theradius/loggia :0.4	63ba348546ec	perl@5.36.0-7+deb12u1	no fix listed	1
thesisrobot/bitcoind :v23.0	16b368e4d52c	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8	1
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	perl@5.40.1-6	5.40.1-6+deb13u1	1
thijsvanloef/palworld-server-docker :v2.5.0	b4ac9ee22483	perl@5.40.1-6	5.40.1-6+deb13u1	1
thingsboard/tbmq-integration-executor :2.4.0	b5a9c1addf80	perl@5.40.1-6	5.40.1-6+deb13u1	1
thingsboard/tbmq-node :2.4.0	70661025dba5	perl@5.40.1-6	5.40.1-6+deb13u1	1
thingsboard/tb-postgres :latest	2d17e4e36edc	perl@5.36.0-7+deb12u3	no fix listed	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8	1
thongngo3301/stakefish :latest	a341af5976e3	perl@5.36.0-7	no fix listed	1
tiago2/cap :2.1	59f5ae4e261e	perl@5.40.1-6	5.40.1-6+deb13u1	1
tianon/exim4 :latest	b489049cdbca	perl@5.40.1-6	5.40.1-6+deb13u1	1
tibyandocker/serviceexample :latest	a4ad592cea84	perl@5.36.0-7+deb12u3	no fix listed	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	1
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	perl@5.40.1-6	5.40.1-6+deb13u1	1
tock/gen-ai-orchestrator-server :25.10.7	abf7880e0449	perl@5.40.1-6	5.40.1-6+deb13u1	1
tombursch/kitchenowl-backend :v0.7.8	b48e4ab727cd	perl@5.40.1-6	5.40.1-6+deb13u1	1
tpdock/freeradius :2.2.9	3da600c95a49	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	1
treskon/portrait :DEV-latest	88e813f22347	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	perl@5.36.0-7+deb12u1	no fix listed	1
trinodb/trino :405	ee80ab5eeab2	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8	1
trueosiris/vrising :latest	9356f98ad561	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
tussanakorndev/kube-pod-alerts :1.0.5	216fdadadf9a	perl@5.40.1-6	5.40.1-6+deb13u1	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
typesense/typesense :0.25.1	035ccfbc3fd8	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	1
typesense/typesense :0.23.0	3accb727cbe2	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3	1
typesense/typesense :30.1	91604dc128e2	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
typesense/typesense :28.0.rc35	dea1b62b7b6e	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ubuntu/bind9 :9.16-20.04_beta	5ee73f44e5d0	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	1
ubuntu/squid :5.2-22.04_beta	723891b5bc74	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	perl@5.36.0-7+deb12u2	no fix listed	1
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
v3xl/kubesend :0.1.0	6f62ca96be82	perl@5.36.0-7+deb12u2	no fix listed	1
valkey/valkey :8.1.6	1f84517eca8e	perl@5.40.1-6	5.40.1-6+deb13u1	1
valkey/valkey :9.0.5	4c64dfeae602	perl@5.40.1-6	5.40.1-6+deb13u1	1
valkey/valkey :8.0.1	c5d4f082b76d	perl@5.36.0-7+deb12u1	no fix listed	1
vaultwarden/server :1.35.4	43498a94b22f	perl@5.40.1-6	5.40.1-6+deb13u1	1
vaultwarden/server :1.34.3	84fd8a47f58d	perl@5.36.0-7+deb12u2	no fix listed	1
vaultwarden/server :1.35.7	9a8eec71f4a5	perl@5.40.1-6	5.40.1-6+deb13u1	1
vcnngr/telegram-login :latest	1a849a997b6d	perl@5.36.0-7+deb12u2	no fix listed	1
vcnngr/telegram-rebot :latest	30f1f05e57a6	perl@5.36.0-7+deb12u2	no fix listed	1
veecode/devportal-admin-ui :0.4.30	c69fd286b489	perl@5.36.0-7+deb12u2	no fix listed	1
venturenox/redis :latest	83b471c193ba	perl@5.36.0-7+deb12u1	no fix listed	1
vexorian/dizquetv :1.4.3	7e2b99844a5c	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	perl@5.26.1-6ubuntu0.6	5.26.1-6ubuntu0.7+esm3	1
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	perl@0:1.28-420.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb	1