CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,382; of 17,792 indexed, latest versions
Container images: 2,349; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,382 of 17,792 indexed charts deploy, on 2,349 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,311
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,382 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,349 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
gotenberg/gotenberg :8.36.0	87c16b9f3642	perl@5.40.1-6	5.40.1-6+deb13u1	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	perl@5.40.1-6	5.40.1-6+deb13u1	2
gotson/komga :1.26.3	6c2a967bbe9a	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	2
gradiant/ueransim :3.2.6	015b30d5fa0f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	2
grafana/alloy :v1.8.1	7790f6f7fbd8	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	2
grafana/alloy :v1.12.2	f94b1c82957a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	2
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	perl@5.40.1-6	5.40.1-6+deb13u1	2
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	perl@5.40.1-6	5.40.1-6+deb13u1	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	perl@5.36.0-7	no fix listed	2
honestica/kube-iptables-tailer :master-91	a393242fb939	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
hookiesolutions/webhookie :latest	0629694246ba	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
ilum/api :6.7.3	624fd09528c8	perl@5.40.1-6	5.40.1-6+deb13u1	2
ilum/marquez :0.54.0	6e1d709d41f8	perl@5.36.0-7+deb12u3	no fix listed	2
infisical/infisical :latest :v0.165.6	02082bf13163	perl@5.40.1-6	5.40.1-6+deb13u1	2
interlayhq/interbtc :latest	a66d0e35e70f	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/examples-bookinfo-reviews-v1 :1.14.0	ee156b8aefd6	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/examples-bookinfo-reviews-v2 :1.14.0	eab80bcd2132	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/examples-bookinfo-reviews-v3 :1.14.0	1e37fca43550	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	2
istio/kubectl :1.5.10	dbb7726d1bf0	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	2
istio/proxyv2 :1.18.0	757d28c24100	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.8	2
istio/proxyv2 :1.10.3	a78b7a165744	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	perl@5.36.0-7	no fix listed	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	perl@5.40.1-6	5.40.1-6+deb13u1	2
kurento/kurento-media-server :latest	03c0d34d0828	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	2
langflowai/langflow :1.12.0 :latest	65796601f3fc	perl@0:5.74-512.2.el10_0	0:5.74-515.el10_2	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	perl@5.36.0-7+deb12u1	no fix listed	2
library/buildpack-deps :curl	04907bdd423b	perl@5.40.1-6	5.40.1-6+deb13u1	2
library/cassandra :3.11.6	5aa8400b4b3b	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	2
library/cassandra :4.1.3	7cbcec0086ac	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	2
library/debian :stable-slim	04634311a8d5	perl@5.40.1-6	5.40.1-6+deb13u1	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	2
library/elasticsearch :8.19.12	89729a95066a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	2
library/haproxy :3.2	de601ccc9a79	perl@5.40.1-6	5.40.1-6+deb13u1	2
library/influxdb :2.7	b8d940ca9376	perl@5.36.0-7+deb12u3	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.8	2
library/mariadb :10.10	334b315c10e5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	2
library/mariadb :11.4	611a2fcc5fa7	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	2
library/mariadb :10.6	92e50059ea0a	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	2
library/mariadb :11.3.2	e101f9db3191	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	2
library/mongo :8.0.20	098862b1339f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	2
library/mongo :5.0	41108d183e97	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	2
library/mongo :4.2.3	58b25d51baa1	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	2
library/mongo :7.0	b6421fd6d1c5	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	2