CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,395; of 17,797 indexed, latest versions
Container images: 2,368; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,395 of 17,797 indexed charts deploy, on 2,368 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,330
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,395 by stars

Chart

Latest

Affected images

Radar Score

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cfssl/cfssl :latest	c9018c2ddf0b	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

12,075

cronjobclouddrove

1.0.1

1 of 1 See more

cronjob clouddrove 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	2260313b31c8	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3

Open the chart page →

749

helmchartclouddrove

1.4.0

1 of 1 See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	perl@5.36.0-7+deb12u2	no fix listed
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

21,064

bitcoindcloudnativeapp

0.2.1

1 of 2 See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

5,068

daskcloudnativeapp

2.2.1

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

29,980

distributed-tensorflowcloudnativeapp

0.1.1

1 of 1 See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cheyang/distributed-tf :1.6.0	46cc34755493	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3

Open the chart page →

36,227

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3

Open the chart page →

27,523

guestbookcloudnativeapp

0.2.0

1 of 3 See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
resouer/redis-slave :v2	e2f198b49ba7	perl@5.18.2-2ubuntu1	5.18.2-2ubuntu1.7+esm8

Open the chart page →

36,934

hlf-couchdbcloudnativeapp

1.0.6

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

34,099

hlf-ordcloudnativeapp

1.2.5

1 of 1 See more

hlf-ord cloudnativeapp 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :1.3.0	6ee1abcfd840	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

5,363

hlf-peercloudnativeapp

1.2.6

1 of 1 See more

hlf-peer cloudnativeapp 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :1.3.0	6756c7c48234	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

5,363

mongodb-replicasetcloudnativeapp

3.9.4

1 of 3 See more

mongodb-replicaset cloudnativeapp 3.9.4

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/mongo :3.6	146c1fd999a6	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm3

Open the chart page →

4,382

postgresqlcloudnativeapp

5.0.0

1 of 2 See more

postgresql cloudnativeapp 5.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnami/minideb :latest	ab4d5b45116e	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

836

risk-advisorcloudnativeapp

2.0.4

1 of 1 See more

risk-advisor cloudnativeapp 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
pposkrobko/risk-advisor :v1.0.0	eaf260341dba	perl@5.22.1-9	5.22.1-9ubuntu0.9+esm3

Open the chart page →

5,043

rundeckcloudnativeapp

0.1.0

2 of 2 See more

rundeck cloudnativeapp 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1
rundeck/rundeck :3.0.16	b13e8059ad72	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

23,721

seleniumcloudnativeapp

1.0.8

1 of 1 See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

11,848

seqcloudnativeapp

1.0.0

1 of 1 See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
datalust/seq :5.0.832-pre	9c731bb207a6	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3

Open the chart page →

10,558

spark-history-servercloudnativeapp

1.0.0

1 of 3 See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
lightbend/curl :7.47.0	b0c9894ac8dd	perl@5.22.1-9ubuntu0.5	5.22.1-9ubuntu0.9+esm3

Open the chart page →

14,086

unificloudnativeapp

0.4.2

1 of 1 See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :5.10.19	c409924e2463	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3

Open the chart page →

22,525

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3

Open the chart page →

77,916

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	perl@0:1.28-422.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

25,515

developer-dashboardcloud-native-toolkit

1.4.1

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	perl@0:1.28-416.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-Thread-Queue@3.13-1.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.28-423.el8_10.1 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 0:3.14-457.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

25,811

robot-shopcloud-native-toolkit

1.1.1

1 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
robotshop/rs-mongodb :latest	119b545823cd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

29,646

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/console :console-on.v1.1.1	a4d32c2f68b3	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8

Open the chart page →

18,400

cloudlaunchcloudve

0.6.0

1 of 5 See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

12,521

cloudlaunch-servercloudve

0.2.0

2 of 5 See more

cloudlaunch-server cloudve 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnami/minideb :latest	ab4d5b45116e	perl@5.40.1-6	5.40.1-6+deb13u1
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

12,224

cloudlaunchservercloudve

0.6.0

1 of 4 See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

11,656

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/galaxyproject/galaxy-min :26.1.1	2c324c9789f5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

5,610

galaxy-depscloudve

1.1.1

1 of 7 See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

10,599

galaxykubemancloudve

2.10.1

1 of 7 See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3

Open the chart page →

16,155

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	perl@5.18.2-2ubuntu1.4	5.18.2-2ubuntu1.7+esm8
galaxy/galaxy-stable :v18.01	8e577a626dfd	perl@5.18.2-2ubuntu1.4	5.18.2-2ubuntu1.7+esm8

Open the chart page →

70,987

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cloudve/janis-terminal :latest	af56e77ca587	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

14,372

postgresqlcloudve

4.0.0

1 of 2 See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
bitnami/minideb :latest	835e5f8392c3	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

836

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

6,181

terminalmancloudve

0.3.4

1 of 1 See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
cloudve/ttyd :latest	d79c1c5881c0	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3

Open the chart page →

13,187

argo-cdcluster-deploy

0.3.2

1 of 3 See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3

Open the chart page →

3,759

authentikcluster-deploy

0.2.0

1 of 1 See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/goauthentik/server :2026.5.6	ed120caf710c	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

2,527

chowdacluster-deploy

0.2.0

1 of 1 See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/chowda :main	86ab9effd1a5	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,856

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	perl@5.36.0-7	no fix listed

Open the chart page →

8,093

pbcore-utilcluster-deploy

0.0.1

1 of 1 See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,214

clusterfactoryclusterfactory

0.2.0

1 of 5 See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

7,191

gitea-jenkinsclusterfactory

0.1.1

1 of 5 See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

6,980

clusterplexclusterplex

1.1.10

2 of 3 See more

clusterplex clusterplex 1.1.10

2 of the 3 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,950

web-chartcms-ktcloudlab

0.1.0

1 of 1 See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

appcnap

1.2.0

1 of 1 See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1

Open the chart page →

1,861

castlemockcnieg

2.0.1

1 of 1 See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
castlemock/castlemock :latest	b7f3f1527ba9	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

4,695

door-agentcno

3.0.15

1 of 15 See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.31.0	2bf7f042e396	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8

Open the chart page →

19,467

ms-emails-grpccodedesignplus-charts

0.0.24

1 of 1 See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
codedesignplus/ms-emails-grpc :latest	e336012bc781	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,736

ms-emails-restcodedesignplus-charts

0.0.24

1 of 1 See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-13221.

Container image	Digest	Package	Fixed in
codedesignplus/ms-emails-rest :latest	ac84661c605e	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,736

Container images carrying it

2,368 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/theduffman85/crowdsec-web-ui :2026.8.3	bfadbab9a72c	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/toeverything/affine :0.27.4	b649f5ce2384	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ghcr.io/trow-registry/trow :0.10.0	75b7d2dcdb91	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
ghcr.io/twigex/cospace :latest	e5ecfd607e42	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/unique-ag/ai/search-proxy :2026.38.0	aa6699b027bb	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	perl@5.40.1-7build1	5.40.1-7ubuntu0.3	1
ghcr.io/vinny1892/octantis :latest	45459c0910fc	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	perl@5.36.0-7+deb12u2	no fix listed	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	perl@5.36.0-7	no fix listed	1
ghcr.io/wearefrank/frank-gateway :1.0.0	5ccf797ccdf1	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/wekan/ferretdb :latest	6cb94aa01999	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/wgbh-mla/chowda :main	86ab9effd1a5	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	perl@5.36.0-7+deb12u2	no fix listed	1
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	perl@5.36.0-7	no fix listed	1
ghcr.io/wittdennis/calibre-web :1.1.1	aa7d5d5dd6be	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.5	282f840612d9	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	perl@5.36.0-7	no fix listed	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/wrenix/autopush-rs/autoconnect :1.84.2	85f93ced88b2	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wrenix/autopush-rs/autoendpoint :1.84.2	d95e9a124eed	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	perl@5.40.1-6	5.40.1-6+deb13u1	1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium :0.1.2	7bff29dcec72	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.2	ae9ae0925ff8	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm3	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	perl@5.26.1-6ubuntu0.7	5.26.1-6ubuntu0.7+esm3	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	1
mcr.microsoft.com/mssql/server :latest	4bab24f36c1e	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1