CVE-2026-13221

Critical

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,382; of 17,792 indexed, latest versions
Container images: 2,349; deployed by those charts
Fix available: 41 of 41; affected packages

Red Hat Security Advisory: perl security update

Carried by container images the latest versions of 2,382 of 17,792 indexed charts deploy, on 2,349 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more	5.18.2-2ubuntu1.7+esm8, 5.22.1-9ubuntu0.9+esm3, 5.26.1-6ubuntu0.7+esm3, 5.30.0-9ubuntu0.5+esm3+5 more	2,311
perlrpm	0:1.01-481.1.el9_6, 0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1+12 more	0:1.01-484.el9_8, 0:1.28-423.el8_10.1, 0:5.74-475.module+el8.10.0+24767+f69b15b5, 0:5.74-484.el9_8+2 more	38
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-13221 UBUNTU-CVE-2026-13221 RHSA-2026:67155 RHSA-2026:67156 RHSA-2026:67162 RHSA-2026:67278 RLSA-2026:67155 ECHO-6100-7255-ee29
Also known as: USN-8675-1, USN-8675-2, USN-8684-1

Charts affected

2,382 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,349 by charts deploying them

A fixed version is listed for 41 of the 41 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.31 :1.31.5 :latest :trixie	05b8cb60c354	perl@5.40.1-6	5.40.1-6+deb13u1	105
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	79
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm3	79
library/postgres :18 :18.6 :18.6-trixie :latest	4ef4dbc939d6	perl@5.40.1-6	5.40.1-6+deb13u1	69
library/redis :8.10.1 :latest	298e5b3bc566	perl@5.40.1-6	5.40.1-6+deb13u1	40
library/nginx :stable	d5792f71a949	perl@5.40.1-6	5.40.1-6+deb13u1	23
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	perl@5.26.1-6ubuntu0.6	5.26.1-6ubuntu0.7+esm3	13
jenkins/jenkins :2.568.3-jdk21 :2.568.3-lts-jdk21 :lts	c1e4c349365f	perl@5.40.1-6	5.40.1-6+deb13u1	13
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	5.40.1-6+deb13u1	12
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed	11
library/mariadb :12.3.3 :latest :lts	dd9b303aed4f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	11
library/mongo :8 :8.3.8 :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	11
oomk8s/readiness-check :2.0.2	875814cc853d	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm3	11
library/mongo :5.0.6-focal	8e70544b6c76	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	10
library/postgres :17	67f41722b7a8	perl@5.40.1-6	5.40.1-6+deb13u1	10
library/rabbitmq :3.9-management	8a279e9396a8	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8	10
library/rabbitmq :3.13-management :3-management	e582c0bc7766	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	8
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	perl@5.40.1-6	5.40.1-6+deb13u1	7
library/kong :3.6	a42d2b4503e7	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.8	7
library/phpmyadmin :5.2.3-apache :latest	3a8a8d6b5289	perl@5.40.1-6	5.40.1-6+deb13u1	7
library/postgres :14	156f0b253fd6	perl@5.40.1-6	5.40.1-6+deb13u1	7
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	perl@5.36.0-7+deb12u3	no fix listed	7
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	perl@5.40.1-6	5.40.1-6+deb13u1	7
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	perl@5.36.0-7+deb12u2	no fix listed	6
bitnamilegacy/rabbitmq :4.1.3 :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	no fix listed	6
library/mariadb :10 :10.11	ce66c7be32a0	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8	6
library/postgres :15	9b1d34adbce1	perl@5.40.1-6	5.40.1-6+deb13u1	6
library/postgres :18.4	a02db8cac496	perl@5.40.1-6	5.40.1-6+deb13u1	6
library/redis :6 :6.2	143f7bfc2358	perl@5.36.0-7+deb12u3	no fix listed	6
library/ubuntu :latest	2260313b31c8	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3	6
library/wordpress :7.1.0-apache :latest	5a93c470ae82	perl@5.40.1-6	5.40.1-6+deb13u1	6
oomk8s/readiness-check :2.0.0	7daa08b81954	perl@5.22.1-9ubuntu0.2	5.22.1-9ubuntu0.9+esm3	6
valkey/valkey :9.1.2 :latest	c123e3715db6	perl@5.40.1-6	5.40.1-6+deb13u1	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	perl@5.36.0-7	no fix listed	6
quay.io/devtron/postgres :14.9	1b594392f7cb	perl@5.36.0-7	no fix listed	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed	5
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	perl@5.36.0-7+deb12u3	no fix listed	5
library/httpd :2.4 :2.4.68 :latest	979c38c2228d	perl@5.40.1-6	5.40.1-6+deb13u1	5
library/kong :3.9 :latest	2a8cf3b110cd	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	5
library/memcached :1.6 :1.6.45	75c93cc91e76	perl@5.40.1-6	5.40.1-6+deb13u1	5
library/mongo :4.4	4be76f674fc4	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3	5
library/postgres :12	2f2a8c2a7d10	perl@5.36.0-7+deb12u1	no fix listed	5
library/redis :7 :7.4 :7.4.11	71da9275c5f3	perl@5.36.0-7+deb12u3	no fix listed	5
library/redis :7.2 :7.2-bookworm	74566c6910d1	perl@5.36.0-7+deb12u3	no fix listed	5
solsson/kafka :latest	41e5d8f6f290	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3	5
valkey/valkey :9.1.1 :9.1.1-trixie	64e361b630ec	perl@5.40.1-6	5.40.1-6+deb13u1	5
vaultwarden/server :1.37.2 :latest	094b5689ed81	perl@5.40.1-6	5.40.1-6+deb13u1	5
artifacthub/postgres :latest	4fd34fa635cc	perl@5.40.1-6	5.40.1-6+deb13u1	4
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	perl@5.36.0-7+deb12u2	no fix listed	4