CVE-2026-15534

Medium

Advisory

Published 9 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.7; base score, highest
EPSS: 0.002; 6th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,464; of 17,821 indexed, latest versions
Container images: 2,453; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,464 of 17,821 indexed charts deploy, on 2,453 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more	5.18.2-2ubuntu1.7+esm9, 5.22.1-9ubuntu0.9+esm4, 5.26.1-6ubuntu0.7+esm4, 5.30.0-9ubuntu0.5+esm4+4 more	2,450
perlapk	5.44.0-r0, 5.44.0-r1	no fix listed	3

OSV records: CGA-gfxr-7v4h-3mmr DEBIAN-CVE-2026-15534 UBUNTU-CVE-2026-15534 ECHO-8d4e-0265-d9a8
Also known as: CGA-wqhm-xx9g-2gj6, USN-8736-1, USN-8736-2

Charts affected

2,464 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	perl@5.36.0-7+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	perl@5.36.0-7+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
murtazashah46/helmfile :latest	4d11726cf803	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

13,907

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.6

Open the chart page →

2,166

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,697

dingtalk-botxxl-job-admin

0.1.2

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	perl@5.40.1-6	no fix listed

Open the chart page →

3,185

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	perl@5.36.0-7+deb12u2	no fix listed
library/redis :6.2	d2ad7b21cafa	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,738

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,196

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,956

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	perl@5.40.1-6	no fix listed

Open the chart page →

1,338

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,956

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,718

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,697

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

1,956

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4
yandex/clickhouse-server :21.3.20	4eccfffb01d7	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4

Open the chart page →

9,296

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-15534.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9

Open the chart page →

7,966

Container images carrying it

2,453 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	perl@5.36.0-7+deb12u1	no fix listed	1