CVE-2026-19487

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,479; of 17,828 indexed, latest versions
Container images: 2,475; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,479 of 17,828 indexed charts deploy, on 2,475 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more	5.18.2-2ubuntu1.7+esm9, 5.22.1-9ubuntu0.9+esm4, 5.26.1-6ubuntu0.7+esm4, 5.30.0-9ubuntu0.5+esm4+4 more	2,475

OSV records: DEBIAN-CVE-2026-19487 UBUNTU-CVE-2026-19487 ECHO-f6c7-844b-6a34
Also known as: USN-8736-1, USN-8736-2

Charts affected

2,479 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,475 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/mongo :4.4-bionic	3d0e6df9fd5b	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9	1
library/mongo :5.0.14-focal	50cae5081ab4	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm4	1
library/mongo :6.0.12	646902910d6a	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
library/mongo :4.2	699d652ed674	perl@5.26.1-6ubuntu0.7	5.26.1-6ubuntu0.7+esm4	1
library/mongo :4.2.1	6ca49afbcb2b	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm4	1
library/mongo :noble	6ede2806c78e	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	1
library/mongo :6.0.2	71a63fc2438e	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm4	1
library/mongo :5.0.21	7c81758cb295	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm4	1
library/mongo :8.3.9	81a1c8842a09	perl@5.38.2-3.2ubuntu0.4	5.38.2-3.2ubuntu0.6	1
library/mongo :7.0-jammy	84c4a18b60a0	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	1
library/mongo :7.0.28-jammy	88785f6f665a	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.9	1
library/mongo :7.0	9854f7139445	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	1
library/mongo :4.2.21-bionic	9cb28f7291d9	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4	1
library/mongo :7.0.12	ae1cf99fa7bf	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
library/mongo :7.0	b6421fd6d1c5	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9	1
library/mongo :4.4.18	d23ec07162ca	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm4	1
library/mongo :8.0.11	dca8d11fe467	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.6	1
library/mysql :8.0-debian	9382e4f6f7f0	perl@5.36.0-7+deb12u3	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	perl@5.40.1-6	no fix listed	1
library/neo4j :2026.02.2	5ab4ab0358cf	perl@5.40.1-6	no fix listed	1
library/neo4j :2026.05.0	6c162e2432f8	perl@5.40.1-6	no fix listed	1
library/nextcloud :35.0.0 :35.0.0-apache	3e9f6eaa5dc8	perl@5.40.1-6+deb13u1	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	perl@5.36.0-7+deb12u2	no fix listed	1
library/nextcloud :34.0.4-apache	a5ace30c695a	perl@5.40.1-6+deb13u1	no fix listed	1
library/nextcloud :34.0.4-apache	b13a87affb7e	perl@5.40.1-6+deb13u1	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	perl@5.40.1-6	no fix listed	1
library/nginx :1.27.4	09369da6b103	perl@5.36.0-7+deb12u1	no fix listed	1
library/nginx :1.29	1881968aff6f	perl@5.40.1-6	no fix listed	1
library/nginx :1.27	6784fb0834aa	perl@5.36.0-7+deb12u2	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	perl@5.36.0-7	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	perl@5.36.0-7+deb12u1	no fix listed	1
library/nginx :1.31	a53fc6c27208	perl@5.40.1-6	no fix listed	1
library/nginx :latest	cfb8a89ac237	perl@5.40.1-6+deb13u1	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	perl@5.36.0-7+deb12u1	no fix listed	1
library/node :22-bookworm-slim	48e4b67d85f8	perl@5.36.0-7+deb12u3	no fix listed	1
library/node :20	8f693eaa7e0a	perl@5.36.0-7+deb12u3	no fix listed	1
library/node :lts	be23f54a88d3	perl@5.36.0-7+deb12u3	no fix listed	1
library/node :latest	f5d1cc40abc1	perl@5.40.1-6	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	perl@5.40.1-6	no fix listed	1
library/phpmyadmin :5.2.3-apache	adc486045303	perl@5.40.1-6+deb13u1	no fix listed	1
library/postgres :18.0	073e7c8b84e2	perl@5.40.1-6	no fix listed	1
library/postgres :18 :18.6-trixie	10037cee1d5e	perl@5.40.1-6+deb13u1	no fix listed	1
library/postgres :17.4	304ab8135187	perl@5.36.0-7+deb12u2	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	perl@5.40.1-6	no fix listed	1
library/postgres :16.11	468e1f126ca5	perl@5.40.1-6	no fix listed	1
library/postgres :16.6	557fea37a744	perl@5.36.0-7+deb12u1	no fix listed	1
library/postgres :18.3	69e8582b781c	perl@5.40.1-6	no fix listed	1
library/postgres :15.18	6eb0add3b77c	perl@5.40.1-6	no fix listed	1
library/postgres :15.3	8775adb39f0d	perl@5.36.0-7	no fix listed	1