StackRadar

CVE-2026-19487

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,501
of 17,821 indexed, latest versions
Container images
2,506
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,501 of 17,821 indexed charts deploy, on 2,506 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more5.18.2-2ubuntu1.7+esm9, 5.22.1-9ubuntu0.9+esm4, 5.26.1-6ubuntu0.7+esm4, 5.30.0-9ubuntu0.5+esm4+4 more2,506
OSV records
DEBIAN-CVE-2026-19487UBUNTU-CVE-2026-19487ECHO-f6c7-844b-6a34
Also known as
USN-8736-1, USN-8736-2

Charts affected

2,501 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-19487.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
perl@5.34.0-3ubuntu1.7
5.34.0-3ubuntu1.9

Open the chart page →

7,966

Container images carrying it

2,506 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
stackstorm/st2sensorcontainer:3.8b1a338f64773
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
stackstorm/st2stream:3.81c8904a3bf67
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
stackstorm/st2timersengine:3.81bf35bfaf00c
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
stackstorm/st2web:3.809989a26c8b7
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
stackstorm/st2workflowengine:3.819fdfffdbba8
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
stalwartlabs/stalwart:v0.16.1425001929f36a
perl@5.40.1-6
no fix listed
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
perl@5.40.1-6
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
perl@5.40.1-6
no fix listed
1
stalwartlabs/stalwart:v0.15.5dcf575db2d53
perl@5.40.1-6
no fix listed
1
stashapp/stash:latest24dbd7607174
perl@5.30.0-9ubuntu0.2
5.30.0-9ubuntu0.5+esm4
1
stashapp/stash-box:latesta534c8afdf39
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.6
1
statcan/ckan:2.93921305425b8
perl@5.30.0-9ubuntu0.2
5.30.0-9ubuntu0.5+esm4
1
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
perl@5.36.0-7+deb12u3
no fix listed
1
steamcmd/steamcmd:latest5028a25268e7
perl@5.40.1-7ubuntu0.1
5.40.1-7ubuntu0.2
1
strangebee/thehive:5.8.0-1a7f7b05fba24
perl@5.36.0-7+deb12u3
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
perl@5.30.0-9ubuntu0.2
5.30.0-9ubuntu0.5+esm4
1
structurizr/onpremises:2025.11.094b5ffb5119c8
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.6
1
substratusai/verba:v0.4.0-baseURL261695be635eb
perl@5.36.0-7+deb12u1
no fix listed
1
supabase/edge-runtime:v1.74.02781daf92394
perl@5.36.0-7+deb12u3
no fix listed
1
supabase/edge-runtime:v1.59.0eff9c554d649
perl@5.36.0-7+deb12u1
no fix listed
1
supabase/logflare:latest49bfe526f1b4
perl@5.40.1-6
no fix listed
1
supabase/postgres-meta:v0.96.6a84cc713585e
perl@5.36.0-7+deb12u3
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
perl@5.36.0-7+deb12u1
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
perl@5.36.0-7+deb12u3
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
perl@5.36.0-7+deb12u1
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
perl@5.40.1-6
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
perl@5.36.0-7+deb12u1
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
perl@5.36.0-7+deb12u3
no fix listed
1
supabase/studio:latest94a2a9d2906e
perl@5.36.0-7+deb12u3
no fix listed
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.9
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
perl@5.30.0-9ubuntu0.4
5.30.0-9ubuntu0.5+esm4
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
perl@5.34.0-3ubuntu1.3
5.34.0-3ubuntu1.9
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
perl@5.36.0-7+deb12u1
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
perl@5.30.0-9ubuntu0.5
5.30.0-9ubuntu0.5+esm4
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
perl@5.36.0-7+deb12u3
no fix listed
1
sysnet4admin/colosseum-agg:logbc25b152d88e
perl@5.34.0-3ubuntu1.7
5.34.0-3ubuntu1.9
1
sysnet4admin/colosseum-cms:loge74b43c7f492
perl@5.36.0-7+deb12u2
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
perl@5.36.0-7+deb12u2
no fix listed
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
perl@5.40.1-6
no fix listed
1
tautulli/tautulli:latest670e68dd9efc
perl@5.40.1-6
no fix listed
1
tchiotludo/akhq:0.28.0c2824dc2ae44
perl@5.40.1-7ubuntu0.1
5.40.1-7ubuntu0.2
1
tdengine/tdengine:3.0.2.24140a4021ddb
perl@5.26.1-6ubuntu0.6
5.26.1-6ubuntu0.7+esm4
1
technitium/dns-server:15.5.02502fd4993d1
perl@5.38.2-3.2ubuntu0.4
5.38.2-3.2ubuntu0.6
1
technitium/dns-server:15.4.0df7d90ef0f7b
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.6
1
teknas09/bird-pod:latest12a1fa85c4aa
perl@5.36.0-7+deb12u1
no fix listed
1
tensorflow/serving:latest8a208c232297
perl@5.34.0-3ubuntu1.5
5.34.0-3ubuntu1.9
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9+esm4
1
tensorzero/gateway:2026.6.0c939db4f27e4
perl@5.40.1-6
no fix listed
1
tensorzero/ui:2026.6.0f2563d54724e
perl@5.40.1-6
no fix listed
1
tenureai/tenure:v1.0.285f5b222df9a5
perl@5.40.1-6+dhi4
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.