CVE-2026-19487

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,453; of 17,828 indexed, latest versions
Container images: 2,450; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,453 of 17,828 indexed charts deploy, on 2,450 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more	5.18.2-2ubuntu1.7+esm9, 5.22.1-9ubuntu0.9+esm4, 5.26.1-6ubuntu0.7+esm4, 5.30.0-9ubuntu0.5+esm4+4 more	2,450

OSV records: DEBIAN-CVE-2026-19487 UBUNTU-CVE-2026-19487 ECHO-f6c7-844b-6a34
Also known as: USN-8736-1, USN-8736-2

Charts affected

2,453 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,450 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :1.66.9	138c8b82c398	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :latest	f669a6eacf8c	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :latest	5d55a742a2bc	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2	1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.72.6_local	43316f900242	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2	1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.74.4_local	5bda14f66e8e	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/aktosecurity/akto-api-testing :latest	97d830d5538a	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/aktosecurity/akto-threat-detection :1.16.2	a47eb6cc17ea	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2	1
public.ecr.aws/aktosecurity/redis	47200b041382	perl@5.36.0-7+deb12u3	no fix listed	1
public.ecr.aws/aktosecurity/redis :latestV8.6.2	832d7785830f	perl@5.40.1-6	no fix listed	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/datadog/cloudprem :v0.1.33	bda08753668d	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/decisiveai/valkey :9.0.1	59c7e728fb3a	perl@5.40.1-6	no fix listed	1
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	perl@5.34.0-3ubuntu1.4	5.34.0-3ubuntu1.9	1
public.ecr.aws/groundcovercom/kong :3.9.3-mini-20260804-1	07dfd0693fc4	perl@5.40.1-6+e15	5.40.1-6+e17	1
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	perl@5.40.1-6+e4	5.40.1-6+e17	1
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260730-1	af8cea3b8538	perl@5.40.1-6+e15	5.40.1-6+e17	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	perl@5.36.0-7	no fix listed	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	perl@5.36.0-7+deb12u3	no fix listed	1
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	perl@5.36.0-7+deb12u1	no fix listed	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	perl@5.36.0-7	no fix listed	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	perl@5.36.0-7+deb12u1	no fix listed	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
quay.io/aerokube/keygen :1.0.1	578934444f04	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.9	1
quay.io/argoproj/argocd :v2.10.7	83c86003b781	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.6	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.9	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	perl@5.36.0-7+deb12u1	no fix listed	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	perl@5.36.0-7+deb12u2	no fix listed	1
quay.io/enix/topomatik :1.3.1	d9f0bec83ef0	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.9	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	perl@5.26.1-6ubuntu0.6	5.26.1-6ubuntu0.7+esm4	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.9	1