CVE-2026-19487

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,505; of 17,828 indexed, latest versions
Container images: 2,511; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,505 of 17,828 indexed charts deploy, on 2,511 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more	5.18.2-2ubuntu1.7+esm9, 5.22.1-9ubuntu0.9+esm4, 5.26.1-6ubuntu0.7+esm4, 5.30.0-9ubuntu0.5+esm4+4 more	2,511

OSV records: DEBIAN-CVE-2026-19487 UBUNTU-CVE-2026-19487 ECHO-f6c7-844b-6a34
Also known as: USN-8736-1, USN-8736-2

Charts affected

2,505 by stars

Chart

Latest

Affected images

Radar Score

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19487.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,709

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-19487.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,701

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-19487.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

1,589

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-19487.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4
yandex/clickhouse-server :21.3.20	4eccfffb01d7	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4

Open the chart page →

9,340

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-19487.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9

Open the chart page →

8,105

Container images carrying it

2,511 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/cassandra :4.1.3	7cbcec0086ac	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4	2
library/elasticsearch :8.19.12	89729a95066a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	2
library/ghost :6.64.0	a31d03f1f629	perl@5.36.0-7+deb12u3	no fix listed	2
library/httpd :2.4 :2.4.68 :latest	979c38c2228d	perl@5.40.1-6	no fix listed	2
library/influxdb :2.7	b8d940ca9376	perl@5.36.0-7+deb12u3	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	perl@5.34.0-3ubuntu1	5.34.0-3ubuntu1.9	2
library/mariadb :10.10	334b315c10e5	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	2
library/mariadb :11.4	611a2fcc5fa7	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	2
library/mariadb :10.6	92e50059ea0a	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9	2
library/mariadb :11.3.2	e101f9db3191	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9	2
library/memcached :1.6.45	d956c0a57fd7	perl@5.40.1-6+deb13u1	no fix listed	2
library/mongo :8.0.20	098862b1339f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.6	2
library/mongo :5.0	41108d183e97	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm4	2
library/mongo :4.2.3	58b25d51baa1	perl@5.26.1-6ubuntu0.3	5.26.1-6ubuntu0.7+esm4	2
library/mongo :7.0-jammy :7-jammy	84c4a18b60a0	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	2
library/mongo :7.0	9854f7139445	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	2
library/mongo :7	b096b4cb9269	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	2
library/nginx :latest	6e23479198b9	perl@5.40.1-6	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	perl@5.36.0-7+deb12u1	no fix listed	2
library/nginx :1.29.4	9dd288848f44	perl@5.40.1-6	no fix listed	2
library/phpmyadmin :5.2.3-apache :latest	3a8a8d6b5289	perl@5.40.1-6	no fix listed	2
library/phpmyadmin :5.2.1	6e75aa8f767c	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed	2
library/postgres :16.1	09f23e02d766	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	perl@5.40.1-6	no fix listed	2
library/postgres :14	156f0b253fd6	perl@5.40.1-6	no fix listed	2
library/postgres :16.2	4aea012537ed	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :18.0	6f3e42ad37de	perl@5.40.1-6	no fix listed	2
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	no fix listed	2
library/python :3.12-slim	2f17fc044b57	perl@5.40.1-6+deb13u1	no fix listed	2
library/python :3.7	eedf63967cdb	perl@5.36.0-7	no fix listed	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.6	2
library/rabbitmq :3.12.1-management	f020c06da226	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.9	2
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6	2
library/redis :8.10.1	602d361c4da9	perl@5.40.1-6+deb13u1	no fix listed	2
library/redis :7.2.3	a7cee7c8178f	perl@5.36.0-7+deb12u1	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	perl@5.36.0-7+deb12u3	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	perl@5.40.1-6	no fix listed	2
library/ubuntu :16.04 :xenial	1f1a2d56de1d	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm4	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	perl@5.40.1-6	no fix listed	2
library/wordpress :7.1.0-apache :latest	5a93c470ae82	perl@5.40.1-6	no fix listed	2
library/wordpress :latest	a85a30d9e752	perl@5.40.1-6+deb13u1	no fix listed	2
library/wordpress :7.1.0-apache	edeeae67330a	perl@5.40.1-6+deb13u1	no fix listed	2
library/zookeeper :3.9.5	7d0f24ebb67b	perl@5.34.0-3ubuntu1.8	5.34.0-3ubuntu1.9	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	5.22.1-9ubuntu0.9+esm4	2
linuxserver/cloud9 :latest :version-1.29.2	45c5fe102ff3	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4	2
locustio/locust :2.32.2	a0d4b88e42c1	perl@5.36.0-7+deb12u1	no fix listed	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4	2