StackRadar

CVE-2026-48961

High

Advisory

Published 27 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,160
of 17,792 indexed, latest versions
Container images
2,048
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,160 of 17,792 indexed charts deploy, on 2,048 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+38 more5.40.1-6+deb13u1, 5.40.1-6+e92,048
OSV records
DEBIAN-CVE-2026-48961UBUNTU-CVE-2026-48961ECHO-3bd6-6520-0759

Charts affected

2,160 by stars
ChartLatestAffected imagesRadar Score
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
perl@5.40.1-6
5.40.1-6+deb13u1
kixote/typemilldigest-pinned628f79a08cc7
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

5,474
typesensetypesenseVerified publisher1.1.41 of 1See more

typesense typesense 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
typesense/typesense:30.191604dc128e2
perl@5.34.0-3ubuntu1.5
no fix listed

Open the chart page →

1,911
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

3,806
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

3,806
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

12,672
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
perl@5.40.1-6
5.40.1-6+deb13u1
taigaio/taiga-protected:latestfd4568a97a59
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

9,193
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

4,339
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,318
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

5,259
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
perl@5.34.0-3ubuntu1.1
no fix listed

Open the chart page →

7,072
waldurwaldur-chartsVerified publisher8.1.22 of 3See more

waldur waldur-charts 8.1.2

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
perl@5.40.1-6
5.40.1-6+deb13u1
opennode/waldur-mastermind:8.1.24c82b15d9042
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

4,901
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

15,986
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
perl@5.18.2-2ubuntu1
no fix listed

Open the chart page →

41,444
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

7,903
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

7,764
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

8,320
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.91 of 1See more

workflows-aggregator workflows-aggregator 0.16.9

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,358
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

1,414
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
typesense/typesense:28.0.rc35dea1b62b7b6e
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

10,156
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
perl@5.34.0-3ubuntu1.1
no fix listed

Open the chart page →

9,835
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:14.22eba8ddbdd837
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,640
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,919
crowdsec-web-uizekker6Verified publisher0.51.01 of 1See more

crowdsec-web-ui zekker6 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,433
mikochizer0tonin1.11.01 of 1See more

mikochi zer0tonin 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
zer0tonin/mikochi:1.11.009872bae1554
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

995
backendzymtraceOfficialVerified publisher26.9.22See more

backend zymtrace 26.9.2

2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
perl@5.34.0-3ubuntu1.5
no fix listed
library/postgres:17.4304ab8135187
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

—
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

12,041
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

4,577
open5gsadaptivenetlabVerified publisher1.0.32 of 3See more

open5gs adaptivenetlab 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
free5gmano/nextepc-mongodb:latest36f806935519
perl@5.22.1-9ubuntu0.6
no fix listed
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

25,531
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,498
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

5,877
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

1,270
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

3,838
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,238
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

30,326
bootaerokube1.0.12 of 4See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
quay.io/aerokube/jumphost:1.0.170fd7c00418d
perl@5.34.0-3ubuntu1.3
no fix listed
quay.io/aerokube/keygen:1.0.1578934444f04
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

7,922
kourierahhhhVerified publisher0.18.11 of 1See more

kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.34-latestcfc0678bc03c
perl@5.34.0-3ubuntu1.5
no fix listed

Open the chart page →

1,812
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,609
airbyte-keycloakairbyteVerified publisher0.1.21 of 2See more

airbyte-keycloak airbyte 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,649
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

4,956
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

11,776
akto-ai-guardrails-v2akto0.3.05 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

5 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
perl@5.40.1-6
5.40.1-6+deb13u1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
perl@5.40.1-6
5.40.1-6+deb13u1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
perl@5.40.1-6
5.40.1-6+deb13u1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
perl@5.40.1-7ubuntu0.1
no fix listed
redis/redis-stack-server:7.4.0-v172035434f455
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

9,505
akto-central-setupakto1.1.102 of 5See more

akto-central-setup akto 1.1.10

2 of the 5 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
perl@5.40.1-7ubuntu0.1
no fix listed
library/eclipse-temurin:211f79c73404fb
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

5,118
akto-hybrid-redactakto1.44.61 of 5See more

akto-hybrid-redact akto 1.44.6

1 of the 5 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

4,098
akto-mini-runtimeakto0.7.222 of 3See more

akto-mini-runtime akto 0.7.22

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
perl@5.40.1-7ubuntu0.1
no fix listed
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,826
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redisdigest-pinned47200b041382
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

3,258
akto-mini-testingakto1.45.72 of 5See more

akto-mini-testing akto 1.45.7

2 of the 5 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
perl@5.36.0-7+deb12u3
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

6,580
akto-regional-setupakto1.3.14 of 9See more

akto-regional-setup akto 1.3.1

4 of the 9 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
perl@5.40.1-7ubuntu0.1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
perl@5.40.1-7ubuntu0.1
no fix listed
redis/redis-stack-server:7.4.072035434f455
perl@5.34.0-3ubuntu1.3
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

7,828
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,474
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,553
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,585

Container images carrying it

2,048 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-48961.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.