StackRadar

CVE-2026-48961

High

Advisory

Published 27 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,079
of 17,828 indexed, latest versions
Container images
2,083
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,079 of 17,828 indexed charts deploy, on 2,083 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more5.40.1-6+deb13u1, 5.40.1-6+e92,083
OSV records
DEBIAN-CVE-2026-48961UBUNTU-CVE-2026-48961ECHO-3bd6-6520-0759

Charts affected

2,079 by stars
ChartLatestAffected imagesRadar Score
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,134
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,408
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

836
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

1,089
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
itzg/bungeecord:latestde76286c0e73
perl@5.40.1-7ubuntu0.3
no fix listed

Open the chart page →

2,673
quickwitquickwit0.8.171 of 1See more

quickwit quickwit 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

3,453
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

11,643
zillazillaOfficialVerified publisher2.4.31 of 1See more

zilla zilla 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/aklivity/zilla:2.4.3e33d59dbb606
perl@5.34.0-3ubuntu1.7
no fix listed

Open the chart page →

1,760
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,935
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

4,305
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
perl@5.34.0-3ubuntu1.1
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
perl@5.34.0-3ubuntu1.1
no fix listed

Open the chart page →

28,396
connaisseurconnaisseurVerified publisher2.13.01 of 2See more

connaisseur connaisseur 2.13.0

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/redisdigest-pinned83edc2b8e9ff
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,880
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
perl@5.36.0-7
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
perl@5.36.0-7
no fix listed

Open the chart page →

33,425
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
perl@5.36.0-7+deb12u1
no fix listed
bitnamilegacy/postgresql:16233f361c5819
perl@5.36.0-7+deb12u1
no fix listed
ilum/api:6.7.3624fd09528c8
perl@5.40.1-6
5.40.1-6+deb13u1
ilum/marquez:0.54.06e1d709d41f8
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

22,408
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,859
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
perl@5.36.0-7+deb12u2
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

7,300
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

5,705
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

4,453
netris-controllernetrisai2.8.24 of 14See more

netris-controller netrisai 2.8.2

4 of the 14 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
netrisai/controller-grpc:4.6.0.00753178bf173c2
perl@5.30.0-9ubuntu0.5
no fix listed
netrisai/controller-telescope:4.6.0.00414d82948a8b2
perl@5.30.0-9ubuntu0.5
no fix listed
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
perl@5.30.0-9ubuntu0.5
no fix listed
netrisai/controller-web-session-generator:0.2.0a030a31289f4
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

30,605
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

12,717
smtpntppoolVerified publisher2.4.01 of 1See more

smtp ntppool 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,336
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

17,443
paperless-ngxpaperless-ngxVerified publisher0.3.223 of 3See more

paperless-ngx paperless-ngx 0.3.22

3 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
perl@5.36.0-7+deb12u2
no fix listed
valkey/valkey:9.1.2c123e3715db6
perl@5.40.1-6
5.40.1-6+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

8,593
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
perl@5.26.1-6ubuntu0.5
no fix listed
platform9community/api-gateway:latest40a4970de568
perl@5.26.1-6ubuntu0.5
no fix listed
platform9community/customers-service:latest2089811e5cc6
perl@5.26.1-6ubuntu0.5
no fix listed
platform9community/vets-service:latestd1165c94dfb3
perl@5.26.1-6ubuntu0.5
no fix listed
platform9community/visits-service:latest8d11b50368c6
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

41,995
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
perl@5.34.0-3ubuntu1.3
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

14,578
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

11,900
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
perl@5.40.1-6
5.40.1-6+deb13u1
thingsboard/tbmq-node:2.4.070661025dba5
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

3,465
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

7,481
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

6,411
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
perl@5.34.0-3ubuntu1.2
no fix listed

Open the chart page →

5,700
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
perl@5.30.0-9ubuntu0.2
no fix listed
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
perl@5.30.0-9ubuntu0.2
no fix listed
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

30,913
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

6,514
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

12,235
memcachedcloudpirates-memcachedVerified publisher0.14.91 of 1See more

memcached cloudpirates-memcached 0.14.9

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,026
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

3,004
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
perl@5.36.0-7+deb12u2
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

5,975
valkeygroundhog2k2.3.41 of 1See more

valkey groundhog2k 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

862
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
perl@5.34.0-3ubuntu1.2
no fix listed

Open the chart page →

4,989
docmosthelmforgeVerified publisher1.2.123 of 4See more

docmost helmforge 1.2.12

3 of the 4 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
perl@5.40.1-6
5.40.1-6+deb13u1
library/postgres:18.6-trixie4ef4dbc939d6
perl@5.40.1-6
5.40.1-6+deb13u1
library/redis:8.10.1298e5b3bc566
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

4,071
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

2,979
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

1,423
passboltpassbolt2.1.16 of 6See more

passbolt passbolt 2.1.1

6 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
perl@5.36.0-7+deb12u2
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
perl@5.36.0-7+deb12u2
no fix listed
bitnamilegacy/redis-sentinel:8.2.1-debian-12-r00ca3ea1d2f82
perl@5.36.0-7+deb12u2
no fix listed
library/haproxy:3.4.10f597665a2a6
perl@5.40.1-6
5.40.1-6+deb13u1
library/mariadb:latestd4fdec0510ad
perl@5.40.1-7ubuntu0.3
no fix listed
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
perl@5.40.1-6
5.40.1-6+deb13u1

Open the chart page →

12,865
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
perl@5.34.0-3ubuntu1.8
no fix listed

Open the chart page →

2,666
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.01 of 3See more

swo-k8s-collector solarwinds 5.3.0

1 of the 3 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,364
thehivestrangebee-helmOfficialVerified publisher1.1.04 of 7See more

thehive strangebee-helm 1.1.0

4 of the 7 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
perl@5.36.0-7+deb12u1
no fix listed
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
perl@5.36.0-7+deb12u2
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
perl@5.36.0-7+deb12u2
no fix listed
strangebee/thehive:5.8.0-1a7f7b05fba24
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

16,294
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

14,279
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

41,831
baserowbaserow-chartVerified publisher1.0.565 of 6See more

baserow baserow-chart 1.0.56

5 of the 6 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
perl@5.40.1-6
5.40.1-6+deb13u1
baserow/web-frontend:2.3.3566d24c7d9f5
perl@5.40.1-6
5.40.1-6+deb13u1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
perl@5.36.0-7+deb12u1
no fix listed
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
perl@5.36.0-7+deb12u1
no fix listed
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

17,372
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
perl@5.30.0-9ubuntu0.2
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

132,182
headwind-mdmchristianhuthVerified publisher5.10.52 of 2See more

headwind-mdm christianhuth 5.10.5

2 of the 2 container images this version deploys carry CVE-2026-48961.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
perl@5.36.0-7+deb12u2
no fix listed
headwindmdm/hmdm:0.1.93550b4840840
perl@5.34.0-3ubuntu1.7
no fix listed

Open the chart page →

5,907

Container images carrying it

2,083 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-48961.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.