CVE-2026-48961
HighAdvisory
Published 27 May 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.3
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,183
- of 17,790 indexed, latest versions
- Container images
- 2,091
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,183 of 17,790 indexed charts deploy, on 2,091 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| perldeb | 5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+39 more | 5.40.1-6+deb13u1, 5.40.1-6+e9 | 2,091 |
Charts affected
2,183 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| scrutinykubernetes-homelab-helm-chartsVerified publisher | 0.2.2 | 2 of 3See more | 5,547 |
| uptime-kumakubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 6,391 |
| vaultwardenkubernetes-homelab-helm-chartsVerified publisher | 0.1.1 | 1 of 1See more | 2,057 |
| kubernetes-kiosk-chromiumkubernetes-kiosk-chromium | 0.1.2 | 1 of 1See more | 29,124 |
| kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher | 1.5.0 | 1 of 2See more | 3,586 |
| kube-httpcachekubernetes-replicator | 0.9.1 | 1 of 1See more | 4,463 |
| kube-mailkubernetes-replicator | 0.11.1 | 1 of 3See more | 2,531 |
| databend-metakubesphere-stable | 0.7.3 | 1 of 1See more | 2,838 |
| databend-querykubesphere-stable | 0.8.3 | 1 of 1See more | 2,838 |
| deepflowkubesphere-stable | 6.2.606 | 2 of 8See more | 18,420 |
| iomeshkubesphere-stable | 1.1.0 | 4 of 25See more | 48,954 |
| IOMeshkubesphere-stable | 1.2.0 | 2 of 25See more | 46,639 |
| pulsarkubesphere-stable | 2.7.13 | 1 of 3See more | 14,401 |
| clickhousekubesphere-testVerified publisher | 0.1.1 | 1 of 2See more | 6,705 |
| csi-neonsankubesphere-testVerified publisher | 1.3.0 | 1 of 6See more | 18,526 |
| mongodbkubesphere-testVerified publisher | 0.3.2 | 1 of 2See more | 9,631 |
| mysqlkubesphere-testVerified publisher | 1.0.2 | 1 of 3See more | 7,384 |
| sample-bookinfokubesphere-testVerified publisher | 1.0.0 | 1 of 4See more | 9,388 |
| xenondbkubesphere-testVerified publisher | 1.0.0 | 1 of 3See more | 7,384 |
| kubevoipkubevoipOfficialVerified publisher | 0.6.8 | 1 of 1See more | 1,097 |
| kube-wordpress-mysqlkube-wordpress-mysql | 0.1.0 | 1 of 2See more | 8,767 |
| penpotkubitodevVerified publisher | 1.2.1 | 2 of 5See more | 16,976 |
| kubiya-runnerkubiya-helm-chartsOfficialVerified publisher | 0.9.4 | 2 of 9See more | 20,386 |
| ctrlmeshkusionstackVerified publisher | 0.2.0 | 1 of 1See more | 3,469 |
| kusionkusionstackVerified publisher | 0.14.1 | 1 of 3See more | 6,913 |
| sample-operatorkusionstackVerified publisher | 0.1.2 | 1 of 1See more | 2,503 |
| longhornkvalitetsitVerified publisher | 1.1.1-0 | 1 of 2See more | 16,539 |
| stakitkvalitetsitVerified publisher | 0.3.11 | 1 of 3See more | 7,848 |
| nginx-chartkyb-nginx | 0.1.0 | 1 of 1See more | 1,849 |
| ladeitladeit | 0.4.0 | 1 of 2See more | 26,377 |
| pageslatif-pages | 1.0.0 | 2 of 3See more | 20,242 |
| pageslavanya-pages | 1.0.0 | 2 of 3See more | 20,242 |
| smtplbenicio-communityVerified publisher | 0.1.3 | 1 of 1See more | 1,259 |
| uptime-kumalbenicio-communityVerified publisher | 0.1.1 | 1 of 1See more | 33,540 |
| jenkinsleechistest | 2.7.1 | 1 of 2See more | 4,445 |
| kinesaliteleprechaun-charts | 0.1.2 | 1 of 1See more | 4,273 |
| owntracks-exporterleprechaun-charts | 0.1.11 | 1 of 1See more | 4,058 |
| vaultwardenleprechaun-charts | 0.1.28 | 1 of 1See more | 2,057 |
| jackettlib42Verified publisher | 1.1.0 | 1 of 1See more | 4,643 |
| libredb-studiolibredb-studio-oci | 0.1.63 | 1 of 1See more | 1,244 |
| librenmslibrenms | 10.1.1 | 1 of 5See more | 3,149 |
| kube-iptables-tailerlifen | 0.2.3 | 1 of 1See more | 4,459 |
| lightlyticslightlytics | 0.1.21 | 2 of 2See more | 5,387 |
| linkdinglinkding | 0.2.3 | 1 of 1See more | 38,239 |
| weblinzhengen | 0.1.7 | 1 of 1See more | 1,849 |
| listmonklistmonk-chartVerified publisher | 2.0.1 | 1 of 2See more | 3,091 |
| pocketbase-halitesql | 0.0.3 | 1 of 1See more | 1,138 |
| ingresslivekit-server | 1.2.2 | 1 of 1See more | 10,780 |
| pagesliviu884422-pages | 1.0.0 | 2 of 3See more | 20,242 |
| web-chartljw-ktcloudlab | 0.1.0 | 1 of 1See more | 1,849 |
Container images carrying it
2,091 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| agentarea/ | d3c209a5d531 | perl | no fix listed | 1 |
| agentarea/ | 1e5cb68ee77a | perl | 5.40.1-6+deb13u1 | 1 |
| ahmetfurkandemir/ | 142231a0b8b7 | perl | no fix listed | 1 |
| aibrix/ | 63fb81a64377 | perl | no fix listed | 1 |
| airbyte/ | deec511b51c3 | perl | no fix listed | 1 |
| airbyte/ | 98d2c39d512e | perl | no fix listed | 1 |
| airsonicadvanced/ | f7cbafac2806 | perl | no fix listed | 1 |
| akaunting/ | 52811b36ec3a | perl | no fix listed | 1 |
| aktosecurity/ | d4b100cbdc47 | perl | 5.40.1-6+deb13u1 | 1 |
| aktosecurity/ | dbc566b2376c | perl | 5.40.1-6+deb13u1 | 1 |
| aktosecurity/ | 666eaffd5362 | perl | 5.40.1-6+deb13u1 | 1 |
| aktosecurity/ | 15ebb75b94dc | perl | no fix listed | 1 |
| aktosecurity/ | a6c1b933517f | perl | no fix listed | 1 |
| aktosecurity/ | 46ed5bcb04b2 | perl | no fix listed | 1 |
| aktosecurity/ | 5d4eab1c36b9 | perl | no fix listed | 1 |
| aktosecurity/ | 498e3e35ecc2 | perl | no fix listed | 1 |
| alazidis/ | 602d4f7f090c | perl | no fix listed | 1 |
| allegroai/ | 713ae38f7daf | perl | no fix listed | 1 |
| allegroai/ | 772827a01bb5 | perl | no fix listed | 1 |
| altinity/ | 3396b15c51a2 | perl | no fix listed | 1 |
| andrewgolikov55/ | fcc001b61c0e | perl | no fix listed | 1 |
| andrewmackrodt/ | 33f9080470c9 | perl | no fix listed | 1 |
| anguda/ | c435285fc241 | perl | no fix listed | 1 |
| ankane/ | d3a9d8ac27bb | perl | no fix listed | 1 |
| antrea/ | ee9686bcefb8 | perl | 5.40.1-6+deb13u1 | 1 |
| anujdatar/ | 685df04a643b | perl | no fix listed | 1 |
| apache/ | 64e58748b6b9 | perl | no fix listed | 1 |
| apache/ | ce90bdc3d2af | perl | no fix listed | 1 |
| apache/ | e5560ad0b86e | perl | no fix listed | 1 |
| apache/ | d173e7efe258 | perl | no fix listed | 1 |
| apache/ | 80136ae753ee | perl | no fix listed | 1 |
| apache/ | afa47bf1692a | perl | no fix listed | 1 |
| apache/ | 63b8e3e40742 | perl | no fix listed | 1 |
| apachepulsar/ | 16f9fdab3fa6 | perl | no fix listed | 1 |
| apachepulsar/ | 3b262ab7a7d9 | perl | no fix listed | 1 |
| apachepulsar/ | 9c9947de139d | perl | no fix listed | 1 |
| apachepulsar/ | d056c89b7131 | perl | no fix listed | 1 |
| apachepulsar/ | d538416d5afe | perl | no fix listed | 1 |
| apache/ | 76c176e8a0e4 | perl | no fix listed | 1 |
| apache/ | c8fb51195444 | perl | no fix listed | 1 |
| apache/ | 133d35d2c263 | perl | no fix listed | 1 |
| apache/ | b4ec8c18d079 | perl | no fix listed | 1 |
| apache/ | 295f1dc87d98 | perl | no fix listed | 1 |
| apache/ | 80530f0308a5 | perl | no fix listed | 1 |
| apache/ | ab9467fd712c | perl | no fix listed | 1 |
| apache/ | 80072bb73dd3 | perl | no fix listed | 1 |
| apache/ | 90b7fa1dc018 | perl | no fix listed | 1 |
| apache/ | 92d055a84e9e | perl | no fix listed | 1 |
| apecloud/ | 8ac9947a2c84 | perl | 5.40.1-6+deb13u1 | 1 |
| appwrite/ | af65a77db50e | perl | 5.40.1-6+deb13u1 | 1 |