CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,427; of 17,828 indexed, latest versions
Container images: 2,426; deployed by those charts
Fix available: 106 of 106; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,427 of 17,828 indexed charts deploy, on 2,426 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,404
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+5 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 4:5.32.1-474.module+el8.10.0+24099+8aa2f756	20
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	17
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	17
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	17
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	17
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	17
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	17
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	17
perl-Socketrpm	4:2.027-2.el8, 4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	17
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	17
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	17
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	17
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	17
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	16
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	16
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	16
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	16
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	16
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	16
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	16
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	16
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	16
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	16
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	16
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	15
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	14
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	14
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	14
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	14
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	14
perl-Archive-Tarrpm	2.30-1.el8, 2.38-6.el9, 2.38-6.el9.0.1	0:2.38-5.module+el8.10.0+24544+66a14188, 0:2.38-6.el9_8.2	3
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	3
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	2
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	2
perl-Encode-Localerpm	1.05-9.el8, 1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	2
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	2
perl-Algorithm-Diffrpm	1.1903-9.el8	0:1.1903-10.module+el8.10.0+21354+3ad137bb	1
perl-Archive-Ziprpm	1.60-3.el8	0:1.68-3.module+el8.10.0+21354+3ad137bb	1
perl-autodierpm	2.29-396.el8	0:2.34-1.module+el8.10.0+21354+3ad137bb	1
perl-bignumrpm	0.49-2.el8	0:0.51-439.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Bzip2rpm	2.26-6.el8	0:2.28-2.module+el8.10.0+21354+3ad137bb	1
perl-Config-Perl-Vrpm	0.30-1.el8	0:0.32-441.module+el8.10.0+21354+3ad137bb	1
perl-CPANrpm	2.18-397.el8	0:2.28-5.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Metarpm	2.150010-396.el8	0:2.150010-397.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Meta-Requirementsrpm	2.140-396.el8	0:2.140-397.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Meta-YAMLrpm	0.018-397.el8	0:0.018-1001.module+el8.10.0+21354+3ad137bb	1
perl-Data-OptListrpm	0.110-6.el8	0:0.110-7.module+el8.10.0+21354+3ad137bb	1
perl-Data-Sectionrpm	0.200007-3.el8	0:0.200007-8.module+el8.10.0+21354+3ad137bb	1
perl-DB_Filerpm	1.842-1.el8	0:1.855-1.module+el8.10.0+21354+3ad137bb	1
perl-Devel-PPPortrpm	3.36-5.el8	0:3.62-1.module+el8.10.0+21354+3ad137bb	1
perl-Devel-Sizerpm	0.81-2.el8	0:0.83-3.module+el8.10.0+21354+3ad137bb	1
perl-Envrpm	1.04-395.el8	0:1.04-396.module+el8.10.0+21354+3ad137bb	1
perl-experimentalrpm	0.019-2.el8	0:0.025-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-CBuilderrpm	1:0.280230-2.el8	1:0.280236-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-Installrpm	2.14-4.el8	0:2.20-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-MakeMakerrpm	1:7.34-1.el8	2:7.46-3.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-Manifestrpm	1.70-395.el8	1:1.73-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-ParseXSrpm	1:3.35-2.el8	1:3.40-439.module+el8.10.0+21354+3ad137bb	1
perl-File-Fetchrpm	0.56-2.el8	0:1.00-1.module+el8.10.0+21354+3ad137bb	1
perl-File-HomeDirrpm	1.002-4.el8	0:1.004-6.module+el8.10.0+21354+3ad137bb	1
perl-File-Whichrpm	1.22-2.el8	0:1.23-4.module+el8.10.0+21354+3ad137bb	1
perl-Filterrpm	2:1.58-2.el8	2:1.60-1.module+el8.10.0+21354+3ad137bb	1
perl-Filter-Simplerpm	0.94-2.el8	0:0.96-457.module+el8.10.0+21354+3ad137bb	1
perl-inc-latestrpm	2:0.500-9.el8	2:0.500-10.module+el8.10.0+21354+3ad137bb	1
perl-IPC-Cmdrpm	2:1.02-1.el8	2:1.04-2.module+el8.10.0+21354+3ad137bb	1
perl-IPC-System-Simplerpm	1.25-17.el8	0:1.30-3.module+el8.10.0+21354+3ad137bb	1
perl-IPC-SysVrpm	2.07-397.el8	0:2.09-1.module+el8.10.0+21354+3ad137bb	1
perl-JSON-PPrpm	1:2.97.001-3.el8	1:4.04-2.module+el8.10.0+21354+3ad137bb	1
perl-Locale-Maketextrpm	1.28-396.el8	0:1.29-440.module+el8.10.0+21354+3ad137bb	1
perl-local-librpm	2.000024-2.el8	0:2.000024-7.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigIntrpm	1:1.9998.11-5.el8	1:1.9998.18-1.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigInt-FastCalcrpm	0.500.600-6.el8	0:0.500.900-1.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigRatrpm	0.2614-1.el8	0:0.2614-2.module+el8.10.0+21354+3ad137bb	1
perl-Module-Buildrpm	2:0.42.24-5.el8	2:0.42.31-5.module+el8.10.0+21354+3ad137bb	1
perl-Module-CoreListrpm	1:5.20181130-1.el8	1:5.20211020-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Loadrpm	1:0.32-395.el8	1:0.36-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Load-Conditionalrpm	0.68-395.el8	0:0.74-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Metadatarpm	1.000033-395.el8	0:1.000037-1.module+el8.10.0+21354+3ad137bb	1
perl-MRO-Compatrpm	0.13-4.el8	0:0.13-5.module+el8.10.0+21354+3ad137bb	1
perl-Package-Generatorrpm	1.106-11.el8	0:1.106-12.module+el8.10.0+21354+3ad137bb	1
perl-Params-Checkrpm	1:0.38-395.el8	1:0.38-396.module+el8.10.0+21354+3ad137bb	1
perl-Params-Utilrpm	1.07-22.el8	0:1.102-2.module+el8.10.0+21354+3ad137bb	1
perl-perlfaqrpm	5.20180605-1.el8	0:5.20210520-1.module+el8.10.0+21354+3ad137bb	1
perl-PerlIO-via-QuotedPrintrpm	0.08-395.el8	0:0.09-1.module+el8.10.0+21354+3ad137bb	1
perl-Perl-OSTyperpm	1.010-396.el8	0:1.010-397.module+el8.10.0+21354+3ad137bb	1
perl-Pod-Checkerrpm	4:1.73-395.el8	4:1.74-1.module+el8.10.0+21354+3ad137bb	1
perl-Pod-Parserrpm	1.63-396.el8	0:1.63-1001.module+el8.10.0+21354+3ad137bb	1
perl-Software-Licenserpm	0.103013-2.el8	0:0.103014-5.module+el8.10.0+21354+3ad137bb	1
perl-Sub-Exporterrpm	0.987-15.el8	0:0.987-17.module+el8.10.0+21354+3ad137bb	1
perl-Sub-Installrpm	0.928-14.el8	0:0.928-15.module+el8.10.0+21354+3ad137bb	1
perl-Sys-Syslogrpm	0.35-397.el8	0:0.36-1.module+el8.10.0+21354+3ad137bb	1
perl-Test-Harnessrpm	1:3.42-1.el8	1:3.42-2.module+el8.10.0+21354+3ad137bb	1
perl-Test-Simplerpm	1:1.302135-1.el8	3:1.302181-2.module+el8.10.0+21354+3ad137bb	1
perl-Text-Balancedrpm	2.03-395.el8	0:2.04-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: RHSA-2026:49524, USN-8684-1

Charts affected

2,427 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,426 by charts deploying them

A fixed version is listed for 106 of the 106 affected packages.

Container image	Digest	Package	Fixed in	Used by
ethpandaops/eleel :main	b8f1b707aee0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ethpandaops/forky :debian-latest	c937f4ba737c	perl@5.40.1-6	no fix listed	1
ethpandaops/observoor :master	c7e5055defcb	perl@5.36.0-7+deb12u3	no fix listed	1
ethpandaops/rpc-snooper :latest	c0b30fcf64bc	perl@5.40.1-6	no fix listed	1
factoriotools/factorio :latest	18c07a80cacc	perl@5.40.1-6	no fix listed	1
factoriotools/factorio :stable	4ec5fea2e06b	perl@5.40.1-6	no fix listed	1
factoriotools/factorio :2.0.67-rootless	f7909f7361d6	perl@5.40.1-6	no fix listed	1
falcosecurity/event-generator :latest	932956d86c99	perl@5.36.0-7+deb12u3	no fix listed	1
federid/webhook :0.1.0	fbfb7c6510a7	perl@5.36.0-7+deb12u1	no fix listed	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	perl@5.36.0-7+deb12u1	no fix listed	1
filegator/filegator :latest	34bf565a11a4	perl@5.40.1-6	no fix listed	1
firefart/requesttracker :5.0.4	0d6249906d8c	perl@5.36.0-7	no fix listed	1
fireflyiii/core :version-6.6.6	ae69fdd95cde	perl@5.40.1-6	no fix listed	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	perl@5.30.0-9ubuntu0.5	no fix listed	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	perl@5.36.0-7+deb12u2	no fix listed	1
flanksource/apm-hub :v0.0.47	1dacc3195bf9	perl@5.34.0-3ubuntu1.2	no fix listed	1
flanksource/batch-runner :v1.0.44	689687a7cf95	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
flanksource/canary-checker-ui :v1.4.281	764c84e550db	perl@5.36.0-7+deb12u1	no fix listed	1
flanksource/incident-manager-ui :v1.4.319	953948a194c9	perl@5.36.0-7+deb12u1	no fix listed	1
flashcatcloud/nightingale :8.5.1	421acb36181b	perl@5.40.1-6	no fix listed	1
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	perl@5.36.0-7+deb12u2	no fix listed	1
fluent/fluent-bit :4.0-debug	e76397ef3983	perl@5.36.0-7+deb12u3	no fix listed	1
fluent/fluentd-kubernetes-daemonset :v1.19.3-debian-elasticsearch7-1.1	de9cf5f1127a	perl@5.40.1-6	no fix listed	1
fluent/fluentd-kubernetes-daemonset :v1-debian-graylog	fda93f768f98	perl@5.40.1-6	no fix listed	1
flyway/flyway :9.15	45b5d7cdc75a	perl@5.30.0-9ubuntu0.3	no fix listed	1
fnzv/dump1090 :latest	b3079b95c336	perl@5.34.0-3ubuntu1.3	no fix listed	1
foldingathome/fah-gpu :latest	5ef7742d1eb4	perl@5.26.1-6ubuntu0.5	no fix listed	1
folioci/mod-z3950 :latest	2493041ce880	perl@5.40.1-6	no fix listed	1
fosrl/pangolin :latest	83a55f933b4d	perl@5.36.0-7+deb12u3	no fix listed	1
frankescobar/allure-docker-service :2.27.0	0815040339a9	perl@5.26.1-6ubuntu0.3	no fix listed	1
frankescobar/allure-docker-service :2.35.1	4154286c0209	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	perl@5.26.1-6ubuntu0.3	no fix listed	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	perl@5.26.1-6ubuntu0.3	no fix listed	1
frankescobar/allure-docker-service :latest	dc171ec796d5	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
free5gmano/nextepc-mongodb :latest	36f806935519	perl@5.22.1-9ubuntu0.6	no fix listed	1
freedom98/flask :k3.0	d7ce1533f297	perl@5.36.0-7+deb12u1	no fix listed	1
freeradius/freeradius-server :3.2.8	af6fd34a5b78	perl@5.34.0-3ubuntu1.5	no fix listed	1
galaxy/cloudman-server :latest	e5c265fe9fcd	perl@5.30.0-9ubuntu0.2	no fix listed	1
galaxy/galaxy-init :v18.01	0267bad550e6	perl@5.18.2-2ubuntu1.4	no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	perl@5.18.2-2ubuntu1.4	no fix listed	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	perl@5.36.0-7+deb12u2	no fix listed	1
galexrt/extended-ceph-exporter :v1.8.0	5373078a3a08	perl@5.40.1-6	no fix listed	1
gchq/accumulo :2.0.1	c460bb587d6d	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	perl@5.26.1-6ubuntu0.7	no fix listed	1
geonode/geoserver :2.28.4-latest	81b1d431b7e9	perl@5.34.0-3ubuntu1.5	no fix listed	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	perl@5.36.0-7+deb12u3	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	perl@5.26.1-6ubuntu0.3	no fix listed	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	perl@5.30.0-9ubuntu0.2	no fix listed	1
geoservercloud/geoserver-cloud-gateway :3.0.1.1	de0b20bd2a43	perl@5.40.1-7ubuntu0.1	no fix listed	1
geoservercloud/geoserver-cloud-gwc :3.0.1.1	b04ed89b5d2b	perl@5.40.1-7ubuntu0.1	no fix listed	1