StackRadar

CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,403
of 17,797 indexed, latest versions
Container images
2,378
deployed by those charts
Fix available
42 of 42
affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,403 of 17,797 indexed charts deploy, on 2,378 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more5.38.2-3.2ubuntu0.4, 5.40.1-6+e62,357
perlrpm0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f75619
perl-Carprpm1.42-396.el80:1.50-439.module+el8.10.0+21354+3ad137bb16
perl-constantrpm1.33-396.el80:1.33-1001.module+el8.10.0+21354+3ad137bb16
perl-Exporterrpm5.72-396.el80:5.74-458.module+el8.10.0+21354+3ad137bb16
perl-File-Pathrpm2.15-2.el80:2.16-439.module+el8.10.0+21354+3ad137bb16
perl-parentrpm1:0.237-1.el81:0.238-457.module+el8.10.0+21354+3ad137bb16
perl-PathToolsrpm3.74-1.el80:3.78-439.module+el8.10.0+21354+3ad137bb16
perl-Scalar-List-Utilsrpm3:1.49-2.el84:1.55-457.module+el8.10.0+21354+3ad137bb16
perl-Socketrpm4:2.027-3.el84:2.031-1.module+el8.10.0+21354+3ad137bb16
perl-Text-Tabs+Wraprpm2013.0523-395.el80:2013.0523-396.module+el8.10.0+21354+3ad137bb16
perl-threadsrpm1:2.21-2.el81:2.25-457.module+el8.10.0+21354+3ad137bb16
perl-threads-sharedrpm1.58-2.el80:1.61-457.module+el8.10.0+21354+3ad137bb16
perl-Unicode-Normalizerpm1.25-396.el80:1.27-458.module+el8.10.0+21354+3ad137bb16
perl-Encoderpm4:2.97-3.el84:3.08-461.module+el8.10.0+21354+3ad137bb15
perl-File-Temprpm0.230.600-1.el81:0.231.100-1.module+el8.10.0+21354+3ad137bb15
perl-Getopt-Longrpm1:2.50-4.el81:2.52-1.module+el8.10.0+21354+3ad137bb15
perl-HTTP-Tinyrpm0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more0:0.078-1.module+el8.10.0+21354+3ad137bb15
perl-MIME-Base64rpm3.15-396.el80:3.15-1001.module+el8.10.0+21354+3ad137bb15
perl-Pod-Escapesrpm1:1.07-395.el81:1.07-396.module+el8.10.0+21354+3ad137bb15
perl-podlatorsrpm4.11-1.el81:4.14-457.module+el8.10.0+21354+3ad137bb15
perl-Pod-Perldocrpm3.28-396.el80:3.28.01-443.module+el8.10.0+21354+3ad137bb15
perl-Pod-Simplerpm1:3.35-395.el81:3.42-1.module+el8.10.0+21354+3ad137bb15
perl-Pod-Usagerpm4:1.69-395.el84:2.01-1.module+el8.10.0+21354+3ad137bb15
perl-Storablerpm1:3.11-3.el81:3.21-457.module+el8.10.0+21354+3ad137bb15
perl-Term-ANSIColorrpm4.06-396.el80:5.01-458.module+el8.10.0+21354+3ad137bb15
perl-Term-Caprpm1.17-395.el80:1.17-396.module+el8.10.0+21354+3ad137bb15
perl-Text-ParseWordsrpm3.30-395.el80:3.30-396.module+el8.10.0+21354+3ad137bb15
perl-Time-Localrpm1:1.280-1.el82:1.300-4.module+el8.10.0+21354+3ad137bb15
perl-Data-Dumperrpm2.167-399.el80:2.174-440.module+el8.10.0+21354+3ad137bb14
perl-Digestrpm1.17-395.el80:1.20-1.module+el8.10.0+21354+3ad137bb13
perl-Digest-MD5rpm2.55-396.el80:2.58-1.module+el8.10.0+21354+3ad137bb13
perl-IO-Socket-IPrpm0.39-5.el80:0.41-2.module+el8.10.0+21354+3ad137bb13
perl-libnetrpm3.11-3.el80:3.13-1.module+el8.10.0+21354+3ad137bb13
perl-URIrpm1.73-3.el80:1.76-5.module+el8.10.0+21354+3ad137bb13
perl-Archive-Tarrpm2.38-6.el9, 2.38-6.el9.0.10:2.38-6.el9_8.22
perl-Thread-Queuerpm3.13-1.el80:3.14-457.module+el8.10.0+21354+3ad137bb2
perl-Compress-Raw-Bzip2rpm2.081-1.el80:2.096-1.module+el8.10.0+21354+3ad137bb1
perl-Compress-Raw-Zlibrpm2.081-1.el80:2.096-2.module+el8.10.0+21354+3ad137bb1
perl-Digest-SHArpm1:6.02-1.el81:6.02-2.module+el8.10.0+21354+3ad137bb1
perl-Encode-Localerpm1.05-10.module+el8.3.0+6498+9eecfe510:1.05-10.module+el8.10.0+21354+3ad137bb1
perl-IO-Compressrpm2.081-1.el80:2.096-2.module+el8.10.0+24402+ce90c7a01
OSV records
DEBIAN-CVE-2026-9538RHSA-2026:48225RLSA-2026:49525UBUNTU-CVE-2026-9538ECHO-e379-3651-bf29
Also known as
USN-8684-1

Charts affected

2,403 by stars
ChartLatestAffected imagesRadar Score
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,262
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
perl@5.40.1-6
no fix listed
ncsa/checks:main0b738bbc8d70
perl@5.40.1-6
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
perl@5.40.1-6
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
perl@5.40.1-6
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
perl@5.40.1-6
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
perl@5.40.1-6
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
perl@5.40.1-6
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
perl@5.40.1-6
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
perl@5.40.1-6
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
perl@5.40.1-6
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
perl@5.40.1-6
no fix listed

Open the chart page →

68,323
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
perl@0:1.28-419.el8_4.1
perl-Carp@1.42-396.el8
perl-constant@1.33-396.el8
perl-Data-Dumper@2.167-399.el8
perl-Digest@1.17-395.el8
perl-Digest-MD5@2.55-396.el8
perl-Encode@4:2.97-3.el8
perl-Exporter@5.72-396.el8
perl-File-Path@2.15-2.el8
perl-File-Temp@0.230.600-1.el8
perl-Getopt-Long@1:2.50-4.el8
perl-HTTP-Tiny@0.074-1.el8
perl-IO-Socket-IP@0.39-5.el8
perl-libnet@3.11-3.el8
perl-MIME-Base64@3.15-396.el8
perl-parent@1:0.237-1.el8
perl-PathTools@3.74-1.el8
perl-Pod-Escapes@1:1.07-395.el8
perl-Pod-Perldoc@3.28-396.el8
perl-Pod-Simple@1:3.35-395.el8
perl-Pod-Usage@4:1.69-395.el8
perl-podlators@4.11-1.el8
perl-Scalar-List-Utils@3:1.49-2.el8
perl-Socket@4:2.027-3.el8
perl-Storable@1:3.11-3.el8
perl-Term-ANSIColor@4.06-396.el8
perl-Term-Cap@1.17-395.el8
perl-Text-ParseWords@3.30-395.el8
perl-Text-Tabs+Wrap@2013.0523-395.el8
perl-threads@1:2.21-2.el8
perl-threads-shared@1.58-2.el8
perl-Time-Local@1:1.280-1.el8
perl-Unicode-Normalize@1.25-396.el8
perl-URI@1.73-3.el8
0:1.30-474.module+el8.10.0+24099+8aa2f756
0:1.50-439.module+el8.10.0+21354+3ad137bb
0:1.33-1001.module+el8.10.0+21354+3ad137bb
0:2.174-440.module+el8.10.0+21354+3ad137bb
0:1.20-1.module+el8.10.0+21354+3ad137bb
0:2.58-1.module+el8.10.0+21354+3ad137bb
4:3.08-461.module+el8.10.0+21354+3ad137bb
0:5.74-458.module+el8.10.0+21354+3ad137bb
0:2.16-439.module+el8.10.0+21354+3ad137bb
1:0.231.100-1.module+el8.10.0+21354+3ad137bb
1:2.52-1.module+el8.10.0+21354+3ad137bb
0:0.078-1.module+el8.10.0+21354+3ad137bb
0:0.41-2.module+el8.10.0+21354+3ad137bb
0:3.13-1.module+el8.10.0+21354+3ad137bb
0:3.15-1001.module+el8.10.0+21354+3ad137bb
1:0.238-457.module+el8.10.0+21354+3ad137bb
0:3.78-439.module+el8.10.0+21354+3ad137bb
1:1.07-396.module+el8.10.0+21354+3ad137bb
0:3.28.01-443.module+el8.10.0+21354+3ad137bb
1:3.42-1.module+el8.10.0+21354+3ad137bb
4:2.01-1.module+el8.10.0+21354+3ad137bb
1:4.14-457.module+el8.10.0+21354+3ad137bb
4:1.55-457.module+el8.10.0+21354+3ad137bb
4:2.031-1.module+el8.10.0+21354+3ad137bb
1:3.21-457.module+el8.10.0+21354+3ad137bb
0:5.01-458.module+el8.10.0+21354+3ad137bb
0:1.17-396.module+el8.10.0+21354+3ad137bb
0:3.30-396.module+el8.10.0+21354+3ad137bb
0:2013.0523-396.module+el8.10.0+21354+3ad137bb
1:2.25-457.module+el8.10.0+21354+3ad137bb
0:1.61-457.module+el8.10.0+21354+3ad137bb
2:1.300-4.module+el8.10.0+21354+3ad137bb
0:1.27-458.module+el8.10.0+21354+3ad137bb
0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

28,515
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
perl@5.40.1-6
no fix listed

Open the chart page →

2,498
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
perl@5.36.0-7
no fix listed

Open the chart page →

20,317
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

2,975
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

2,029
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

4,082
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.4

Open the chart page →

2,087
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

6,595
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

2,025
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

6,951
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.4

Open the chart page →

3,205
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

3,484
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
perl@5.40.1-6
no fix listed

Open the chart page →

1,425
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
perl@5.40.1-6
no fix listed

Open the chart page →

1,036
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
perl@5.40.1-6
no fix listed

Open the chart page →

4,335
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
perl@5.26.1-6ubuntu0.5
no fix listed

Open the chart page →

14,596
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
perl@5.34.0-3ubuntu1.1
no fix listed

Open the chart page →

13,900
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
perl@5.30.0-9ubuntu0.3
no fix listed

Open the chart page →

13,704
steadybit-agentsteadybit3.1.1661See more

steadybit-agent steadybit 3.1.166

1 container image this version deploys carries CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
perl@5.40.1-6
no fix listed

Open the chart page →

—
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,262
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
perl@5.40.1-6
no fix listed

Open the chart page →

1,507
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
perl@5.40.1-6
no fix listed

Open the chart page →

1,861
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
perl@5.30.0-9ubuntu0.5
no fix listed

Open the chart page →

10,270
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

5,130
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4

Open the chart page →

12,613
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4

Open the chart page →

12,613
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
perl@5.36.0-7+deb12u2
no fix listed

Open the chart page →

2,558
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.4

Open the chart page →

2,602
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
perl@5.40.1-6
no fix listed

Open the chart page →

3,039
substra-backendsubstraVerified publisher26.15.32 of 7See more

substra-backend substra 26.15.3

2 of the 7 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
perl@5.40.1-6
no fix listed
ghcr.io/substra/substra-backend:1.0.121967f54ec86
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4

Open the chart page →

4,827
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
perl@5.36.0-7+deb12u1
no fix listed

Open the chart page →

13,476
stresssudermanjr0.2.01 of 1See more

stress sudermanjr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
perl@5.40.1-7ubuntu0.1
no fix listed

Open the chart page →

749
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,697
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,777
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,809
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,777
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

33,965
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
perl@5.40.1-6
no fix listed

Open the chart page →

3,424
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

2,777
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
perl@5.40.1-6
no fix listed

Open the chart page →

1,861
pagessunilb2590-pages1.0.02 of 3See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
perl@5.30.0-9ubuntu0.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
no fix listed

Open the chart page →

20,262
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
perl@5.36.0-7+deb12u3
no fix listed

Open the chart page →

3,474
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
perl@5.40.1-6
no fix listed

Open the chart page →

1,454
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
perl@5.34.0-3ubuntu1.3
no fix listed

Open the chart page →

7,659
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
perl@5.40.1-6
no fix listed

Open the chart page →

4,711
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
perl@5.34.0-3ubuntu1
no fix listed

Open the chart page →

12,122
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
perl@5.30.0-9ubuntu0.2
no fix listed

Open the chart page →

12,732
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
perl@5.30.0-9ubuntu0.4
no fix listed

Open the chart page →

10,980

Container images carrying it

2,378 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container imageDigestPackageFixed inUsed by
gethue/hue:4.11.011b649636e68
perl@5.30.0-9ubuntu0.3
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
perl@5.26.1-6ubuntu0.5
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
perl@5.34.0-3ubuntu1.4
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
perl@5.36.0-7+deb12u1
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
perl@5.36.0-7+deb12u3
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
perl@5.40.1-6
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
perl@5.30.0-9ubuntu0.2
no fix listed
1
glasskube/operator:0.12.2be5133100d63
perl@5.34.0-3ubuntu1.2
no fix listed
1
glpi/glpi:latest4b681082a79e
perl@5.40.1-6
no fix listed
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
perl@5.34.0-3ubuntu1.4
no fix listed
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
perl@5.36.0-7
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
perl@5.36.0-7
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
perl@5.36.0-7
no fix listed
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
perl@5.22.1-9ubuntu0.3
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
perl@5.40.1-6
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
perl@5.40.1-6
no fix listed
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
perl@5.40.1-6
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
perl@5.26.1-6ubuntu0.3
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
perl@5.38.2-3.2build2.1
5.38.2-3.2ubuntu0.4
1
grafana/agent:v0.44.23364714a2f64
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.5.101a63f4e032c
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.4.306bdcbb51fc2
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.18.10f4434c92b3e
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.18.0491b0578c049
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.16.384b76d56c594
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.11.38c7256f412fe
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.19.2b8ec653c4423
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
grafana/alloy:v1.14.0f50931848bd8
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
grafana/beyla:1.3.336d07f8d276e
perl@5.36.0-7+deb12u1
no fix listed
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
perl@5.36.0-7+deb12u2
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
perl@5.36.0-7+deb12u3
no fix listed
1
grafana/mcp-grafana:1.4.2f87fa67a561f
perl@5.36.0-7+deb12u3
no fix listed
1
grafana/promtail:3.5.165bfae480b57
perl@5.38.2-3.2ubuntu0.1
5.38.2-3.2ubuntu0.4
1
grafana/promtail:3.6.18dcfdf466da0
perl@5.38.2-3.2ubuntu0.2
5.38.2-3.2ubuntu0.4
1
graphprotocol/graph-node:latestb0436347fb24
perl@5.36.0-7+deb12u1
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
perl@5.36.0-7+deb12u1
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
perl@5.34.0-3ubuntu1.3
no fix listed
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
perl@5.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
1
greenkube/greenkube:0.3.00c01932282a4
perl@5.36.0-7+deb12u3
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
perl@5.38.2-3.2build2
5.38.2-3.2ubuntu0.4
1
guacamole/guacamole:1.5.50f62f6d17ab3
perl@5.34.0-3ubuntu1.3
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
perl@5.36.0-7+deb12u1
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
perl@5.36.0-7
no fix listed
1
hamidyousefi93/saam-test:latestc34f071f6ed0
perl@5.36.0-7
no fix listed
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
perl@5.36.0-7+deb12u1
no fix listed
1
hamzaarshad10/querypodpy:1.7154f38e8668e
perl@5.36.0-7+deb12u1
no fix listed
1
hansehe/locust:1.1.0bc8e45262bc4
perl@5.36.0-7+deb12u1
no fix listed
1
haohanyang/compass-web:0.5.054f2112602ee
perl@5.36.0-7+deb12u3
no fix listed
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
perl@5.36.0-7+deb12u3
no fix listed
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
perl@5.36.0-7+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.