CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,398; of 17,790 indexed, latest versions
Container images: 2,371; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,398 of 17,790 indexed charts deploy, on 2,371 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,350
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,398 by stars

Chart

Latest

Affected images

Radar Score

dolibarrhelmforge

1.2.18

1 of 3 See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dolibarr/dolibarr :24.0.0	69ec52e3b7ef	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,136

karakeephelmforge

1.2.9

2 of 3 See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
ghcr.io/karakeep-app/karakeep :0.33.2	b069e4307dec	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,535

openhabhelmforge

1.2.0

1 of 1 See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
openhab/openhab :5.2.1	bfd4a60e90da	perl@5.40.1-6	no fix listed

Open the chart page →

3,654

postgresqlhelmforge

2.0.5

1 of 1 See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,638

umamihelmforge

2.3.3

1 of 3 See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,039

openctihelm-opencti

3.0.9

1 of 8 See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.2-debian-12-r1	fac502149c40	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

3,396

hertzbeathertzbeat

1.8.1

3 of 4 See more

hertzbeat hertzbeat 1.8.1

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/hertzbeat :1.8.0	75d48a62748f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
apache/hertzbeat-collector :1.8.0	a2bab1be574c	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
library/postgres :15	9b1d34adbce1	perl@5.40.1-6	no fix listed

Open the chart page →

14,109

infrahubinfrahub

4.33.2

4 of 5 See more

infrahub infrahub 4.33.2

4 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	no fix listed
library/neo4j :2026.05.0	6c162e2432f8	perl@5.40.1-6	no fix listed

Open the chart page →

10,460

plexk8s-home-lab-repo

7.3.1

1 of 1 See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/plex :1.43.1	a9c3723cb31c	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

1,724

kamu-api-serverkamu

0.89.0

1 of 1 See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

6,354

kubeflowkubeflow

1.6.2

5 of 45 See more

kubeflow kubeflow 1.6.2

5 of the 45 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	perl@5.26.1-6ubuntu0.5	no fix listed
istio/proxyv2 :1.14.1	df69c1a7af7c	perl@5.30.0-9ubuntu0.2	no fix listed
library/python :3.7	eedf63967cdb	perl@5.36.0-7	no fix listed
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	perl@5.22.1-9ubuntu0.6	no fix listed
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

97,040

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

10,569

testkubekubeshop

2.13.2

2 of 5 See more

testkube kubeshop 2.13.2

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
kubeshop/bitnami-mongodb :8.3.8	d48b172d99d8	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
kubeshop/testkube-minio :2025.10	d8e1af6aca99	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,012

librechatlibrechat-openshift

1.9.0

2 of 3 See more

librechat librechat-openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :8.0.20	098862b1339f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,833

libredb-studiolibredb-studio

0.1.63

1 of 1 See more

libredb-studio libredb-studio 0.1.63

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/libredb/libredb-studio :0.15.0	4b696f960ac1	perl@5.40.1-6	no fix listed

Open the chart page →

1,220

local-ailocalai

3.4.2

1 of 1 See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

4,050

headplanenbcloud

0.1.2

1 of 4 See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

7,968

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

9,300

ubuntuopen-charts

1.2.1

1 of 1 See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/ubuntu :22.04	2edbbc5dc405	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

1,576

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

8,767

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

10,536

sops-secrets-operatorsops-secrets-operator

0.28.1

1 of 1 See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

820

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

2 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,493

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

2,364

uffizzi-appuffizzi-app

1.3.0

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

19,363

reposilitevolker-raschek

1.0.0

1 of 1 See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dzikoysk/reposilite :3.5.26	4128c2d7a6ba	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,996

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	perl@5.22.1-9	no fix listed

Open the chart page →

13,567

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	perl@5.36.0-7	no fix listed

Open the chart page →

9,753

matrixzekker6

3.30.0

1 of 4 See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.160.0	78de1d10bef0	perl@5.40.1-6	no fix listed

Open the chart page →

5,568

zenmlzenml

0.96.4

1 of 1 See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
zenmldocker/zenml-server :0.96.4	09027a6312ee	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,201

eshoponabpabp-charts

1.0.0

1 of 15 See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

19,805

changedetectionalekc

0.14.4

1 of 1 See more

changedetection alekc 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,448

code-serveralekc

0.1.1

1 of 1 See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/code-server :4.10.1	a5e43a05ae79	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

8,251

tt-rssangelnu

7.0.0

1 of 2 See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/tt-rss :2.0.10068	d332ae2410f8	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

1,245

limesurveyarea-42

0.3.95

1 See more

limesurvey area-42 0.3.95

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

—

auto-deploy-appav1o-charts

0.15.4

1 of 1 See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	perl@5.22.1-9	no fix listed

Open the chart page →

11,012

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

8,007

geoservercloudcamptocamp2

3.0.1

7 of 7 See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :3.0.1.1	de0b20bd2a43	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-gwc :3.0.1.1	b04ed89b5d2b	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-rest :3.0.1.1	318254b52f96	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-wcs :3.0.1.1	4f077124f591	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-webui :3.0.1.1	4f91e3048ac8	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-wfs :3.0.1.1	299f0d6232d1	perl@5.40.1-7ubuntu0.1	no fix listed
geoservercloud/geoserver-cloud-wms :3.0.1.1	5164f687ce4d	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

10,819

thingsboardcetic

0.1.2

1 of 2 See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
thingsboard/tb-postgres :latest	2d17e4e36edc	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,243

lighthousechronicle

0.0.8

1 of 1 See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
sigp/lighthouse :v7.1.0	870934e38931	perl@5.34.0-3ubuntu1.4	no fix listed

Open the chart page →

1,960

ghostcloudpirates-ghost

0.20.22

2 of 3 See more

ghost cloudpirates-ghost 0.20.22

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/ghost :6.63.0	e05bc1169fb2	perl@5.36.0-7+deb12u3	no fix listed
library/mariadb :12.0.2	5b6a1eac15b8	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

7,182

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	perl@5.40.1-6	no fix listed

Open the chart page →

5,620

convertigoconvertigo

8.4.3

3 of 5 See more

convertigo convertigo 8.4.3

3 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	perl@5.36.0-7+deb12u1	no fix listed
library/convertigo :8.4.3	ae605bfcda05	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/couchdb :3.4.2	2817ad50b5c5	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

17,475

cosmocosmo-platform

0.20.0

5 of 10 See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

27,984

crossviewcrossview

4.6.0

1 of 2 See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,803

dask-kubernetes-operatordask

2026.3.0

1 of 1 See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	perl@5.40.1-6	no fix listed

Open the chart page →

9,348

defectdojodefectdojo

1.9.52

1 of 4 See more

defectdojo defectdojo 1.9.52

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
defectdojo/defectdojo-django :3.3.100	c597abdbb535	perl@5.40.1-6	no fix listed

Open the chart page →

2,340

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,194

edgelessdbedgelesssys

0.3.2

1 of 1 See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

4,868

zabbix-agentfermosit

0.0.5

1 of 1 See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,408

Container images carrying it

2,371 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	perl@5.36.0-7+deb12u1	no fix listed	1
opea/speecht5 :1.0	249afad3d268	perl@5.36.0-7+deb12u1	no fix listed	1
opea/tts :1.0	257ae94709e9	perl@5.36.0-7+deb12u1	no fix listed	1
opea/web-retriever-chroma :1.0	fe08165d7770	perl@5.36.0-7+deb12u1	no fix listed	1
openaev/platform :3.260904.0	0a12ce8b3db9	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
openbas/caldera-server :5.1.0	a277796d9724	perl@5.36.0-7+deb12u1	no fix listed	1
openbas/platform :2.0.5	d986d80b0a75	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	perl@5.36.0-7+deb12u3	no fix listed	1
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	perl@5.40.1-6	no fix listed	1
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	perl@5.36.0-7+deb12u1	no fix listed	1
opencsghq/csghub-server :v2.4.0-ee	302c9d45d8a8	perl@5.36.0-7+deb12u3	no fix listed	1
opencsghq/csghub-xnet :v2.4.0-ee	04121fd19ef9	perl@5.36.0-7+deb12u3	no fix listed	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	perl@5.36.0-7+deb12u1	no fix listed	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	perl@5.36.0-7+deb12u1	no fix listed	1
opencsghq/kubectl :latest	b6d87e1048c2	perl@5.36.0-7+deb12u2	no fix listed	1
opencsghq/label-studio :v2.5.0	47e22aa71870	perl@5.40.1-6	no fix listed	1
opencsghq/label-studio :v2.4.0	b4e849fcf94a	perl@5.40.1-6	no fix listed	1
opencsghq/postgres :15.18	42578c9d3ebd	perl@5.40.1-6	no fix listed	1
opendatacube/explorer :latest	120457ffcd69	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/restcube :latest	91870111837c	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	perl@5.26.1-6ubuntu0.3	no fix listed	1
opendatacube/wps :latest	80df355a660b	perl@5.34.0-3ubuntu1.4	no fix listed	1
openebs/rawfile-localpv :v0.15.2	a39ef27ea28b	perl@5.40.1-6	no fix listed	1
openelevation/open-elevation :latest	82fb21612e86	perl@5.30.0-9ubuntu0.2	no fix listed	1
openhab/openhab :5.2.1	bfd4a60e90da	perl@5.40.1-6	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	perl@5.30.0-9ubuntu0.2	no fix listed	1
opennode/waldur-mastermind :8.1.2	4c82b15d9042	perl@5.40.1-6	no fix listed	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	perl@5.36.0-7+deb12u2	no fix listed	1
openproject/openproject :17.8.0-slim	48952034215d	perl@5.40.1-6	no fix listed	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	perl@5.30.0-9ubuntu0.4	no fix listed	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	perl@5.30.0-9ubuntu0.4	no fix listed	1
openthread/border-router :v2026.09.0	7616b9d514de	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
openthread/otbr :latest	f307f59f6432	perl@5.26.1-6ubuntu0.7	no fix listed	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
openvpn/openvpn-as :latest	2253c10ec652	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	perl@5.26.1-6ubuntu0.5	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	perl@5.18.2-2ubuntu1.4	no fix listed	1
otwld/velero-ui :0.10.2	d1954b759e47	perl@5.36.0-7+deb12u3	no fix listed	1
outlinewiki/outline :0.82.0	494dfb9249a6	perl@5.36.0-7+deb12u1	no fix listed	1
outlinewiki/outline :1.10.1	832051f039b4	perl@5.40.1-6	no fix listed	1
owncloud/server :10.15.0	51d9b74fc2a8	perl@5.30.0-9ubuntu0.5	no fix listed	1
owncloud/server :10.16.2	74c53d341076	perl@5.34.0-3ubuntu1.5	no fix listed	1
owncloud/server :10.16.3	b3f9efdcd7f7	perl@5.34.0-3ubuntu1.7	no fix listed	1
oxfordsemantic/rdfox :5.6	db17910eb855	perl@5.30.0-9ubuntu0.2	no fix listed	1
oxfordsemantic/rdfox-init :5.6	baf570ff968d	perl@5.30.0-9ubuntu0.2	no fix listed	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	perl@5.34.0-3ubuntu1.3	no fix listed	1
passbolt/passbolt :5.13.0-1-ce	af3a620902a0	perl@5.40.1-6	no fix listed	1
payara/server-full :7.2026.2-jdk25	31f1253f0cf8	perl@5.34.0-3ubuntu1.5	no fix listed	1