CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,414; of 17,790 indexed, latest versions
Container images: 2,398; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,414 of 17,790 indexed charts deploy, on 2,398 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,377
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,414 by stars

Chart

Latest

Affected images

Radar Score

defectdojodefectdojo

1.9.52

1 of 4 See more

defectdojo defectdojo 1.9.52

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
defectdojo/defectdojo-django :3.3.100	c597abdbb535	perl@5.40.1-6	no fix listed

Open the chart page →

2,400

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,200

dyff-apidyff-api

0.57.5

1 of 1 See more

dyff-api dyff-api 0.57.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,336

edgelessdbedgelesssys

0.3.2

1 of 1 See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

4,871

zabbix-agentfermosit

0.0.5

1 of 1 See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,414

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

5,305

flyte-binaryflyte

2.0.48

1 of 4 See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,723

rsshubgabe565

0.8.0

1 of 3 See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
diygod/rsshub :latest	1d4b508b6357	perl@5.40.1-6	no fix listed

Open the chart page →

1,739

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

22,792

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,647

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

14,004

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

9,669

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,221

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,671

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

11,900

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	perl@5.40.1-6	no fix listed

Open the chart page →

5,639

apimgraviteeio

4.12.19

2 of 4 See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	perl@5.40.1-6	no fix listed
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	perl@5.40.1-6	no fix listed

Open the chart page →

4,852

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

1,827

terrariahalkeye

0.4.2

1 of 2 See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ryshe/terraria :latest	b1c89f7f359a	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,190

netbirdhelmforge

1.0.10

2 of 4 See more

netbird helmforge 1.0.10

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
netbirdio/netbird-server :0.78.1	3086534361a1	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

3,035

redishelmforge

3.0.0

1 of 1 See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

978

typesensehmphu

0.1.6

1 of 1 See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
typesense/typesense :0.23.0	3accb727cbe2	perl@5.22.1-9ubuntu0.9	no fix listed

Open the chart page →

3,876

infrahub-enterpriseinfrahub-enterprise

4.19.2

4 of 5 See more

infrahub-enterprise infrahub-enterprise 4.19.2

4 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	no fix listed
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	perl@5.40.1-6	no fix listed

Open the chart page →

10,625

coreinstill-ai

0.1.75

3 of 15 See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
instill/artifact-backend :b28766a	c4a393e601ed	perl@5.40.1-6	no fix listed
instill/mgmt-backend :d0933d4	ebe12f77a3f9	perl@5.40.1-6	no fix listed
instill/model-backend :611f0f2	e980125e5ba5	perl@5.40.1-6	no fix listed

Open the chart page →

31,122

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,363

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

4,526

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

7,378

webdavk8s-webdav

0.0.7

1 of 1 See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :2.4	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

1,703

klancesklances

0.1.4

1 of 1 See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nicolargo/klances :0.1.3	74d6d33376eb	perl@5.40.1-6	no fix listed

Open the chart page →

1,715

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :6	143f7bfc2358	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,303

radondb-mysqlkubesphere-test

1.0.1

1 of 3 See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,384

kubevpnkubevpn-charts

2.11.7

1 of 1 See more

kubevpn kubevpn-charts 2.11.7

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/kubenetworks/kubevpn :v2.11.7	cce8ff866f60	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,626

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

11,675

lightsteplightstepsatellite

1.2.4

1 of 1 See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

15,340

kafdroplsst-sqre

0.1.3

1 of 1 See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,944

mariadbmariadb

0.4.0

1 of 1 See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :10.11	ce66c7be32a0	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

2,458

kubecostmesosphere-stable

0.37.5

2 of 9 See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30.5	744f84cf7493	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

17,799

mogenius-operatormogenius

2.29.0

1 of 2 See more

mogenius-operator mogenius 2.29.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.1	64e361b630ec	perl@5.40.1-6	no fix listed

Open the chart page →

956

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.5.0	42a8200d3597	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

4,077

observalobserval

1.13.1

3 of 8 See more

observal observal 1.13.1

3 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.3	810861a2e2d0	perl@5.34.0-3ubuntu1.7	no fix listed
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	no fix listed
ghcr.io/observal/observal-api :1.13.1	153b8b893232	perl@5.40.1-6	no fix listed

Open the chart page →

5,916

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/openclaw/openclaw :2026.6.10	af7ea052cf21	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,244

oesopsmx

4.0.32

7 of 25 See more

oes opsmx 4.0.32

7 of the 25 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	perl@5.22.1-9ubuntu0.9	no fix listed
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	perl@5.40.1-6	no fix listed
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756

Open the chart page →

108,315

part-dbpart-db

0.1.2

1 of 1 See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jbtronics/part-db1 :latest	5db71f6db59d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,344

redispascaliske

2.1.0

1 of 1 See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.0.3	be0a135f1955	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,869

phpmyadminphpmyadmin

1.0.3

1 of 1 See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.3-apache	3a8a8d6b5289	perl@5.40.1-6	no fix listed

Open the chart page →

2,650

prometheus-prefect-exporterprefect

2026.8.7141024

1 of 1 See more

prometheus-prefect-exporter prefect 2026.8.7141024

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
prefecthq/prometheus-prefect-exporter :4.0.0	50d527a190ae	perl@5.40.1-6	no fix listed

Open the chart page →

1,022

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :1.27.4	09369da6b103	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,465

repoflowrepoflow-helm-public

0.9.1

3 of 8 See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hasura/graphql-engine :v2.48.10	f6c1c4b957d2	perl@5.34.0-3ubuntu1.5	no fix listed
library/elasticsearch :8.15.0	310b9fc03b06	perl@5.30.0-9ubuntu0.5	no fix listed
library/postgres :16.2	4aea012537ed	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

13,647

nominatimrobjuz

6.4.1

2 of 4 See more

nominatim robjuz 6.4.1

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	perl@5.36.0-7+deb12u1	no fix listed
mediagis/nominatim :5.3.2	7923a8e67197	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

8,783

rocketmq-clusterrocketmq

12.6.0

1 of 2 See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

6,400

Container images carrying it

2,398 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
speckle/speckle-server :2.17.14-branch.testing.72707.921a5f8	49d10dcdfb91	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.18.12-branch.testing3.88744-f55b341	89a5872375f9	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.18.11-branch.testing2.88634-335d469	bf6a501b2210	perl@5.36.0-7+deb12u1	no fix listed	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	perl@5.36.0-7+deb12u1	no fix listed	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	perl@5.30.0-9ubuntu0.3	no fix listed	1
sslhep/servicex_app :v1.8.5	1d12f943cec5	perl@5.40.1-6	no fix listed	1
sslhep/servicex_code_gen_atlas_xaod :v1.8.5	e7aff7f97b89	perl@5.40.1-6	no fix listed	1
sslhep/servicex_code_gen_func_adl_uproot :v1.8.5	b01b8ee966ed	perl@5.40.1-6	no fix listed	1
sslhep/servicex_code_gen_python :v1.8.5	0e4175a4e1eb	perl@5.40.1-6	no fix listed	1
sslhep/servicex_code_gen_raw_uproot :v1.8.5	671980005c57	perl@5.40.1-6	no fix listed	1
sslhep/servicex_code_gen_topcp :v1.8.5	596db2abdd09	perl@5.40.1-6	no fix listed	1
sslhep/servicex-did-finder-atlasopenmagic :v1.8.5	54aaf1721d03	perl@5.40.1-6	no fix listed	1
sslhep/servicex-did-finder-cernopendata :v1.8.5	2cb88ceab5bb	perl@5.40.1-6	no fix listed	1
sslhep/servicex-did-finder-xrootd :v1.8.5	c284442b44e3	perl@5.40.1-6	no fix listed	1
stackstorm/st2actionrunner :3.8	88235ba70cad	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2api :3.8	6f56d239d280	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2auth :3.8	33ecfda16608	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2notifier :3.8	f190a6212195	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2rulesengine :3.8	259503496ff9	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2scheduler :3.8	b1de2055c362	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2stream :3.8	1c8904a3bf67	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2web :3.8	09989a26c8b7	perl@5.30.0-9ubuntu0.5	no fix listed	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	perl@5.30.0-9ubuntu0.5	no fix listed	1
stalwartlabs/stalwart :v0.16.14	25001929f36a	perl@5.40.1-6	no fix listed	1
stalwartlabs/stalwart :v0.16.22	388dcb75a707	perl@5.40.1-6	no fix listed	1
stalwartlabs/stalwart :v0.16.20	74ca4f7f6885	perl@5.40.1-6	no fix listed	1
stalwartlabs/stalwart :v0.15.5	dcf575db2d53	perl@5.40.1-6	no fix listed	1
stashapp/stash :latest	24dbd7607174	perl@5.30.0-9ubuntu0.2	no fix listed	1
stashapp/stash-box :latest	a534c8afdf39	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
statcan/ckan :2.9	3921305425b8	perl@5.30.0-9ubuntu0.2	no fix listed	1
statusim/nimbus-eth2 :multiarch-latest	6ccd9d382885	perl@5.36.0-7+deb12u3	no fix listed	1
steamcmd/steamcmd :latest	5028a25268e7	perl@5.40.1-7ubuntu0.1	no fix listed	1
strangebee/thehive :5.8.0-1	a7f7b05fba24	perl@5.36.0-7+deb12u3	no fix listed	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	perl@5.30.0-9ubuntu0.2	no fix listed	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	perl@5.36.0-7+deb12u1	no fix listed	1
supabase/edge-runtime :v1.74.0	2781daf92394	perl@5.36.0-7+deb12u3	no fix listed	1
supabase/edge-runtime :v1.59.0	eff9c554d649	perl@5.36.0-7+deb12u1	no fix listed	1
supabase/logflare :latest	49bfe526f1b4	perl@5.40.1-6	no fix listed	1
supabase/postgres-meta :v0.96.6	a84cc713585e	perl@5.36.0-7+deb12u3	no fix listed	1
supabase/postgres-meta :v0.84.2	d0a96973e9f1	perl@5.36.0-7+deb12u1	no fix listed	1
supabase/realtime :v2.102.3	aa1c92c0cf32	perl@5.36.0-7+deb12u3	no fix listed	1
supabase/realtime :v2.33.8	d207e6e23ad3	perl@5.36.0-7+deb12u1	no fix listed	1
supabase/realtime :latest	d3aa0c86c7b3	perl@5.40.1-6	no fix listed	1