CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,411; of 17,792 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,411 of 17,792 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,370
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,411 by stars

Chart

Latest

Affected images

Radar Score

assemblylineassemblyline

7.4.20

5 of 12 See more

assemblyline assemblyline 7.4.20

5 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
cccs/assemblyline-core :4.7.4.stable20	098127270065	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-rust :4.7.4.stable20	2be5e6a57427	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-socketio :4.7.4.stable20	2b88493b62f7	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-ui :4.7.4.stable20	efa75509b854	perl@5.36.0-7+deb12u3	no fix listed
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

12,667

dltkvassist-iot-data-integrity-verification

0.2.0

3 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	perl@5.34.0-3ubuntu1.7	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	perl@5.22.1-9ubuntu0.5	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

78,035

dltflassist-iot-dlt-based-fl

0.2.0

3 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	perl@5.34.0-3ubuntu1.7	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	perl@5.22.1-9ubuntu0.5	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

78,035

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

9,422

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	perl@5.36.0-7	no fix listed

Open the chart page →

13,389

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/location_processing :latest	e9bae124095f	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

10,173

openapiassist-iot-open-api-management

0.2.2

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

18,426

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/buildpack-deps :curl	04907bdd423b	perl@5.40.1-6	no fix listed

Open the chart page →

8,052

sdn-controllerassist-iot-sdn-controller

2.4.0

1 of 1 See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/sdn_controller :2.4.0	ea254b6d8a31	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,995

sd-wanassist-iot-sd-wan

1.0.0

1 of 2 See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :4.2.21-bionic	9cb28f7291d9	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

5,379

smartorchestratorassist-iot-smart-orchestrator

4.0.0

4 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	perl@5.36.0-7	no fix listed
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

45,620

videoaugmentationassist-iot-video-augmentation

0.1.0

2 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	perl@5.30.0-9ubuntu0.3	no fix listed
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

14,001

account-monitorastria

0.0.1

1 of 1 See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,960

astrotrekastria

0.0.2

2 of 4 See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	perl@5.34.0-3ubuntu1.1	no fix listed
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

32,664

auctioneerastria

0.0.2

1 of 1 See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,209

evm-bridge-withdrawerastria

1.0.6

1 of 1 See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,184

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,019

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,019

flame-rollupastria

0.1.3

1 of 2 See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,717

graph-nodeastria

0.2.2

2 of 3 See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :latest	b0436347fb24	perl@5.36.0-7+deb12u1	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,572

hermesastria

0.7.1

1 of 1 See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,007

hyperlane-agentsastria

0.1.4

1 of 2 See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gcr.io/abacus-labs-dev/hyperlane-agent :10c0ab1-20231215-220639	f33e88324a40	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

2,547

sequencerastria

4.0.0

1 of 3 See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

6,344

sequencer-relayerastria

2.0.0

1 of 1 See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,960

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,449

auth0-operatorauth0-operator

1.4.12

1 of 1 See more

auth0-operator auth0-operator 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/alethic/auth0-operator-image :1.4.12	2468990a8521	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

748

autopushautopush

0.0.49

3 of 4 See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.2	c123e3715db6	perl@5.40.1-6	no fix listed
ghcr.io/wrenix/autopush-rs/autoconnect :1.84.2	85f93ced88b2	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint :1.84.2	d95e9a124eed	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,016

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

6,965

webappavzi-webapp

0.1.0

1 of 1 See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
avzini/web-app :latest	f40b30210ed0	perl@5.36.0-7	no fix listed

Open the chart page →

6,338

nas-appsawesome

2.0.0

1 of 8 See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

7,190

aws9helmaws9helm

0.1.0

4 of 4 See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
kuzwolka/aws9 :main	1ad759b961b1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :news	3e8880fbbb96	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :blog	4a7707410bf1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :shop	84a9d9766345	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

18,508

aws-web-service-proxifiedaws-web-service-proxified

1.8.0

1 of 2 See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

3,043

azp-agentazp-agent

1.2.0

1 of 1 See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
cheveo/azp-agent :1.0.2	82240f890884	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

3,319

azure-voteazure-sample

0.1.1

1 of 2 See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

5,255

ragflowbaboulinet

0.1.1

2 of 5 See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
infiniflow/infinity :v0.7.0	992c87a68612	perl@5.34.0-3ubuntu1.5	no fix listed
valkey/valkey :8	3fbd2e3e4b6e	perl@5.40.1-6	no fix listed

Open the chart page →

5,909

backstage-pyactionsbackstage-pyactions

0.1.0

1 of 1 See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mawad98/backstage-pyactions :demo	99422c56a274	perl@5.40.1-6	no fix listed

Open the chart page →

2,761

basic-auth-s3-nginxbasic-auth-s3-nginx

1.0.0

1 of 1 See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	perl@5.36.0-7	no fix listed

Open the chart page →

6,338

bookinfobasictechno

0.1.0

3 of 6 See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	perl@5.30.0-9ubuntu0.2	no fix listed
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	perl@5.30.0-9ubuntu0.2	no fix listed
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

20,840

my-nginx-appbassant-nginx-app

0.1.0

1 of 1 See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,861

mealiebdclark-helm-charts

0.1.15

1 of 1 See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	perl@5.40.1-6	no fix listed

Open the chart page →

4,071

wyoming-piperbdclark-helm-charts

0.1.4

1 of 1 See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-piper :2.5.2	7d39aafac409	perl@5.40.1-6	no fix listed

Open the chart page →

1,209

pangolinbdcode

0.14.1

1 of 1 See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
fosrl/pangolin :latest	83a55f933b4d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,929

helm-samplebehnambm-helm-chart

1.0.1

1 of 3 See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :7	71da9275c5f3	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,757

pagesberrutig-pages

1.0.0

2 of 3 See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,262

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

7,266

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,138

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

8,086

mx-notifierbicarus-labs

1.1.9

1 of 1 See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bicarus/mx-notifier :1.1.8	bed688d16762	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

3,771

huebigdata-charts

1.0.4

1 of 2 See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gethue/hue :4.10.0	5702b2c37ff9	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

23,022

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
baserow/backend :1.31.1	e0b3c8130b91	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,234

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	perl@5.34.0-3ubuntu1	no fix listed	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.4-thick	3c20900b5381	perl@5.40.1-6	no fix listed	1
ghcr.io/k8snetworkplumbingwg/multus-cni :latest-thick	b2136983532b	perl@5.40.1-6	no fix listed	1
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/karakeep-app/karakeep :0.33.2	b069e4307dec	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/klicktipp/csa-exporter :0.3.1	2c69513f9d85	perl@5.40.1-6	no fix listed	1
ghcr.io/klicktipp/snds-exporter :v0.2.4	a23b389cb3c5	perl@5.40.1-6	no fix listed	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	perl@5.26.1-6ubuntu0.6	no fix listed	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/kubelauncher/cassandra	b66aba320083	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/etcd	8ab954711fb9	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/kafka	43e1085cd0a8	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/keycloak	afe3bd73d7cf	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/kubectl	7280594a2f18	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/mariadb	e25056a6ec52	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/memcached	b599ca6b3ff3	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/mongodb	9bc37ed78a8b	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/mysql	e9609bd50416	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/openldap	8978aa002bc0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/kubelauncher/postgresql	1a27e11e5925	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/rabbitmq	ff5a36a457f1	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/kubelauncher/redis	bcd8e9a6224f	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubelauncher/zookeeper	7826e9caa461	perl@5.40.1-7ubuntu0.1	no fix listed	1
ghcr.io/kubenetworks/kubevpn :v2.11.8	1d953f6ba31c	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/kubevoip/kubevoip :v0.6.8	41c603a93642	perl@5.40.1-6	no fix listed	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	perl@5.40.1-6	no fix listed	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/lambdaclass/ethrex :latest	0c7896f060d6	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/leprechaun/owntracks-exporter :0.1.11-de545066	099e1abd6d08	perl@5.36.0-7	no fix listed	1
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/libretime/icecast :latest	3c98b92e9535	perl@5.40.1-6	no fix listed	1
ghcr.io/linkwarden/linkwarden :v2.16.3	0664c28a039b	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	perl@5.26.1-6ubuntu0.5	no fix listed	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/linuxserver/ombi :4.53.5	0caadf03b804	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	perl@5.34.0-3ubuntu1	no fix listed	1
ghcr.io/linuxserver/plex :version-1.41.4.9463-630c9f557	e6d2775e77ec	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	perl@5.26.1-6ubuntu0.5	no fix listed	1