CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,411; of 17,803 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,411 of 17,803 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,370
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,411 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmmyweather

1.3.11

3 of 7 See more

myweatherhelm myweather 1.3.11

3 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hecrom/myweatherangularclient :1.3.11	bb0372939c19	perl@5.36.0-7+deb12u1	no fix listed
library/rabbitmq :3-management	e582c0bc7766	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

18,084

my-nginxna-helm-charts

1.0.0

1 of 1 See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

dependency-tracknaj98

0.0.9

1 of 3 See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dependencytrack/apiserver :latest	f1da63ed610a	perl@5.40.1-6	no fix listed

Open the chart page →

2,501

smallandnaj98

0.0.5

1 of 1 See more

smalland naj98 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

3,036

pagesnarain

1.0.0

2 of 3 See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,261

pagesnarasimha-pages

1.0.0

2 of 3 See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,261

akauntingnas-helm-charts

1.0.3

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	perl@5.36.0-7	no fix listed

Open the chart page →

12,930

pagesnavin-brixton

1.0.0

2 of 3 See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,261

fahncsa

1.1.1

1 of 1 See more

fah ncsa 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/foldingathome :8.5.6	7477f6455f47	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

1,105

incorencsa

1.38.0

2 of 29 See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

15,518

smilencsa

1.1.0

7 of 23 See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	perl@5.30.0-9ubuntu0.4	no fix listed
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	perl@5.26.1-6ubuntu0.6	no fix listed
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	perl@5.36.0-7	no fix listed
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	perl@5.26.1-6ubuntu0.6	no fix listed
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	perl@5.36.0-7	no fix listed
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	perl@5.36.0-7	no fix listed
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	perl@5.36.0-7	no fix listed

Open the chart page →

265,360

uptime-kumancsa

1.7.2

1 of 1 See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

30,514

neosyncneosync

0.5.41

2 of 3 See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	perl@5.36.0-7+deb12u2	no fix listed
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

7,314

apineosync-api

0.5.41

1 of 1 See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,882

workerneosync-worker

0.5.41

1 of 1 See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,860

core-keeper-dedicatednerkho-helm-charts

0.1.1

1 of 1 See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
escaping/core-keeper-dedicated :latest	87fa79255962	perl@5.40.1-6	no fix listed

Open the chart page →

3,946

netbirdnetbird

1.9.0

1 of 4 See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
netbirdio/management :0.46.0	b0adc4ad4ec6	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4

Open the chart page →

6,464

netris-dpu-agentnetrisai

0.1.0

1 of 1 See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
netrisai/bare-metal-dpu-agent :4.7.0.003	c271efe749d0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

1,588

neuralbank-stackneuralbank-stack

0.1.0

1 of 4 See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :latest	4210a3296e7c	perl@5.40.1-6	no fix listed

Open the chart page →

5,342

neurofaceneuroface

1.4.2

1 of 3 See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
openvino/model_server :2025.2.1	1e7cd1d70cc1	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4

Open the chart page →

7,539

agent-controlnewrelic

0.0.92

1 of 1 See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
newrelic/newrelic-agent-control-cli :0.48.0	1a448492b55a	perl@5.40.1-6	no fix listed

Open the chart page →

3,917

agent-control-bootstrapnewrelic

1.8.16

1 of 1 See more

agent-control-bootstrap newrelic 1.8.16

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
newrelic/newrelic-agent-control-cli :1.24.0	47520b65d6b2	perl@5.40.1-6	no fix listed

Open the chart page →

992

nfl-walletnfl-wallet

0.1.3

1 of 4 See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	perl@0:1.28-423.el8_10 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-3.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb

Open the chart page →

13,457

nginx-appnginx-app

0.1.2

1 of 1 See more

nginx-app nginx-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

nginx-samplenginx-sample

0.5.0

1 of 1 See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :1.27.0	98f8ec75657d	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,320

nginx-sample-dependentnginx-sample-dependent

0.2.0

1 of 1 See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :1.27.0	98f8ec75657d	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,320

nginx-examplengrok-ingress-helm

0.3.0

1 of 2 See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

3,012

ciliumnicklasfrahm-cilium

0.7.4

2 of 6 See more

cilium nicklasfrahm-cilium 0.7.4

2 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

7,246

terraform-backendnimbolus

0.3.2

1 of 2 See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.2.2	4521b581dbdd	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,511

redisnineinfra-charts

0.7.5

1 of 1 See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,969

basenn-co

0.1.0

1 of 1 See more

base nn-co 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

base-jobnn-co

0.1.0

1 of 4 See more

base-job nn-co 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	2260313b31c8	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

753

node-appnode-app-lili

1.0.0

1 of 1 See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
laly9999/node-app :1	dd0e503913e1	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

10,320

node-debug-dashboardnode-debug-dashboard

0.3.2

1 of 1 See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,056

firehose-corenodeify

1.2.6

2 of 2 See more

firehose-core nodeify 1.2.6

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
sigp/lighthouse :latest-amd64	50f66cfebb6d	perl@5.34.0-3ubuntu1.5	no fix listed
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

6,602

firehose-ethereumnodeify

1.7.1

2 of 2 See more

firehose-ethereum nodeify 1.7.1

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
sigp/lighthouse :v8.1.3	44aa773dcf27	perl@5.34.0-3ubuntu1.5	no fix listed
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,716

substreams-tier-2nodeify

1.1.3

1 of 1 See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,768

app1node-web-app1

0.1.3

1 of 1 See more

app1 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

app2node-web-app1

0.1.3

1 of 1 See more

app2 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

nginx-chartnomadshk-nginx

0.1.0

1 of 1 See more

nginx-chart nomadshk-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

22,812

file-system-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,940

keycloak-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,686

logic-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

6,903

notes-admin-front-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
vlebediantsev/notes-admin-front :latest	007c6670ff48	perl@5.36.0-7	no fix listed

Open the chart page →

15,234

notes-project-fromt-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
vlebediantsev/notes-project-front :latest	945675fd2636	perl@5.36.0-7	no fix listed

Open the chart page →

15,306

registration-ms-front-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	perl@5.36.0-7	no fix listed

Open the chart page →

15,290

registration-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,966

user-data-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,923

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	perl@5.18.2-2ubuntu1	no fix listed

Open the chart page →

41,473

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	perl@5.36.0-7+deb12u2	no fix listed	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-03 :0.0.0-2026-08-17	3e56bdd1b90d	perl@5.40.1-6	no fix listed	1
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openappsec/openappsec-waf-webhook :1.1.34	5b979b962043	perl@5.40.1-6	no fix listed	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/openclaw/openclaw :2026.6.10	af7ea052cf21	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	perl@5.34.0-3ubuntu1.7	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :3.0.0-mcp	654f860148ba	perl@5.40.1-6	no fix listed	1
ghcr.io/open-telemetry/demo :3.0.0-chatbot	66ba53497f1f	perl@5.40.1-6	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :3.0.0-accounting	74c490f862da	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :3.0.0-agent	df5ee05e23e3	perl@5.40.1-6	no fix listed	1
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	perl@5.34.0-3ubuntu1.5	no fix listed	1
ghcr.io/open-webui/open-terminal :0.13.0-slim	dec44673c865	perl@5.40.1-6	no fix listed	1
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	perl@5.40.1-6	no fix listed	1