CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,411; of 17,792 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,411 of 17,792 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,370
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,411 by stars

Chart

Latest

Affected images

Radar Score

assemblylineassemblyline

7.4.20

5 of 12 See more

assemblyline assemblyline 7.4.20

5 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
cccs/assemblyline-core :4.7.4.stable20	098127270065	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-rust :4.7.4.stable20	2be5e6a57427	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-socketio :4.7.4.stable20	2b88493b62f7	perl@5.36.0-7+deb12u3	no fix listed
cccs/assemblyline-ui :4.7.4.stable20	efa75509b854	perl@5.36.0-7+deb12u3	no fix listed
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

12,667

dltkvassist-iot-data-integrity-verification

0.2.0

3 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	perl@5.34.0-3ubuntu1.7	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	perl@5.22.1-9ubuntu0.5	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

78,035

dltflassist-iot-dlt-based-fl

0.2.0

3 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	perl@5.34.0-3ubuntu1.7	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	perl@5.22.1-9ubuntu0.5	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

78,035

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

9,422

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	perl@5.36.0-7	no fix listed

Open the chart page →

13,389

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/location_processing :latest	e9bae124095f	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

10,173

openapiassist-iot-open-api-management

0.2.2

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

18,426

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/buildpack-deps :curl	04907bdd423b	perl@5.40.1-6	no fix listed

Open the chart page →

8,052

sdn-controllerassist-iot-sdn-controller

2.4.0

1 of 1 See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/sdn_controller :2.4.0	ea254b6d8a31	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,995

sd-wanassist-iot-sd-wan

1.0.0

1 of 2 See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :4.2.21-bionic	9cb28f7291d9	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

5,379

smartorchestratorassist-iot-smart-orchestrator

4.0.0

4 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	perl@5.36.0-7+deb12u1	no fix listed
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	perl@5.36.0-7	no fix listed
library/mongo :4.4.6	6efa05203990	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

45,620

videoaugmentationassist-iot-video-augmentation

0.1.0

2 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	perl@5.30.0-9ubuntu0.3	no fix listed
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

14,001

account-monitorastria

0.0.1

1 of 1 See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,960

astrotrekastria

0.0.2

2 of 4 See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	perl@5.34.0-3ubuntu1.1	no fix listed
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

32,664

auctioneerastria

0.0.2

1 of 1 See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,209

evm-bridge-withdrawerastria

1.0.6

1 of 1 See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,184

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,019

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,019

flame-rollupastria

0.1.3

1 of 2 See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,717

graph-nodeastria

0.2.2

2 of 3 See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :latest	b0436347fb24	perl@5.36.0-7+deb12u1	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,572

hermesastria

0.7.1

1 of 1 See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,007

hyperlane-agentsastria

0.1.4

1 of 2 See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gcr.io/abacus-labs-dev/hyperlane-agent :10c0ab1-20231215-220639	f33e88324a40	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

2,547

sequencerastria

4.0.0

1 of 3 See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

6,344

sequencer-relayerastria

2.0.0

1 of 1 See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,960

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,449

auth0-operatorauth0-operator

1.4.12

1 of 1 See more

auth0-operator auth0-operator 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/alethic/auth0-operator-image :1.4.12	2468990a8521	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

748

autopushautopush

0.0.49

3 of 4 See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.2	c123e3715db6	perl@5.40.1-6	no fix listed
ghcr.io/wrenix/autopush-rs/autoconnect :1.84.2	85f93ced88b2	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint :1.84.2	d95e9a124eed	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,016

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	perl@5.34.0-3ubuntu1.1	no fix listed

Open the chart page →

6,965

webappavzi-webapp

0.1.0

1 of 1 See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
avzini/web-app :latest	f40b30210ed0	perl@5.36.0-7	no fix listed

Open the chart page →

6,338

nas-appsawesome

2.0.0

1 of 8 See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

7,190

aws9helmaws9helm

0.1.0

4 of 4 See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
kuzwolka/aws9 :main	1ad759b961b1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :news	3e8880fbbb96	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :blog	4a7707410bf1	perl@5.36.0-7+deb12u1	no fix listed
kuzwolka/aws9 :shop	84a9d9766345	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

18,508

aws-web-service-proxifiedaws-web-service-proxified

1.8.0

1 of 2 See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

3,043

azp-agentazp-agent

1.2.0

1 of 1 See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
cheveo/azp-agent :1.0.2	82240f890884	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

3,319

azure-voteazure-sample

0.1.1

1 of 2 See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

5,255

ragflowbaboulinet

0.1.1

2 of 5 See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
infiniflow/infinity :v0.7.0	992c87a68612	perl@5.34.0-3ubuntu1.5	no fix listed
valkey/valkey :8	3fbd2e3e4b6e	perl@5.40.1-6	no fix listed

Open the chart page →

5,909

backstage-pyactionsbackstage-pyactions

0.1.0

1 of 1 See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mawad98/backstage-pyactions :demo	99422c56a274	perl@5.40.1-6	no fix listed

Open the chart page →

2,761

basic-auth-s3-nginxbasic-auth-s3-nginx

1.0.0

1 of 1 See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	perl@5.36.0-7	no fix listed

Open the chart page →

6,338

bookinfobasictechno

0.1.0

3 of 6 See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	perl@5.30.0-9ubuntu0.2	no fix listed
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	perl@5.30.0-9ubuntu0.2	no fix listed
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

20,840

my-nginx-appbassant-nginx-app

0.1.0

1 of 1 See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,861

mealiebdclark-helm-charts

0.1.15

1 of 1 See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	perl@5.40.1-6	no fix listed

Open the chart page →

4,071

wyoming-piperbdclark-helm-charts

0.1.4

1 of 1 See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-piper :2.5.2	7d39aafac409	perl@5.40.1-6	no fix listed

Open the chart page →

1,209

pangolinbdcode

0.14.1

1 of 1 See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
fosrl/pangolin :latest	83a55f933b4d	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,929

helm-samplebehnambm-helm-chart

1.0.1

1 of 3 See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :7	71da9275c5f3	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,757

pagesberrutig-pages

1.0.0

2 of 3 See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,262

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

7,266

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

5,138

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

8,086

mx-notifierbicarus-labs

1.1.9

1 of 1 See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bicarus/mx-notifier :1.1.8	bed688d16762	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

3,771

huebigdata-charts

1.0.4

1 of 2 See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gethue/hue :4.10.0	5702b2c37ff9	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

23,022

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
baserow/backend :1.31.1	e0b3c8130b91	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,234

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	perl@5.40.1-6	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	perl@5.40.1-6	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	perl@5.40.1-6	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	perl@5.40.1-6	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	perl@5.36.0-7	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	perl@5.40.1-6	no fix listed	1
ghcr.io/papra-hq/papra :26.6.2-rootless	a281cb44176d	perl@5.40.1-6	no fix listed	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/paradigmxyz/reth :v2.2.0	505fca5e87d6	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/paradigmxyz/reth :latest	68e76b32ad9a	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	perl@5.40.1-6	no fix listed	1
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	perl@5.26.1-6ubuntu0.5	no fix listed	1
ghcr.io/platformrelay/kollect :v0.20.0	c95fa31ead03	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	perl@5.40.1-6	no fix listed	1
ghcr.io/qovery/iam-eks-user-mapper :main	c41e3efc6097	perl@5.40.1-6	no fix listed	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	perl@5.40.1-6	no fix listed	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	perl@5.40.1-7build1	no fix listed	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend :0.6.4	6a04b43b8d9a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	perl@5.40.1-6	no fix listed	1
ghcr.io/retyc/retyc-k8s-csi :v0.2.0	1521d4baeb85	perl@5.40.1-6	no fix listed	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	perl@5.36.0-7	no fix listed	1
ghcr.io/rss-bridge/rss-bridge :latest	606896116558	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	perl@5.40.1-6	no fix listed	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	perl@5.40.1-6	no fix listed	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	perl@5.40.1-6	no fix listed	1
ghcr.io/securo-finance/securo-backend :0.15.1	62e030110745	perl@5.40.1-6	no fix listed	1
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/sergelogvinov/fluentd :1.19.3	3273d13f1e75	perl@5.40.1-6	no fix listed	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	perl@5.36.0-7+deb12u2	no fix listed	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	perl@5.34.0-3ubuntu1.4	no fix listed	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/shadrus/srebot :0.14.0	9b4415e937b2	perl@5.40.1-6	no fix listed	1
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	perl@5.36.0-7+deb12u3	no fix listed	1