CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,411; of 17,803 indexed, latest versions
Container images: 2,391; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,411 of 17,803 indexed charts deploy, on 2,391 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,370
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,411 by stars

Chart

Latest

Affected images

Radar Score

glpiglpi-chart

0.1.1

3 of 3 See more

glpi glpi-chart 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :latest	dd9b303aed4f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/phpmyadmin :latest	3a8a8d6b5289	perl@5.40.1-6	no fix listed
vdiogov/glpi-conteiner :latest	6945f84f0058	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

12,444

goofy-chartgoofy-chart

0.1.0

1 of 1 See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

platformgoofy-chart

0.1.0

1 of 1 See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
devopsgoofy/k8s-platform :latest	ad865312099f	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,832

googly-logingoogly-login

0.1.0

1 of 2 See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	no fix listed

Open the chart page →

1,686

Governify-Bluejaygovernify

0.1.0

2 of 12 See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

22,704

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

24,493

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	perl@5.34.0-3ubuntu1.3	no fix listed
library/cassandra :3.11.6	5aa8400b4b3b	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

19,370

kubernetes-dashboardgpg-dev

7.5.0

1 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/kong :3.6	a42d2b4503e7	perl@5.34.0-3ubuntu1.4	no fix listed

Open the chart page →

6,092

openclawgpg-dev

1.5.36

1 of 2 See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
chromedp/headless-shell :148.0.7778.97	313ed7255ae1	perl@5.40.1-6	no fix listed

Open the chart page →

1,684

opentelemetry-demogpg-dev

0.33.8

9 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	perl@5.34.0-3ubuntu1.3	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

49,771

video-analytics-demogpu-operator

0.1.9

2 of 3 See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
anguda/ant-media :2.5	c435285fc241	perl@5.30.0-9ubuntu0.3	no fix listed
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

15,853

video-analytics-demo-l4tgpu-operator

0.1.3

1 of 3 See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

grafana-samplinggrafana

1.1.7

1 of 2 See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

3,403

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

78,760

gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server

1.3.11

1 of 1 See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	perl@5.34.0-3ubuntu1.5	no fix listed

Open the chart page →

4,693

grayloggraylog

1.0.2

2 of 4 See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
graylog/graylog :6.1.10	19de1aff48c2	perl@5.34.0-3ubuntu1.3	no fix listed
library/mongo :8	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

5,389

gridgain9gridgain

1.1.10

1 of 2 See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/debian :12.12-slim	d5d3f9c23164	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,247

routergroundcover

1.12.375

2 of 7 See more

router groundcover 1.12.375

2 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	perl@5.34.0-3ubuntu1.4	no fix listed
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	perl@5.40.1-6+e4	5.40.1-6+e6

Open the chart page →

6,154

librechat-exporterhajowieland

1.0.0

1 of 1 See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,327

rag-apihajowieland

1.0.0

1 of 1 See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite :latest	f9f34c8ed688	perl@5.40.1-6	no fix listed

Open the chart page →

1,742

web-checkhajowieland

1.0.1

1 of 1 See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

9,541

hatchet-apihatchet

0.19.0

1 of 4 See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,726

hatchet-hahatchet

0.19.0

3 of 8 See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

7,649

hatchet-stackhatchet

0.19.0

3 of 8 See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

7,649

hawk-envoy-pluginhawk

0.1.0

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
kong/httpbin :latest	a6ac46531193	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

61,394

web-charthcpark-ktcloudlab

0.1.0

1 of 1 See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

6,762

heliconehelicone

0.1.42

3 of 14 See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	perl@5.34.0-3ubuntu1.1	no fix listed
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	perl@5.30.0-9ubuntu0.5	no fix listed
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	perl@5.36.0-7	no fix listed

Open the chart page →

72,363

helixhelix

1.4.3

1 of 2 See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,766

test-apphellnet

0.1.1

1 of 1 See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

hello-worldhello-world-ppony

0.3.0

1 of 1 See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :1.25.4	9ff236ed47fe	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,837

7dtdhelm-7dtd

0.1.0

1 of 1 See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	perl@5.26.1-6ubuntu0.6	no fix listed

Open the chart page →

62,635

my_web1helm-chart-by-piyush

0.1.0

1 of 1 See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

1,733

pageshelm-chart-repos-camden

1.0.0

2 of 3 See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,261

esphomehelm-chart-roei

2025.3.0

1 of 1 See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
esphome/esphome :2025.3.0	def8b6e4f517	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

6,041

home-assistant-matter-hubhelm-chart-roei

3.0.2

1 of 1 See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
luligu/matterbridge :3.0.2	8f97884bebc2	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

3,855

iofoghelm-charts

0.1.1

1 of 3 See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
iofog/router :2.0.1	7260cf861479	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

24,223

nginx-charthelm-chart-sample-app

0.1.0

1 of 1 See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
rraahul/test :latest	bfe2c1183bc0	perl@5.34.0-3ubuntu1.2	no fix listed

Open the chart page →

4,614

kube-downscalerhelm-charts-nr

0.7.6

1 of 1 See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	perl@5.36.0-7	no fix listed

Open the chart page →

4,338

locusthelm-charts-nr

0.32.4

1 of 1 See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
locustio/locust :2.32.2	a0d4b88e42c1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,843

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,489

supersethelm-charts-nr

1.1.3

1 of 1 See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/superset :latest	16b50bbef664	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,351

hello-world-charthelm-chart-test-hello-world

0.1.0

1 of 1 See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

mywebhelmchartwebapp

0.0.5

1 of 1 See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :latest	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

1,733

my-apphelm-demo8564

0.2.7

1 of 2 See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,879

chart-bookhelm-deploy-book

0.1.0

1 of 3 See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dannielkil/book-frontend :latest	937993927694	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

9,110

affinehelmforge

1.0.0

3 of 3 See more

affine helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed
pgvector/pgvector :0.8.6-pg16-bookworm	ccc6e83d6e35	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/toeverything/affine :0.27.4	b649f5ce2384	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,182

alfiohelmforge

1.2.12

1 of 3 See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,151

apachehelmforge

1.0.6

1 of 1 See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :2.4.68	979c38c2228d	perl@5.40.1-6	no fix listed

Open the chart page →

1,733

appwritehelmforge

2.0.0

2 of 5 See more

appwrite helmforge 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
appwrite/new :1.1.96-self-hosted	af65a77db50e	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

4,769

Container images carrying it

2,391 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sikalabs/hello-world-server :latest	cf8538bf6489	perl@5.40.1-6	no fix listed	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	perl@5.40.1-6	no fix listed	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	perl@5.30.0-9ubuntu0.3	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	perl@5.30.0-9ubuntu0.3	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	perl@5.30.0-9ubuntu0.3	no fix listed	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/squent/kuma-ingress-watcher :1.7.0	14d45b2a1f00	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/stac-utils/stac-fastapi-pgstac :7.0.0	8b026c47cc1b	perl@5.40.1-6+deb13u1	no fix listed	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	perl@5.30.0-9ubuntu0.2	no fix listed	1
ghcr.io/steadybit/agent :2.4.5	2bc7b260e44e	perl@5.40.1-6	no fix listed	1
ghcr.io/steadybit/extension-container :v1.8.1	ae79f958b479	perl@5.40.1-6+deb13u1	no fix listed	1
ghcr.io/steadybit/extension-host :v1.8.1	03a5ef26aac5	perl@5.40.1-6+deb13u1	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	perl@5.30.0-9ubuntu0.5	no fix listed	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
ghcr.io/sudo-kraken/3d-printing-cost-calculators :v1.1.1	220c5e4e1a3d	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sudo-kraken/authentik-webfinger-proxy :v1.1.1	e1351a977607	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sudo-kraken/fantasy-dice-chamber :v1.3.2	99fd4cb0f4fe	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sudo-kraken/finances-tracker :v1.1.1	c73527cde81c	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	perl@5.40.1-6	no fix listed	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	perl@5.36.0-7+deb12u1	no fix listed	1
ghcr.io/theduffman85/crowdsec-web-ui :2026.8.3	bfadbab9a72c	perl@5.40.1-6	no fix listed	1
ghcr.io/toeverything/affine :0.27.4	b649f5ce2384	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	perl@5.34.0-3ubuntu1.7	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	perl@5.34.0-3ubuntu1.7	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/trow-registry/trow :0.10.0	75b7d2dcdb91	perl@5.40.1-6	no fix listed	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4	1
ghcr.io/twigex/cospace :latest	e5ecfd607e42	perl@5.36.0-7+deb12u3	no fix listed	1
ghcr.io/unique-ag/ai/search-proxy :2026.38.0	aa6699b027bb	perl@5.40.1-6	no fix listed	1
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	perl@5.40.1-7build1	no fix listed	1
ghcr.io/vinny1892/octantis :latest	45459c0910fc	perl@5.40.1-6	no fix listed	1
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	perl@5.36.0-7+deb12u2	no fix listed	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	perl@5.34.0-3ubuntu1.3	no fix listed	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	perl@5.34.0-3ubuntu1.3	no fix listed	1