CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,417; of 17,787 indexed, latest versions
Container images: 2,395; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,417 of 17,787 indexed charts deploy, on 2,395 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,374
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,417 by stars

Chart

Latest

Affected images

Radar Score

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/iotdb :0.13.3-node	afa47bf1692a	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,749

kuma-ingress-watcherkuma-ingress-watcher

1.4.0

1 of 1 See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/squent/kuma-ingress-watcher :1.7.0	14d45b2a1f00	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,668

kubefarmkvaps

0.13.4

1 of 6 See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

12,477

opennebulakvaps

2.1.1

5 of 9 See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	perl@5.30.0-9ubuntu0.2	no fix listed
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

114,025

ohifkylesferrazza

0.1.0

1 of 2 See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jodogne/orthanc-plugins :latest	6ff510aa29c2	perl@5.40.1-6	no fix listed

Open the chart page →

3,524

overpass-apil4g

0.1.2

1 of 1 See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
wiktorn/overpass-api :latest	9bb5f4a9b54c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,551

api-gatewaylabs64io-helm-charts

0.12.0

1 of 1 See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
labs64/traefik-authproxy :0.0.3	dfc6086dfbce	perl@5.40.1-6	no fix listed

Open the chart page →

1,018

auditflowlabs64io-helm-charts

0.12.1

1 of 3 See more

auditflow labs64io-helm-charts 0.12.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
labs64/auditflowdigest-pinned	c7b26d3ca11c	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

1,487

checkoutlabs64io-helm-charts

0.8.0

1 of 3 See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,638

payment-gatewaylabs64io-helm-charts

0.8.0

2 of 2 See more

payment-gateway labs64io-helm-charts 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
labs64/payment-gateway :0.0.1	0c66feefca17	perl@5.40.1-7ubuntu0.1	no fix listed
library/postgres :18	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,708

langflow-idelangflow

0.1.2

1 of 2 See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
langflowai/langflow-frontend :latest	54f67f1961fe	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,011

lgtm-stacklgtm-stack

0.1.3

1 of 8 See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.18.1	0f4434c92b3e	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

5,614

flaresolverrlib42

2.0.0

1 of 1 See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

35,058

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

4,456

halitesql

0.1.5

1 of 2 See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/ha :latest	4029479b8ea7	perl@5.40.1-6	no fix listed

Open the chart page →

1,111

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4

Open the chart page →

7,915

clickhouseliwenhe

1.0.1

1 of 3 See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

6,766

music-assistant-serverlmatfy

0.1.9

1 of 1 See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.7.5	3522e8a7a8f0	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

7,216

locustlocust

0.1.4

1 of 1 See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hansehe/locust :1.1.0	bc8e45262bc4	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

2,763

plexluiscajl

1.0.1

1 of 2 See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

848

voice-biometricslumenvox

2.0.1

12 of 26 See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
lumenvox/cloud-assure-api :2.0.0	fcb9fb54a9fd	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-assure-identity :2.0.0	147854a3c916	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-audit :2.0.0	79428add7f38	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-binary-storage :2.0.0	53decadc102d	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-configuration :2.0.0	17fbce1a8bc6	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-deployment :2.0.0	ea8110886d38	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-engine-resource :2.0.0	e2e5abe27abc	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-management-api :2.0.0	b9a23345eabd	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-reporting :2.0.0	7a9ffdc2178a	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-reporting-api :2.0.0	dbbaf5462ad6	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-transaction :2.0.0	8b74f9d3ba09	perl@5.30.0-9ubuntu0.2	no fix listed
lumenvox/cloud-voice-verifier :2.0.0	14170ad34903	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

71,216

actualbudgetm0nsterrr-actualbudget

2.10.0

1 of 1 See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
actualbudget/actual-server :26.9.0	552beab3dec8	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,102

flaresolverrm0nsterrr-flaresolverr

2.4.1

1 of 1 See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.5.2	c80ae007ce2c	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,747

drillmagasin-drill

0.9.0

1 of 3 See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
merlos/zookeeper :3.9.3	a38fc7e09ed7	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,741

redismagefleet-redis

0.1.0

1 of 1 See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :7.2	74566c6910d1	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,061

magentomagento

3.2.3

3 of 12 See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	perl@5.30.0-9ubuntu0.5	no fix listed
library/rabbitmq :4.1.0-management	935b3f84c1e4	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4
library/redis :7.2	74566c6910d1	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

13,582

maptiler-servermaptiler

1.3.0

1 of 1 See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
maptiler/server :4.8.0	7e206140057b	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

3,014

Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacion

1.0.1

1 of 6 See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

19,192

mcpmcp-charts

0.0.23

3 of 7 See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	perl@5.40.1-6	no fix listed
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	perl@5.40.1-6	no fix listed
ghcr.io/maritimeconnectivity/identityregistry :latest	5009fd419742	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

6,994

jellyfinmedia-servarr

0.16.0

1 of 2 See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	perl@5.40.1-6	no fix listed

Open the chart page →

2,764

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,184

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	perl@5.40.1-6build1	no fix listed

Open the chart page →

11,108

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	perl@5.40.1-6	no fix listed

Open the chart page →

2,678

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
moreillon/food-manager :latest	e8fd856e593d	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

13,763

redminemt190502

7.3.4

2 of 3 See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redmine :6.1.2	04ac44a2595b	perl@5.40.1-6	no fix listed

Open the chart page →

7,552

12factormya

24.1.2

1 of 1 See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

my-react-appmy-react-app

0.1.5

1 of 1 See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

n3uronn3uron

0.3.5

1 of 1 See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
n3uronhub/n3uron :v1.22.4	423a0bdd9cb9	perl@5.40.1-6	no fix listed

Open the chart page →

1,896

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

3,729

spring-helmnaveenalla-springboot

1.0.0

1 of 2 See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

1,638

clowder2ncsa

1.9.7

5 of 12 See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	perl@5.36.0-7+deb12u1	no fix listed
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	perl@5.36.0-7+deb12u3	no fix listed
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	perl@5.36.0-7+deb12u3	no fix listed
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

37,441

nginx-chartnginx-chart-test

0.1.1

1 of 1 See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

helm-composenousefreak

0.1.3

2 of 2 See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	perl@5.30.0-9ubuntu0.2	no fix listed
library/wordpress :latest	5a93c470ae82	perl@5.40.1-6	no fix listed

Open the chart page →

14,324

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,051

onechartonechart-sl

0.76.0

1 of 1 See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	perl@5.36.0-7	no fix listed
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

14,862

dhcp-serveropencord

1.0.2

1 of 1 See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
networkboot/dhcpd :latest	e99bbfbd6fb2	perl@5.34.0-3ubuntu1	no fix listed

Open the chart page →

4,205

librechatopenshift

1.9.0

2 of 3 See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :8.0.20	098862b1339f	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,833

opentelemetry-demoopentelemetry-helm

0.41.1

7 of 34 See more

opentelemetry-demo opentelemetry-helm 0.41.1

7 of the 34 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	perl@5.40.1-6	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	perl@5.34.0-3ubuntu1.7	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-mcp	654f860148ba	perl@5.40.1-6	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-chatbot	66ba53497f1f	perl@5.40.1-6	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-accounting	74c490f862da	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
ghcr.io/open-telemetry/demo :3.0.0-agent	df5ee05e23e3	perl@5.40.1-6	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

22,678

openvaultopenvault

0.8.1

1 of 2 See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

6,899

Container images carrying it

2,395 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	perl@5.34.0-3ubuntu1.7	no fix listed	2
library/mongo :5.0	41108d183e97	perl@5.30.0-9ubuntu0.5	no fix listed	2
library/mongo :4.2.3	58b25d51baa1	perl@5.26.1-6ubuntu0.3	no fix listed	2
library/mongo :7	b096b4cb9269	perl@5.34.0-3ubuntu1.8	no fix listed	2
library/mongo :7.0	b6421fd6d1c5	perl@5.34.0-3ubuntu1.7	no fix listed	2
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	perl@5.40.1-6	no fix listed	2
library/nginx :latest	6e23479198b9	perl@5.40.1-6	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	perl@5.36.0-7+deb12u1	no fix listed	2
library/nginx :1.29.4	9dd288848f44	perl@5.40.1-6	no fix listed	2
library/phpmyadmin :5.2.1	6e75aa8f767c	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :17-bookworm	051f7b7b3abd	perl@5.36.0-7+deb12u3	no fix listed	2
library/postgres :16.1	09f23e02d766	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	perl@5.40.1-6	no fix listed	2
library/postgres :16.2	4aea012537ed	perl@5.36.0-7+deb12u1	no fix listed	2
library/postgres :18.0	6f3e42ad37de	perl@5.40.1-6	no fix listed	2
library/postgres :16.4	e62fbf9d3e2b	perl@5.36.0-7+deb12u1	no fix listed	2
library/python :3.14-slim :3-slim	cad9a2c87176	perl@5.40.1-6	no fix listed	2
library/python :3.7	eedf63967cdb	perl@5.36.0-7	no fix listed	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	2
library/rabbitmq :3.12.1-management	f020c06da226	perl@5.34.0-3ubuntu1.2	no fix listed	2
library/redis :7.2.3	a7cee7c8178f	perl@5.36.0-7+deb12u1	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	perl@5.36.0-7+deb12u3	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	perl@5.40.1-6	no fix listed	2
library/ubuntu :16.04 :xenial	1f1a2d56de1d	perl@5.22.1-9ubuntu0.9	no fix listed	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	perl@5.40.1-6	no fix listed	2
library/zookeeper :3.9.5	f258365d4882	perl@5.34.0-3ubuntu1.7	no fix listed	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	no fix listed	2
localstack/localstack-pro :latest	4aef81c53168	perl@5.40.1-6	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	perl@5.36.0-7+deb12u1	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	perl@5.36.0-7+deb12u3	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	perl@5.36.0-7+deb12u3	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	perl@5.36.0-7+deb12u3	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	perl@5.26.1-6ubuntu0.7	no fix listed	2
meshery/meshery :stable-latest	44b64ee128fb	perl@5.36.0-7+deb12u3	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	perl@5.30.0-9build1	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	perl@5.36.0-7+deb12u1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	perl@5.36.0-7	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	perl@5.36.0-7	no fix listed	2
nacos/nacos-server :latest	1c191c30c8cd	perl@5.40.1-7ubuntu0.1	no fix listed	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	perl@5.26.1-6	no fix listed	2
nginxinc/nginx-unprivileged :stable	cb92301e719d	perl@5.40.1-6	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	perl@5.40.1-6	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	perl@5.30.0-9ubuntu0.2	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	perl@5.22.1-9ubuntu0.6	no fix listed	2
opea/embedding-tei :1.0	5c9639de61c1	perl@5.36.0-7+deb12u1	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	perl@5.36.0-7+deb12u1	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	perl@5.36.0-7+deb12u1	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	perl@5.36.0-7+deb12u1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	perl@5.36.0-7+deb12u1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	perl@5.36.0-7+deb12u1	no fix listed	2