CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,430; of 17,821 indexed, latest versions
Container images: 2,425; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,430 of 17,821 indexed charts deploy, on 2,425 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,404
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,430 by stars

Chart

Latest

Affected images

Radar Score

msm-rtspmedia-streaming-mesh

0.0.2

2 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

18,713

rtspmedia-streaming-mesh

0.0.14

2 of 2 See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-client :latest	a7b60ec88285	perl@5.30.0-9ubuntu0.2	no fix listed
ciscolabs/rtsp-server :latest	b59fc10bb821	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

18,713

meerschaummeerschaum

0.2.0

1 of 1 See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bmeares/meerschaum :2.8.4	8e9c5bacaa82	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,968

memgptmemgpt

0.3.19

1 of 2 See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ankane/pgvector :v0.5.1	d3a9d8ac27bb	perl@5.36.0-7	no fix listed

Open the chart page →

5,936

memgraph-mcpmemgraph

1.0.0

1 of 1 See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
memgraph/mcp-memgraph :0.1.13	ecdf7faea3f7	perl@5.40.1-6	no fix listed

Open the chart page →

1,749

istiomesosphere

1.25.1

1 of 2 See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,488

istio-helm-cnimesosphere

1.25.1

1 of 1 See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/install-cni :1.29.0	ce27c9ce43c8	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,607

istio-helm-istiodmesosphere

1.25.1

1 of 2 See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/pilot :1.29.0	325156535773	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

3,854

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	perl@5.30.0-9build1	no fix listed

Open the chart page →

12,076

kube-prometheus-stackmesosphere

87.16.0

1 of 7 See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

7,524

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

5,710

nvidiamesosphere

0.4.4

2 of 2 See more

nvidia mesosphere 0.4.4

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	perl@5.30.0-9ubuntu0.2	no fix listed
nvidia/k8s-device-plugin :v0.9.0	964847cc3fd8	perl@5.22.1-9ubuntu0.9	no fix listed

Open the chart page →

10,532

testmesosphere

0.1.0

1 of 1 See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	perl@5.40.1-6	no fix listed

Open the chart page →

1,956

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	perl@5.22.1-9	no fix listed

Open the chart page →

19,326

istiomesosphere-stable

1.25.1

1 of 2 See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,488

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

3,359

istio-helm-istiodmesosphere-stable

1.23.6

1 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4

Open the chart page →

4,682

kommandermesosphere-stable

0.39.2

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	perl@5.30.0-9build1	no fix listed

Open the chart page →

68,465

kube-prometheus-stackmesosphere-stable

75.9.1

1 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

10,580

localpathprovisionermesosphere-stable

0.1.2

1 of 1 See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	perl@5.22.1-9ubuntu0.5	no fix listed

Open the chart page →

18,159

multusmesosphere-stable

0.1.1

1 of 1 See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.4-thick	3c20900b5381	perl@5.40.1-6	no fix listed

Open the chart page →

1,834

valkeymesosphere-stable

3.0.22

1 of 1 See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

2,681

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

8,972

elasticmicroboxlabs

0.3.0

1 of 1 See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.17.3	2cc40b15dff8	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

4,385

miot-harnessmicroboxlabs

0.7.0

1 of 1 See more

miot-harness microboxlabs 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/microboxlabs/miot-harness :0.1.0	d548e9ae4b84	perl@5.40.1-6	no fix listed

Open the chart page →

1,212

postgresmicroboxlabs

0.3.0

1 of 1 See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :16.6	557fea37a744	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,961

resource-servicemicroservices-learning

1.5.0

1 of 2 See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

5,223

song-servicemicroservices-learning

1.2.0

1 of 2 See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

4,691

apimicroslac

0.1.0

1 See more

api microslac 0.1.0

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/kong :3.6	a42d2b4503e7	perl@5.34.0-3ubuntu1.4	no fix listed

Open the chart page →

—

mw-kube-agent-v3middleware-labs

1.8.5

1 of 2 See more

mw-kube-agent-v3 middleware-labs 1.8.5

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.21.0	ff23f452813a	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,101

alluremidokura-community

0.1.3

1 of 2 See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

72,154

folding-at-homemidokura-community

0.0.3

1 of 1 See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/foldingathome :7.6.21	9a997426d71e	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,964

unifimidokura-community

0.0.6

1 of 1 See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :7.3.83	ab105cc50322	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

11,361

parent-chartmid-proje

0.1.0

1 of 3 See more

parent-chart mid-proje 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
youssef11gaber10/flask-service :latest	9c727fcfde76	perl@5.40.1-6	no fix listed

Open the chart page →

1,832

teimilvus-helm

1.6.0

1 of 1 See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,350

mini-blogmini-blog-helm

0.1.0

2 of 3 See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	perl@5.36.0-7+deb12u2	no fix listed
library/postgres :15	9b1d34adbce1	perl@5.40.1-6	no fix listed

Open the chart page →

13,314

MINTmint

8.0.2

4 of 15 See more

MINT mint 8.0.2

4 of the 15 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	perl@5.30.0-9ubuntu0.2	no fix listed
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

114,972

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
localstack/localstack-pro :latest	4aef81c53168	perl@5.40.1-6	no fix listed

Open the chart page →

10,793

standard-application-stackmintel

11.5.0

1 of 12 See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
localstack/localstack :latest	4abc29e923e5	perl@5.40.1-6	no fix listed

Open the chart page →

10,702

session-scalermiqm

0.1.0

1 of 1 See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
miqm/session-scaler :0.1.0	c5c211717d9b	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

3,236

helmmirasys-chart

0.1.0

3 of 4 See more

helm mirasys-chart 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
library/redis :latest	298e5b3bc566	perl@5.40.1-6	no fix listed
sepehrmdn/mirasys-assignment :1.0.1	2567228e33c8	perl@5.36.0-7+deb12u3	no fix listed