CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,474; of 17,828 indexed, latest versions
Container images: 2,483; deployed by those charts
Fix available: 106 of 106; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,474 of 17,828 indexed charts deploy, on 2,483 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,461
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+5 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756, 4:5.32.1-474.module+el8.10.0+24099+8aa2f756	20
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	17
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	17
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	17
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	17
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	17
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	17
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	17
perl-Socketrpm	4:2.027-2.el8, 4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	17
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	17
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	17
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	17
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	17
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	16
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	16
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	16
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	16
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	16
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	16
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	16
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	16
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	16
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	16
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	16
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	16
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	15
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	14
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	14
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	14
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	14
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	14
perl-Archive-Tarrpm	2.30-1.el8, 2.38-6.el9, 2.38-6.el9.0.1	0:2.38-5.module+el8.10.0+24544+66a14188, 0:2.38-6.el9_8.2	3
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	3
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	2
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	2
perl-Encode-Localerpm	1.05-9.el8, 1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	2
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	2
perl-Algorithm-Diffrpm	1.1903-9.el8	0:1.1903-10.module+el8.10.0+21354+3ad137bb	1
perl-Archive-Ziprpm	1.60-3.el8	0:1.68-3.module+el8.10.0+21354+3ad137bb	1
perl-autodierpm	2.29-396.el8	0:2.34-1.module+el8.10.0+21354+3ad137bb	1
perl-bignumrpm	0.49-2.el8	0:0.51-439.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Bzip2rpm	2.26-6.el8	0:2.28-2.module+el8.10.0+21354+3ad137bb	1
perl-Config-Perl-Vrpm	0.30-1.el8	0:0.32-441.module+el8.10.0+21354+3ad137bb	1
perl-CPANrpm	2.18-397.el8	0:2.28-5.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Metarpm	2.150010-396.el8	0:2.150010-397.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Meta-Requirementsrpm	2.140-396.el8	0:2.140-397.module+el8.10.0+21354+3ad137bb	1
perl-CPAN-Meta-YAMLrpm	0.018-397.el8	0:0.018-1001.module+el8.10.0+21354+3ad137bb	1
perl-Data-OptListrpm	0.110-6.el8	0:0.110-7.module+el8.10.0+21354+3ad137bb	1
perl-Data-Sectionrpm	0.200007-3.el8	0:0.200007-8.module+el8.10.0+21354+3ad137bb	1
perl-DB_Filerpm	1.842-1.el8	0:1.855-1.module+el8.10.0+21354+3ad137bb	1
perl-Devel-PPPortrpm	3.36-5.el8	0:3.62-1.module+el8.10.0+21354+3ad137bb	1
perl-Devel-Sizerpm	0.81-2.el8	0:0.83-3.module+el8.10.0+21354+3ad137bb	1
perl-Envrpm	1.04-395.el8	0:1.04-396.module+el8.10.0+21354+3ad137bb	1
perl-experimentalrpm	0.019-2.el8	0:0.025-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-CBuilderrpm	1:0.280230-2.el8	1:0.280236-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-Installrpm	2.14-4.el8	0:2.20-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-MakeMakerrpm	1:7.34-1.el8	2:7.46-3.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-Manifestrpm	1.70-395.el8	1:1.73-1.module+el8.10.0+21354+3ad137bb	1
perl-ExtUtils-ParseXSrpm	1:3.35-2.el8	1:3.40-439.module+el8.10.0+21354+3ad137bb	1
perl-File-Fetchrpm	0.56-2.el8	0:1.00-1.module+el8.10.0+21354+3ad137bb	1
perl-File-HomeDirrpm	1.002-4.el8	0:1.004-6.module+el8.10.0+21354+3ad137bb	1
perl-File-Whichrpm	1.22-2.el8	0:1.23-4.module+el8.10.0+21354+3ad137bb	1
perl-Filterrpm	2:1.58-2.el8	2:1.60-1.module+el8.10.0+21354+3ad137bb	1
perl-Filter-Simplerpm	0.94-2.el8	0:0.96-457.module+el8.10.0+21354+3ad137bb	1
perl-inc-latestrpm	2:0.500-9.el8	2:0.500-10.module+el8.10.0+21354+3ad137bb	1
perl-IPC-Cmdrpm	2:1.02-1.el8	2:1.04-2.module+el8.10.0+21354+3ad137bb	1
perl-IPC-System-Simplerpm	1.25-17.el8	0:1.30-3.module+el8.10.0+21354+3ad137bb	1
perl-IPC-SysVrpm	2.07-397.el8	0:2.09-1.module+el8.10.0+21354+3ad137bb	1
perl-JSON-PPrpm	1:2.97.001-3.el8	1:4.04-2.module+el8.10.0+21354+3ad137bb	1
perl-Locale-Maketextrpm	1.28-396.el8	0:1.29-440.module+el8.10.0+21354+3ad137bb	1
perl-local-librpm	2.000024-2.el8	0:2.000024-7.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigIntrpm	1:1.9998.11-5.el8	1:1.9998.18-1.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigInt-FastCalcrpm	0.500.600-6.el8	0:0.500.900-1.module+el8.10.0+21354+3ad137bb	1
perl-Math-BigRatrpm	0.2614-1.el8	0:0.2614-2.module+el8.10.0+21354+3ad137bb	1
perl-Module-Buildrpm	2:0.42.24-5.el8	2:0.42.31-5.module+el8.10.0+21354+3ad137bb	1
perl-Module-CoreListrpm	1:5.20181130-1.el8	1:5.20211020-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Loadrpm	1:0.32-395.el8	1:0.36-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Load-Conditionalrpm	0.68-395.el8	0:0.74-1.module+el8.10.0+21354+3ad137bb	1
perl-Module-Metadatarpm	1.000033-395.el8	0:1.000037-1.module+el8.10.0+21354+3ad137bb	1
perl-MRO-Compatrpm	0.13-4.el8	0:0.13-5.module+el8.10.0+21354+3ad137bb	1
perl-Package-Generatorrpm	1.106-11.el8	0:1.106-12.module+el8.10.0+21354+3ad137bb	1
perl-Params-Checkrpm	1:0.38-395.el8	1:0.38-396.module+el8.10.0+21354+3ad137bb	1
perl-Params-Utilrpm	1.07-22.el8	0:1.102-2.module+el8.10.0+21354+3ad137bb	1
perl-perlfaqrpm	5.20180605-1.el8	0:5.20210520-1.module+el8.10.0+21354+3ad137bb	1
perl-PerlIO-via-QuotedPrintrpm	0.08-395.el8	0:0.09-1.module+el8.10.0+21354+3ad137bb	1
perl-Perl-OSTyperpm	1.010-396.el8	0:1.010-397.module+el8.10.0+21354+3ad137bb	1
perl-Pod-Checkerrpm	4:1.73-395.el8	4:1.74-1.module+el8.10.0+21354+3ad137bb	1
perl-Pod-Parserrpm	1.63-396.el8	0:1.63-1001.module+el8.10.0+21354+3ad137bb	1
perl-Software-Licenserpm	0.103013-2.el8	0:0.103014-5.module+el8.10.0+21354+3ad137bb	1
perl-Sub-Exporterrpm	0.987-15.el8	0:0.987-17.module+el8.10.0+21354+3ad137bb	1
perl-Sub-Installrpm	0.928-14.el8	0:0.928-15.module+el8.10.0+21354+3ad137bb	1
perl-Sys-Syslogrpm	0.35-397.el8	0:0.36-1.module+el8.10.0+21354+3ad137bb	1
perl-Test-Harnessrpm	1:3.42-1.el8	1:3.42-2.module+el8.10.0+21354+3ad137bb	1
perl-Test-Simplerpm	1:1.302135-1.el8	3:1.302181-2.module+el8.10.0+21354+3ad137bb	1
perl-Text-Balancedrpm	2.03-395.el8	0:2.04-1.module+el8.10.0+21354+3ad137bb	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: RHSA-2026:49524, USN-8684-1

Charts affected

2,474 by stars

Chart

Latest

Affected images

Radar Score

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	perl@5.40.1-6	no fix listed

Open the chart page →

5,685

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	perl@5.36.0-7+deb12u1	no fix listed
library/couchdb :3.4.2	2817ad50b5c5	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

17,204

cosmocosmo-platform

0.20.0

5 of 10 See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	perl@5.36.0-7+deb12u1	no fix listed
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

29,743

crossviewcrossview

4.6.0

1 of 2 See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :latest	86c951e05bf5	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

1,433

dask-kubernetes-operatordask

2026.3.0

1 of 1 See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	perl@5.40.1-6	no fix listed

Open the chart page →

9,426

deepflowdeepflow

6.2.201

1 of 8 See more

deepflow deepflow 6.2.201

1 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

16,073

defectdojodefectdojo

1.9.53

1 of 4 See more

defectdojo defectdojo 1.9.53

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
defectdojo/defectdojo-django :3.3.200	1cee5281e176	perl@5.40.1-6	no fix listed

Open the chart page →

2,679

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,273

dyff-apidyff-api

0.57.5

1 of 1 See more

dyff-api dyff-api 0.57.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,365

edgelessdbedgelesssys

0.3.2

1 of 1 See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	perl@5.30.0-9ubuntu0.3	no fix listed

Open the chart page →

4,913

zabbix-agentfermosit

0.0.5

1 of 1 See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

2,458

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	perl@5.30.0-9ubuntu0.4	no fix listed

Open the chart page →

5,344

flyte-binaryflyte

2.0.49

1 of 4 See more

flyte-binary flyte 2.0.49

1 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,018

rsshubgabe565

0.8.0

1 of 3 See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
diygod/rsshub :latest	22845ada2f14	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

1,430

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,710

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

9,872

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,330

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

10,899

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	perl@5.26.1-6ubuntu0.7	no fix listed

Open the chart page →

12,022

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	perl@5.40.1-6	no fix listed

Open the chart page →

5,692

apimgraviteeio

4.12.20

2 of 4 See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
graviteeio/apim-gateway :4.12.20-debian	8f1a14449381	perl@5.40.1-6+deb13u1	no fix listed
graviteeio/apim-management-api :4.12.20-debian	d30d085395ca	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

4,290

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

1,965

terrariahalkeye

0.4.2

1 of 2 See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ryshe/terraria :latest	b1c89f7f359a	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

4,294

netbirdhelmforge

1.0.10

2 of 4 See more

netbird helmforge 1.0.10

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
netbirdio/netbird-server :0.78.1	3086534361a1	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

3,130

redishelmforge

3.0.0

1 of 1 See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

1,008

typesensehmphu

0.1.6

1 of 1 See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
typesense/typesense :0.23.0	3accb727cbe2	perl@5.22.1-9ubuntu0.9	no fix listed

Open the chart page →

3,919

infrahub-enterpriseinfrahub-enterprise

4.19.2

4 of 5 See more

infrahub-enterprise infrahub-enterprise 4.19.2

4 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	perl@5.36.0-7+deb12u1	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	perl@5.36.0-7+deb12u2	no fix listed
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	perl@5.40.1-6	no fix listed

Open the chart page →

10,755

coreinstill-ai

0.1.75

3 of 15 See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
instill/artifact-backend :b28766a	c4a393e601ed	perl@5.40.1-6	no fix listed
instill/mgmt-backend :d0933d4	ebe12f77a3f9	perl@5.40.1-6	no fix listed
instill/model-backend :611f0f2	e980125e5ba5	perl@5.40.1-6	no fix listed

Open the chart page →

31,052

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4

Open the chart page →

4,587

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

4,710

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

7,566

webdavk8s-webdav

0.0.7

1 of 1 See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/httpd :2.4	454942557d44	perl@5.40.1-6+deb13u1	no fix listed

Open the chart page →

1,247

klancesklances

0.1.4

1 of 1 See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/nicolargo/klances :0.1.3	74d6d33376eb	perl@5.40.1-6	no fix listed

Open the chart page →

1,763

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :6	e7b96daa9a18	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,310

radondb-mysqlkubesphere-test

1.0.1

1 of 3 See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,427

kubevpnkubevpn-charts

2.11.9

1 of 1 See more

kubevpn kubevpn-charts 2.11.9

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/kubenetworks/kubevpn :v2.11.9	3feb9da85270	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,687

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	perl@5.30.0-9ubuntu0.5	no fix listed

Open the chart page →

56,636

lightsteplightstepsatellite

1.2.4

1 of 1 See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	perl@5.22.1-9ubuntu0.6	no fix listed

Open the chart page →

15,570

kafdroplsst-sqre

0.1.3

1 of 1 See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	perl@5.30.0-9ubuntu0.2	no fix listed

Open the chart page →

7,999

mariadbmariadb

0.4.0

1 of 1 See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :10.11	7f22313fc130	perl@5.34.0-3ubuntu1.9	no fix listed

Open the chart page →

2,375

kubecostmesosphere-stable

0.37.5

2 of 9 See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30.5	744f84cf7493	perl@5.36.0-7+deb12u1	no fix listed
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

17,975

mogenius-operatormogenius

2.30.0

1 of 2 See more

mogenius-operator mogenius 2.30.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
valkey/valkey :9.1.2	c123e3715db6	perl@5.40.1-6	no fix listed

Open the chart page →

957

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.5.0	42a8200d3597	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

4,275

mariadbnicholaswilde

1.0.6

1 of 1 See more

mariadb nicholaswilde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/mariadb :version-110.4.21mariabionic	7a94d7e89f52	perl@5.26.1-6ubuntu0.5	no fix listed

Open the chart page →

9,709

observalobserval

1.13.1

3 of 8 See more

observal observal 1.13.1

3 of the 8 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.3	810861a2e2d0	perl@5.34.0-3ubuntu1.7	no fix listed
library/postgres :16	f1c3376c26f2	perl@5.40.1-6	no fix listed
ghcr.io/observal/observal-api :1.13.1	153b8b893232	perl@5.40.1-6	no fix listed

Open the chart page →

6,243

oesopsmx

4.0.32

7 of 25 See more

oes opsmx 4.0.32

7 of the 25 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	perl@5.22.1-9ubuntu0.9	no fix listed
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	perl@5.40.1-6	no fix listed
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	perl@0:5.74-473.module+el8.10.0+21354+3ad137bb	0:5.74-474.module+el8.10.0+24099+8aa2f756

Open the chart page →

101,240

part-dbpart-db

0.1.2

1 of 1 See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jbtronics/part-db1 :latest	fd68338829ed	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,417

redispascaliske

2.1.0

1 of 1 See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.0.3	be0a135f1955	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

1,893

phpmyadminphpmyadmin

1.0.3

1 of 1 See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.3-apache	3a8a8d6b5289	perl@5.40.1-6	no fix listed

Open the chart page →

2,728

prometheus-prefect-exporterprefect

2026.9.16201226

1 of 1 See more

prometheus-prefect-exporter prefect 2026.9.16201226

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
prefecthq/prometheus-prefect-exporter :4.1.0	6e0e79cabdc2	perl@5.40.1-6	no fix listed

Open the chart page →

858

Container images carrying it

2,483 by charts deploying them

A fixed version is listed for 106 of the 106 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/poundex/tekton-stash-and-cache :0.2.2	e854423caa09	perl@5.40.1-7ubuntu0.1	no fix listed	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	perl@0:1.28-420.el8 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Data-Dumper@2.167-399.el8 perl-Digest@1.17-395.el8 perl-Digest-MD5@2.55-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-IO-Socket-IP@0.39-5.el8 perl-libnet@3.11-3.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8 perl-URI@1.73-3.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 0:2.174-440.module+el8.10.0+21354+3ad137bb 0:1.20-1.module+el8.10.0+21354+3ad137bb 0:2.58-1.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:0.41-2.module+el8.10.0+21354+3ad137bb 0:3.13-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb 0:1.76-5.module+el8.10.0+21354+3ad137bb	1
quay.io/seamware/onboarding :0.2.2	b406475f9f00	perl@5.36.0-7+deb12u3	no fix listed	1
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	perl@5.36.0-7+deb12u3	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	perl@5.36.0-7	no fix listed	1
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/dyff/dyff-orchestrator :0.22.19	9bd5d93aaff7	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/dyff/workflows-aggregator :0.16.9	b7984253b128	perl@5.40.1-7ubuntu0.1	no fix listed	1
registry.gitlab.com/dyff/workflows-sink :0.16.3	564718e28931	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/egos-tech/smtp :latest	df842ed79211	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	perl@5.36.0-7+deb12u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/certificates :v19.4.0	1c38ad710b0c	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitaly :v19.4.0	704cd68566af	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base :v19.4.0	696d798a5c85	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry :v4.40.2-gitlab	dc1a8972c640	perl@5.36.0-7+deb12u3	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter :17.0.2	6645e014f75d	perl@5.40.1-6+deb13u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.5.5-gitlab2	5b7636dfba3f	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell :v14.57.3	aca1bb3d5b7e	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee :v19.4.0	2256b49461fa	perl@5.40.1-6+deb13u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/kubectl :v19.4.0	48ee51dd67d4	perl@5.40.1-6	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	perl@5.30.0-9ubuntu0.2	no fix listed	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	perl@5.40.1-6	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	perl@5.36.0-7	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	perl@5.36.0-7+deb12u1	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	perl@5.36.0-7+deb12u2	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	perl@5.36.0-7+deb12u3	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	perl@5.36.0-7+deb12u1	no fix listed	1