CVE-2026-9538

High

Advisory

Published 26 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,397; of 17,790 indexed, latest versions
Container images: 2,370; deployed by those charts
Fix available: 42 of 42; affected packages

Red Hat Security Advisory: perl:5.32 security update

Carried by container images the latest versions of 2,397 of 17,790 indexed charts deploy, on 2,370 images.

Affected package	Affected versions	Fixed in	Images
perldeb	5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+47 more	5.38.2-3.2ubuntu0.4, 5.40.1-6+e6	2,349
perlrpm	0:1.28-416.el8, 0:1.28-417.el8_3, 0:1.28-419.el8_4.1, 0:1.28-420.el8+4 more	0:1.30-474.module+el8.10.0+24099+8aa2f756, 0:5.74-474.module+el8.10.0+24099+8aa2f756	19
perl-Carprpm	1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb	16
perl-constantrpm	1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb	16
perl-Exporterrpm	5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb	16
perl-File-Pathrpm	2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb	16
perl-parentrpm	1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb	16
perl-PathToolsrpm	3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb	16
perl-Scalar-List-Utilsrpm	3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb	16
perl-Socketrpm	4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb	16
perl-Text-Tabs+Wraprpm	2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb	16
perl-threadsrpm	1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb	16
perl-threads-sharedrpm	1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb	16
perl-Unicode-Normalizerpm	1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb	16
perl-Encoderpm	4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb	15
perl-File-Temprpm	0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb	15
perl-Getopt-Longrpm	1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb	15
perl-HTTP-Tinyrpm	0.074-1.el8, 0.074-1.el8_6.1, 0.074-2.el8, 0.074-2.el8_9.1+1 more	0:0.078-1.module+el8.10.0+21354+3ad137bb	15
perl-MIME-Base64rpm	3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Escapesrpm	1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb	15
perl-podlatorsrpm	4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Perldocrpm	3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Simplerpm	1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb	15
perl-Pod-Usagerpm	4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb	15
perl-Storablerpm	1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb	15
perl-Term-ANSIColorrpm	4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb	15
perl-Term-Caprpm	1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb	15
perl-Text-ParseWordsrpm	3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb	15
perl-Time-Localrpm	1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb	15
perl-Data-Dumperrpm	2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb	14
perl-Digestrpm	1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb	13
perl-Digest-MD5rpm	2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb	13
perl-IO-Socket-IPrpm	0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb	13
perl-libnetrpm	3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb	13
perl-URIrpm	1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb	13
perl-Archive-Tarrpm	2.38-6.el9, 2.38-6.el9.0.1	0:2.38-6.el9_8.2	2
perl-Thread-Queuerpm	3.13-1.el8	0:3.14-457.module+el8.10.0+21354+3ad137bb	2
perl-Compress-Raw-Bzip2rpm	2.081-1.el8	0:2.096-1.module+el8.10.0+21354+3ad137bb	1
perl-Compress-Raw-Zlibrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+21354+3ad137bb	1
perl-Digest-SHArpm	1:6.02-1.el8	1:6.02-2.module+el8.10.0+21354+3ad137bb	1
perl-Encode-Localerpm	1.05-10.module+el8.3.0+6498+9eecfe51	0:1.05-10.module+el8.10.0+21354+3ad137bb	1
perl-IO-Compressrpm	2.081-1.el8	0:2.096-2.module+el8.10.0+24402+ce90c7a0	1

OSV records: DEBIAN-CVE-2026-9538 RHSA-2026:48225 RLSA-2026:49525 UBUNTU-CVE-2026-9538 ECHO-e379-3651-bf29
Also known as: USN-8684-1

Charts affected

2,397 by stars

Chart

Latest

Affected images

Radar Score

countlyhelmforge

1.2.6

2 of 3 See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	perl@5.30.0-9ubuntu0.5	no fix listed
library/mongo :8.3.8	5211c51171f5	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

18,923

dawarichhelmforge

1.0.1

3 See more

dawarich helmforge 1.0.1

3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
freikin/dawarich :1.14.5	11826c67e4b1	perl@5.40.1-6+deb13u1	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed
postgis/postgis :18-3.6	7e00e8c3539f	perl@5.40.1-6	no fix listed

Open the chart page →

—

discount-bandithelmforge

2.0.8

1 of 3 See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	perl@5.40.1-6	no fix listed

Open the chart page →

29,852

druidhelmforge

1.3.6

2 of 4 See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/zookeeper :3.9.5	f258365d4882	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

8,598

drupalhelmforge

1.2.13

1 of 2 See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/drupal :11.4.6-php8.5-apache-bookworm	28f7931ecbcb	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,660

entehelmforge

1.0.2

2 of 4 See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
ghcr.io/ente/web :5ab0c5b4c7a89c4e470ef6f793600da33cebf35d	3f4864eb7f11	perl@5.40.1-6	no fix listed

Open the chart page →

4,227

fastmcp-serverhelmforge

1.7.4

1 of 1 See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
helmforge/fastmcp-server :0.11.2	fcb7017327d6	perl@5.40.1-6	no fix listed

Open the chart page →

3,294

generichelmforge

3.1.5

1 of 1 See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :1.31.5	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

ghosthelmforge

1.2.7

1 See more

ghost helmforge 1.2.7

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/ghost :6.63.0	e05bc1169fb2	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

—

hoppscotchhelmforge

1.1.11

1 of 2 See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,058

immichhelmforge

1.2.8

4 of 5 See more

immich helmforge 1.2.8

4 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed
ghcr.io/immich-app/immich-machine-learning :v3.1.0	5a0839dc5303	perl@5.36.0-7+deb12u3	no fix listed
ghcr.io/immich-app/immich-server :v3.1.0	b434cb9287ee	perl@5.40.1-6	no fix listed
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

11,080

jenkinshelmforge

1.0.9

1 of 1 See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-lts-jdk21	c1e4c349365f	perl@5.40.1-6	no fix listed

Open the chart page →

2,487

jupyterhubhelmforge

1.0.6

1 of 3 See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,350

komgahelmforge

1.4.15

1 of 1 See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
gotson/komga :1.26.3	6c2a967bbe9a	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

2,300

listmonkhelmforge

1.1.14

1 of 3 See more

listmonk helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,852

mcp-serverhelmforge

1.0.0

1 of 1 See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
helmforge/fastmcp-server :0.2.0	61f759a1421f	perl@5.40.1-6	no fix listed

Open the chart page →

3,442

medikeephelmforge

2.0.1

1 See more

medikeep helmforge 2.0.1

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

—

memcachedhelmforge

1.0.8

1 of 1 See more

memcached helmforge 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	75c93cc91e76	perl@5.40.1-6	no fix listed

Open the chart page →

1,064

metabasehelmforge

1.2.29

1 See more

metabase helmforge 1.2.29

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

—

middlewarehelmforge

1.2.6

3 of 4 See more

middleware helmforge 1.2.6

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed
middlewareeng/middleware :0.3.1	747d880812f1	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

9,704

moodlehelmforge

1.1.0

2 of 2 See more

moodle helmforge 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
moodlehq/moodle-php-apache :8.4-bookworm	922af5166835	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

5,911

netboxhelmforge

2.0.1

3 of 4 See more

netbox helmforge 2.0.1

3 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed
netboxcommunity/netbox :v4.6.10-5.0.2	91b823a05cb5	perl@5.40.1-7ubuntu0.1	no fix listed

Open the chart page →

4,321

nextcloudhelmforge

1.0.0

3 of 3 See more

nextcloud helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nextcloud :34.0.4-apache	de4ad9389386	perl@5.40.1-6	no fix listed
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

7,041

notediscoveryhelmforge

2.0.1

1 of 1 See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/gamosoft/notediscovery :0.31.5	c06aa0fa9a85	perl@5.40.1-6	no fix listed

Open the chart page →

1,238

opencuthelmforge

1.1.9

2 of 5 See more

opencut helmforge 1.1.9

2 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

3,751

paprahelmforge

1.0.0

1 of 1 See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/papra-hq/papra :26.6.2-rootless	a281cb44176d	perl@5.40.1-6	no fix listed

Open the chart page →

2,536

phpmyadminhelmforge

2.0.1

1 of 1 See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.2.3	42a200db07b4	perl@5.40.1-6	no fix listed

Open the chart page →

4,741

pimcorehelmforge

2.0.1

1 of 6 See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.3	dd9b303aed4f	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

3,200

qdranthelmforge

1.0.5

1 of 1 See more

qdrant helmforge 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.19.1	12364fe851b9	perl@5.40.1-6	no fix listed

Open the chart page →

818

reactive-resumehelmforge

1.0.0

2 of 4 See more

reactive-resume helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
ghcr.io/amruthpillai/reactive-resume :v5.3.0	c487ec5edcfe	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,986

ryothelmforge

1.0.0

2 of 2 See more

ryot helmforge 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	perl@5.36.0-7+deb12u2	no fix listed

Open the chart page →

5,916

strapihelmforge

2.3.14

1 of 3 See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,073

supersethelmforge

1.3.6

3 of 5 See more

superset helmforge 1.3.6

3 of the 5 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
apache/superset :6.1.0	16b50bbef664	perl@5.36.0-7+deb12u3	no fix listed
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

5,649

text-embeddings-inferencehelmforge

1.0.0

1 of 2 See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/huggingface/text-embeddings-inference :cpu-1.9.3	ad950d30878e	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

2,402

tomcathelmforge

1.0.6

1 of 2 See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/tomcat :11.0.25-jdk17-temurin-noble	9e1d2afa6898	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

1,224

twentyhelmforge

1.0.1

2 See more

twenty helmforge 1.0.1

2 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed
library/redis :8.10.1	298e5b3bc566	perl@5.40.1-6	no fix listed

Open the chart page →

—

uptime-kumahelmforge

1.5.13

1 See more

uptime-kuma helmforge 1.5.13

1 container image this version deploys carries CVE-2026-9538.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

—

wallabaghelmforge

1.3.6

1 of 3 See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	perl@5.40.1-6	no fix listed

Open the chart page →

2,773

zookeeperhelmforge

1.0.2

1 of 1 See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	f258365d4882	perl@5.34.0-3ubuntu1.7	no fix listed

Open the chart page →

3,142

myapphelmingapp

0.1.0

1 of 1 See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
muhammedgamal/fp23 :latest	74b4cd69b6fa	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

11,441

jellyfinhelm-l3st86

0.1.8

1 of 1 See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :latest	aefb67e6a7ff	perl@5.40.1-6	no fix listed

Open the chart page →

2,615

openaevhelm-openbas

2.0.5

3 of 7 See more

openaev helm-openbas 2.0.5

3 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.2-debian-12-r1	fac502149c40	perl@5.36.0-7+deb12u2	no fix listed
openaev/platform :3.260904.0	0a12ce8b3db9	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4

Open the chart page →

7,502

openbashelm-openbas

1.8.14

4 of 7 See more

openbas helm-openbas 1.8.14

4 of the 7 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	perl@5.36.0-7+deb12u2	no fix listed
bitnamilegacy/rabbitmq :4.1.2-debian-12-r1	fac502149c40	perl@5.36.0-7+deb12u2	no fix listed
openbas/caldera-server :5.1.0	a277796d9724	perl@5.36.0-7+deb12u1	no fix listed
openbas/platform :2.0.5	d986d80b0a75	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4

Open the chart page →

25,099

pageshelm-repo

1.0.0

2 of 3 See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	perl@5.30.0-9ubuntu0.2	no fix listed
flyway/flyway :6.4.4	22d97ceb0c47	perl@5.26.1-6ubuntu0.3	no fix listed

Open the chart page →

20,233

steampipehelm-steampipe

2.4.1

1 of 1 See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ghcr.io/devops-ia/steampipe :v2.4.1	a982103d91d3	perl@5.36.0-7+deb12u3	no fix listed

Open the chart page →

3,025

svacerhelm-svacer

0.6.0

1 of 1 See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
ispras/svacer :11-2-0	42aa9fa9f189	perl@5.34.0-3ubuntu1.4	no fix listed

Open the chart page →

6,076

my-nginxhelmtaiwo

0.1.0

1 of 1 See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	perl@5.40.1-6	no fix listed

Open the chart page →

1,839

samplehelmapphelmtraining

3.0.0

1 of 1 See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
praravind1801/helmimages :3.0.0	f29d637b9ce1	perl@5.36.0-7+deb12u1	no fix listed

Open the chart page →

5,114

nominatimheywood8-helm-charts

3.10.8

1 of 3 See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
mediagis/nominatim :4.2	d0eae7b51374	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

14,350

printserverhmediade

1.0.2

2 of 4 See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-9538.

Container image	Digest	Package	Fixed in
hmediade/printserver :latest	481a552c8e1c	perl@5.34.0-3ubuntu1.3	no fix listed
hmediade/printserver-init :latest	7f005eb6c718	perl@5.34.0-3ubuntu1.3	no fix listed

Open the chart page →

10,918

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 42 of the 42 affected packages.

Container image	Digest	Package	Fixed in	Used by
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	perl@5.40.1-6	no fix listed	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	perl@0:1.28-419.el8_4.1 perl-Carp@1.42-396.el8 perl-constant@1.33-396.el8 perl-Encode@4:2.97-3.el8 perl-Exporter@5.72-396.el8 perl-File-Path@2.15-2.el8 perl-File-Temp@0.230.600-1.el8 perl-Getopt-Long@1:2.50-4.el8 perl-HTTP-Tiny@0.074-1.el8 perl-MIME-Base64@3.15-396.el8 perl-parent@1:0.237-1.el8 perl-PathTools@3.74-1.el8 perl-Pod-Escapes@1:1.07-395.el8 perl-Pod-Perldoc@3.28-396.el8 perl-Pod-Simple@1:3.35-395.el8 perl-Pod-Usage@4:1.69-395.el8 perl-podlators@4.11-1.el8 perl-Scalar-List-Utils@3:1.49-2.el8 perl-Socket@4:2.027-3.el8 perl-Storable@1:3.11-3.el8 perl-Term-ANSIColor@4.06-396.el8 perl-Term-Cap@1.17-395.el8 perl-Text-ParseWords@3.30-395.el8 perl-Text-Tabs+Wrap@2013.0523-395.el8 perl-threads@1:2.21-2.el8 perl-threads-shared@1.58-2.el8 perl-Time-Local@1:1.280-1.el8 perl-Unicode-Normalize@1.25-396.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756 0:1.50-439.module+el8.10.0+21354+3ad137bb 0:1.33-1001.module+el8.10.0+21354+3ad137bb 4:3.08-461.module+el8.10.0+21354+3ad137bb 0:5.74-458.module+el8.10.0+21354+3ad137bb 0:2.16-439.module+el8.10.0+21354+3ad137bb 1:0.231.100-1.module+el8.10.0+21354+3ad137bb 1:2.52-1.module+el8.10.0+21354+3ad137bb 0:0.078-1.module+el8.10.0+21354+3ad137bb 0:3.15-1001.module+el8.10.0+21354+3ad137bb 1:0.238-457.module+el8.10.0+21354+3ad137bb 0:3.78-439.module+el8.10.0+21354+3ad137bb 1:1.07-396.module+el8.10.0+21354+3ad137bb 0:3.28.01-443.module+el8.10.0+21354+3ad137bb 1:3.42-1.module+el8.10.0+21354+3ad137bb 4:2.01-1.module+el8.10.0+21354+3ad137bb 1:4.14-457.module+el8.10.0+21354+3ad137bb 4:1.55-457.module+el8.10.0+21354+3ad137bb 4:2.031-1.module+el8.10.0+21354+3ad137bb 1:3.21-457.module+el8.10.0+21354+3ad137bb 0:5.01-458.module+el8.10.0+21354+3ad137bb 0:1.17-396.module+el8.10.0+21354+3ad137bb 0:3.30-396.module+el8.10.0+21354+3ad137bb 0:2013.0523-396.module+el8.10.0+21354+3ad137bb 1:2.25-457.module+el8.10.0+21354+3ad137bb 0:1.61-457.module+el8.10.0+21354+3ad137bb 2:1.300-4.module+el8.10.0+21354+3ad137bb 0:1.27-458.module+el8.10.0+21354+3ad137bb	1
archivebox/archivebox :0.7.4	1a5a37331091	perl@5.36.0-7+deb12u3	no fix listed	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	perl@5.22.1-9ubuntu0.6	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	perl@5.36.0-7+deb12u1	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	perl@5.36.0-7+deb12u1	no fix listed	1
artifacthub/tracker :v1.23.0	5368d21a6e5c	perl@5.40.1-6	no fix listed	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	perl@5.36.0-7+deb12u1	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	perl@5.30.0-9ubuntu0.4	no fix listed	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	perl@5.30.0-9ubuntu0.2	no fix listed	1
assistiot/identity-manager_db :latest	0d3e6d35f168	perl@5.36.0-7	no fix listed	1
assistiot/location_processing :latest	e9bae124095f	perl@5.34.0-3ubuntu1.1	no fix listed	1
assistiot/open_api_backend :1.1.2	30812ba93555	perl@5.34.0-3ubuntu1.3	no fix listed	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	perl@5.30.0-9ubuntu0.2	no fix listed	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	perl@5.36.0-7+deb12u1	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	perl@5.36.0-7+deb12u1	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	perl@5.36.0-7	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	perl@5.30.0-9ubuntu0.3	no fix listed	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	perl@5.40.1-6	no fix listed	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	perl@5.34.0-3ubuntu1.1	no fix listed	1
atlassian/jira-software :8.14.0	37bc46cbec1a	perl@5.34.0-3ubuntu1.3	no fix listed	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	perl@5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.4	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	perl@5.36.0-7+deb12u1	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	perl@5.36.0-7	no fix listed	1
avzini/web-app :latest	f40b30210ed0	perl@5.36.0-7	no fix listed	1
baserow/backend :2.3.3	7c00549b3a6f	perl@5.40.1-6	no fix listed	1
baserow/backend :1.31.1	e0b3c8130b91	perl@5.36.0-7+deb12u1	no fix listed	1
baserow/baserow :1.30.1	df0c42eb67e8	perl@5.36.0-7+deb12u1	no fix listed	1
baserow/web-frontend :2.3.3	566d24c7d9f5	perl@5.40.1-6	no fix listed	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	perl@5.30.0-9ubuntu0.2	no fix listed	1
beanbag/reviewboard :latest	6b840f546e1c	perl@5.34.0-3ubuntu1.8	no fix listed	1
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	perl@5.40.1-6	no fix listed	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	perl@5.40.1-6	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	perl@5.36.0-7+deb12u2	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	perl@5.30.0-9ubuntu0.3	no fix listed	1
bicarus/mx-notifier :1.1.8	bed688d16762	perl@5.30.0-9ubuntu0.2	no fix listed	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/git :latest	4b08d0c5af8d	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	perl@5.36.0-7+deb12u2	no fix listed	1
bitnamilegacy/kubectl :1.30	1249fc292e84	perl@5.36.0-7+deb12u1	no fix listed	1
bitnamilegacy/kubectl :1.31	64614ef8290f	perl@5.36.0-7+deb12u1	no fix listed	1