clearml-serving 1.6.2 Helm chart

Name: clearml-serving Helm chart 1.6.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 14 Sept 2026

ClearML Serving Helm Chart

Version 1.6.2 1 year agoapp version 1.3.0 1Artifact Hub

clearml-serving 1.6.2 deploys 9 container images: grafana/grafana, jimmidyson/configmap-reload, quay.io/prometheus/prometheus, allegroai/clearml-serving-inference and 5 more. Across the 8 measured, 1,609 findings — 4 critical, 29 high — 21 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 9.4.0, fixed in 10.0.1. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

17,8774291981,377

1,609 findings over 8 of 9 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
grafana/grafana	9.4.3	0430195	2,528
jimmidyson/configmap-reload	v0.8.0	00391	776
quay.io/prometheus/prometheus	v2.41.0	0420147	1,793
allegroai/clearml-serving-inference	1.3.0	2639172	2,900
allegroai/clearml-serving-statistics	1.3.0	2529140	2,303
allegroai/clearml-serving-triton	1.3.0	—	not yet scanned
bitnamilegacy/zookeeper	3.8.1-debian-11-r6	0231254	2,942
bitnamilegacy/kafka	3.4.0-debian-11-r6	0534253	3,224
quay.io/prometheus/alertmanager	v0.25.0	0312125	1,411

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

527 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-1621	stdlib@go1.19.6	1.19.7
Low	GHSA-mj87-hwqh-73pj	python-multipart@0.0.6	0.0.26
Low	GO-2026-4981	stdlib@go1.19.6	1.25.10
Low	GO-2025-3563	stdlib@go1.19.6	1.23.8
Low	DLA-3934-1	libheif@1.11.0-1	1.11.0-1+deb11u1
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.4.2	2.18.9
Low	BIT-java-2024-21208	java@11.0.18-10-2	1.8.0
Low	DLA-4455-1	python3.9@3.9.2-1	3.9.2-1+deb11u5
Low	GO-2026-4977	stdlib@go1.19.6	1.25.10
Low	GO-2024-2610	stdlib@go1.19.6	1.21.8
Low	DLA-4315-1	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u7
Low	DLA-4259-1	systemd@247.3-7+deb11u1	247.3-7+deb11u7
Low	GO-2026-4986	stdlib@go1.19.6	1.25.10
Low	GO-2026-4918	stdlib@go1.19.6	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.4.0	0.53.0
Low	DEBIAN-CVE-2023-52968	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u1
Low	GO-2026-4337	stdlib@go1.19.6	1.24.13
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.15	2.7.0
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.48.v20220622	12.0.12
Low	GO-2024-2843	github.com/grafana/grafana@v9.4.3	no fix listed
Low	DSA-5682-1	glib2.0@2.66.8-1	2.66.8-1+deb11u2
Low	DLA-4339-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u7
Low	GO-2024-2844	github.com/grafana/grafana@v9.4.3	no fix listed
Low	DLA-4273-1	postgresql-13@13.9-0+deb11u1	13.22-0+deb11u1
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.4.2	5.19.1
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u5	7.74.0-1.3+deb11u14
Low	GO-2026-4601	stdlib@go1.19.6	1.25.8
Low	DLA-4159-1	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901	0.311.3
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.48.v20220622	no fix listed
Low	BIT-java-2024-21012	java@11.0.18-10-2	11.0.23
Low	BIT-java-2026-22021	java@11.0.18-10-2	1.8.0
Low	BIT-java-2026-47021	java@11.0.18-10-2	1.8.0
Low	GO-2026-5026	golang.org/x/net@v0.4.0	0.55.0
Low	GO-2026-5026	stdlib@go1.19.6	1.25.13
Low	BIT-java-2025-30754	java@11.0.18-10-2	1.8.0
Low	DSA-5489-1	file@1:5.39-3	1:5.39-3+deb11u1
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.4.48.v20220622	9.4.52
Low	BIT-java-2024-20945	java@11.0.18-10-2	1.8.0
Low	BIT-java-2026-46917	java@11.0.18-10-2	11.0.32
Low	BIT-java-2026-47027	java@11.0.18-10-2	1.8.0
Low	DLA-4133-1	wget@1.21-1+deb11u1	1.21-1+deb11u2
Low	DLA-4497-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u10
Low	GO-2025-3420	stdlib@go1.19.6	1.22.11
Low	GO-2026-4342	stdlib@go1.19.6	1.24.12
Low	GO-2024-2598	stdlib@go1.19.6	1.21.8
Low	GO-2025-3751	stdlib@go1.19.6	1.23.10
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u9
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.45.0	1.82.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.6.2latest	1 year ago	1.3.0	4291981,377	17,877

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml-serving.svg)](https://charts.stackradar.io/charts/allegroai/clearml-serving)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.