clearml 7.15.0 Helm chart

Name: clearml Helm chart 7.15.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Version 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

885 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2023-3896	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-6228	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2026-6879	python3.11@3.11.2-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2023-46246	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-1916	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2023-31439	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-3164	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-66861	binutils@2.40-2	no fix listed
Low	GO-2026-4602	stdlib@go1.19.12	1.25.8
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-18503	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u9
Low	DEBIAN-CVE-2026-88648	gnutls28@3.7.9-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2024-13978	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-28422	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	GHSA-4grg-w6v8-c28g	flask@3.1.0	3.1.1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-107928	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-86409	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-86410	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-86414	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-87864	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-87865	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-87866	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-92388	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-92389	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-92390	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-92391	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-94266	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-9672	libgd2@2.3.3-9	2.3.3-9+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.