clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

885 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2024-6384	mongodb@6.0.10-1	6.0.16
Low	DEBIAN-CVE-2026-67693	gnutls28@3.7.9-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-22801	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	DEBIAN-CVE-2026-73076	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2017-1000382	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-90803	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86138	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-22134	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GHSA-2gx3-rcp4-g85q	pyjwt@2.8.0	2.14.0
Low	GHSA-w7vc-732c-9m39	pyjwt@2.8.0	2.13.0
Low	GO-2026-4976	stdlib@go1.19.12	1.25.10
Low	GO-2026-5039	stdlib@go1.19.12	1.25.11
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u5
Low	DEBIAN-CVE-2023-26965	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2011-3374	apt@2.6.1	no fix listed
Low	GHSA-8fvv-fgr5-f8ch	pymongo@4.10.1	4.18.1
Low	BIT-mongodb-2024-6375	mongodb@6.0.10-1	5.0.22
Low	BIT-mongodb-2024-6375	MongoDB (R)@6.0.10	5.0.22
Low	DEBIAN-CVE-2026-90801	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-9wx4-h78v-vm56	requests@2.31.0	2.32.0
Low	DEBIAN-CVE-2025-53906	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-55693	vim@2:9.0.1378-2	no fix listed
Low	GHSA-7rxf-gvfg-47g4	flask-cors@5.0.0	6.0.0
Low	DEBIAN-CVE-2013-4392	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
Low	PYSEC-2025-183	pyjwt@2.8.0	no fix listed
Low	DEBIAN-CVE-2026-75806	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42014	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-35177	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56407	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-29481	libbpf@1:1.1.0-1	no fix listed
Low	GO-2026-5856	stdlib@go1.19.12	1.25.12
Low	DEBIAN-CVE-2026-57455	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-56403	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-94283	libx11@2:1.8.4-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-40225	systemd@252.31-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2024-41957	vim@2:9.0.1378-2	no fix listed
Low	GHSA-x78j-v8h9-3j2q	virtualenv@20.28.0	21.7.12
Low	DEBIAN-CVE-2025-1377	elfutils@0.188-2.1	no fix listed
Low	GO-2025-3750	stdlib@go1.19.12	1.23.10
Low	DEBIAN-CVE-2026-90828	binutils@2.40-2	no fix listed
Low	BIT-mongodb-2024-8207	MongoDB (R)@6.0.10	5.0.26
Low	BIT-mongodb-2024-8207	mongodb@6.0.10-1	5.0.26
Low	GHSA-42vr-xj54-vc7v	pyjwt@2.8.0	2.15.0
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.