clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

885 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-40226	systemd@252.31-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2026-33165	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2026-6844	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2024-41965	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-86805	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-62289	libheif@1.15.1-1+deb12u1	no fix listed
Low	DSA-5930-1	libavif@0.11.1-1	0.11.1-1+deb12u1
Low	DEBIAN-CVE-2025-8732	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	BIT-mongodb-2025-6711	mongodb@6.0.10-1	6.0.21
Low	BIT-mongodb-2025-6711	MongoDB (R)@6.0.10	6.0.21
Low	DEBIAN-CVE-2025-8961	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-84450	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-6141	ncurses@6.4-4	no fix listed
Low	DEBIAN-CVE-2012-2663	iptables@1.8.9-2	no fix listed
Low	DEBIAN-CVE-2026-12003	python3.11@3.11.2-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-84449	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-102473	dash@0.5.12-2	no fix listed
Low	DEBIAN-CVE-2018-20712	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-15649	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GHSA-hxm8-2xgr-2p9m	pyjwt@2.8.0	2.14.0
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-0864	python3.11@3.11.2-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2025-8851	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-46675	libpng1.6@1.6.39-2	1.6.39-2+deb12u6
Low	DEBIAN-CVE-2026-90802	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-5+b1	no fix listed
Low	DEBIAN-CVE-2026-47167	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2025-61143	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-55892	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2024-56433	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	DEBIAN-CVE-2025-53905	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2024-25260	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-91781	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91782	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-56288	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-56289	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-90829	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1148	binutils@2.40-2	no fix listed
Low	GHSA-qmgc-5h2g-mvrw	filelock@3.16.1	3.20.3
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-91779	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91780	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-90831	binutils@2.40-2	no fix listed
Low	GO-2025-3447	stdlib@go1.19.12	1.22.12
Low	DEBIAN-CVE-2025-68160	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-3949	libheif@1.15.1-1+deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.