clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

885 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2025-6714	MongoDB (R)@6.0.10	6.0.23
Low	BIT-mongodb-2025-6714	mongodb@6.0.10-1	6.0.23
Low	GHSA-ffc3-869f-jxw9	pyjwt@2.8.0	2.14.0
Low	GHSA-29vq-49wr-vm6x	werkzeug@3.1.3	3.1.6
Low	DEBIAN-CVE-2026-107778	krb5@1.20.1-2+deb12u2	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@44.0.0	50.0.0
Low	GO-2025-3956	stdlib@go1.19.12	1.23.12
Low	GO-2026-4946	stdlib@go1.19.12	1.25.9
Low	GO-2025-3595	golang.org/x/net@v0.14.0	0.38.0
Low	DEBIAN-CVE-2026-34982	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2025-64720	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	DSA-5951-1	icu@72.1-3	72.1-3+deb12u1
Low	DEBIAN-CVE-2025-8177	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-88373	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-7545	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GO-2026-6629	golang.org/x/text@v0.12.0	0.41.0
Low	DEBIAN-CVE-2026-45382	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.29.2	5.29.5
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-45383	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	PYSEC-2026-3554	cryptography@44.0.0	49.0.0
Low	GHSA-pwv6-vv43-88gr	pillow@11.0.0	12.2.0
Low	GO-2024-2598	stdlib@go1.19.12	1.21.8
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2025-5245	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.12.0	0.52.0
Low	DEBIAN-CVE-2025-5244	binutils@2.40-2	no fix listed
Low	GO-2023-2186	stdlib@go1.19.12	1.20.11
Low	GO-2026-6613	stdlib@go1.19.12	1.26.9
Low	DEBIAN-CVE-2026-49346	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u1	no fix listed
Low	GO-2025-3849	stdlib@go1.19.12	1.23.12
Low	DEBIAN-CVE-2025-66866	binutils@2.40-2	no fix listed
Low	GO-2026-6605	stdlib@go1.19.12	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-48029	libheif@1.15.1-1+deb12u1	no fix listed
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	DSA-5931-1	systemd@252.31-1~deb12u1	252.38-1~deb12u1
Low	GO-2026-6610	golang.org/x/net@v0.14.0	0.60.0
Low	GO-2026-6610	stdlib@go1.19.12	1.26.9
Low	GHSA-hgf8-39gv-g3f2	werkzeug@3.1.3	3.1.4
Low	DEBIAN-CVE-2025-8176	tiff@4.5.0-6+deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.