clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,058 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	PYSEC-2025-183	pyjwt@2.8.0	no fix listed
Low	DEBIAN-CVE-2026-75806	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42014	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-35177	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56407	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-29481	libbpf@1:1.1.0-1	no fix listed
Low	GO-2026-5856	stdlib@go1.19.12	1.25.12
Low	DEBIAN-CVE-2026-57455	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-56403	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-94283	libx11@2:1.8.4-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-40225	systemd@252.31-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2024-41957	vim@2:9.0.1378-2	no fix listed
Low	GHSA-x78j-v8h9-3j2q	virtualenv@20.28.0	21.7.12
Low	DEBIAN-CVE-2025-1377	elfutils@0.188-2.1	no fix listed
Low	GO-2025-3750	stdlib@go1.19.12	1.23.10
Low	DEBIAN-CVE-2026-90828	binutils@2.40-2	no fix listed
Low	BIT-mongodb-2024-8207	MongoDB (R)@6.0.10	5.0.26
Low	BIT-mongodb-2024-8207	mongodb@6.0.10-1	5.0.26
Low	GHSA-42vr-xj54-vc7v	pyjwt@2.8.0	2.15.0
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-1757	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2026-28419	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2024-43790	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-76957	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	GO-2026-5027	golang.org/x/net@v0.14.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.14.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.14.0	0.55.0
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.20	2.7.0
Low	GHSA-w853-jp5j-5j7f	filelock@3.16.1	3.20.1
Low	GO-2026-4340	stdlib@go1.19.12	1.24.12
Low	DEBIAN-CVE-2026-3446	python3.11@3.11.2-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-6019	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u9
Low	GHSA-8vgw-p6qm-5gr7	flask-cors@5.0.0	6.0.0
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-3198	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-8674	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-6069	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2026-4105	systemd@252.31-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-24014	vim@2:9.0.1378-2	no fix listed
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	DEBIAN-CVE-2025-4516	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2025-11839	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-11840	binutils@2.40-2	no fix listed
Low	GO-2026-6599	stdlib@go1.19.12	1.26.9
Low	GO-2026-6600	stdlib@go1.19.12	1.26.9
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.