clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,058 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-61143	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-55892	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2024-56433	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	DEBIAN-CVE-2025-53905	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2024-25260	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-91781	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91782	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-56288	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-56289	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-90829	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1148	binutils@2.40-2	no fix listed
Low	GHSA-qmgc-5h2g-mvrw	filelock@3.16.1	3.20.3
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-91779	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91780	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-90831	binutils@2.40-2	no fix listed
Low	GO-2025-3447	stdlib@go1.19.12	1.22.12
Low	DEBIAN-CVE-2025-68160	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-3949	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-59857	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-90830	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1150	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-6845	binutils@2.40-2	no fix listed
Low	GHSA-jwrc-g2q2-pq5p	pyjwt@2.8.0	2.14.0
Low	DEBIAN-CVE-2026-89092	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2013-0337	nginx@1.22.1-9	no fix listed
Low	DEBIAN-CVE-2025-26603	vim@2:9.0.1378-2	no fix listed
Low	GHSA-58qw-9mgm-455v	pip@24.3.1	26.1
Low	DEBIAN-CVE-2025-61145	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1149	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-16742	systemd@252.31-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-94284	libx11@2:1.8.4-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-94287	libxpm@1:3.5.12-1.1+deb12u1	no fix listed
Low	DSA-6094-1	libsodium@1.0.18-1	1.0.18-1+deb12u1
Low	DEBIAN-CVE-2018-5709	krb5@1.20.1-2+deb12u2	no fix listed
Low	GHSA-qx36-8mw2-4r3x	pymongo@4.10.1	4.18.2
Low	GHSA-4x4j-2g7c-83w6	pillow@11.0.0	12.3.0
Low	GHSA-993g-76c3-p5m4	pyjwt@2.8.0	2.13.0
Low	GHSA-fhv5-28vv-h8m8	pyjwt@2.8.0	2.13.0
Low	DEBIAN-CVE-2026-28420	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2025-69644	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2008-4677	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-29383	shadow@1:4.13+dfsg1-1+b1	1:4.13+dfsg1-1+deb12u1
Low	DEBIAN-CVE-2026-22185	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-97399	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-94285	libx11@2:1.8.4-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2018-10126	tiff@4.5.0-6+deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.