clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,058 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-4519	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u8
Low	DEBIAN-CVE-2025-9820	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2025-15224	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Low	DEBIAN-CVE-2026-112061	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed
Low	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-34757	libpng1.6@1.6.39-2	1.6.39-2+deb12u5
Low	DEBIAN-CVE-2026-54872	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2018-20673	binutils@2.40-2	no fix listed
Low	GO-2026-4403	stdlib@go1.19.12	1.23.9
Low	BIT-mongodb-2025-6707	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-6707	mongodb@6.0.10-1	5.0.31
Low	DEBIAN-CVE-2026-77696	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-41991	gzip@1.12-1	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-84448	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-112060	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2018-9996	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-102474	dash@0.5.12-2	no fix listed
Low	GHSA-597g-3phw-6986	virtualenv@20.28.0	20.36.1
Low	DEBIAN-CVE-2025-1181	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2023-51792	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2025-69418	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2025-1795	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u6
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1182	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2023-1972	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DLA-3972-1	tzdata@2021a-1+deb11u10	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u10	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GO-2026-5932	golang.org/x/crypto@v0.12.0	no fix listed
Low	GO-2026-6809	stdlib@go1.19.12	1.26.10
Low	DEBIAN-CVE-2023-49463	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-48233	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-48234	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-48235	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2023-48237	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-95818	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-13462	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.