clearml Helm chart
allegroaiOfficialVerified publisherScored 21 Oct 2026
MLOps platform
Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub
clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnamilegacy/ | 6.0.10-debian-11-r8 | 7345181 | 3,440 |
| allegroai/ | 2.0.0-613 | 22113713 | 8,720 |
| docker.dragonflydb.io/ | v1.36.0 | — | unmeasured |
| docker.elastic.co/ | 7.17.3 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | DEBIAN-CVE-2025-32415 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2025-69534 | python3.11 | 3.11.2-6+deb12u9 |
| Low | DEBIAN-CVE-2026-26269 | vim | no fix listed |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-46483 | vim | no fix listed |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | DEBIAN-CVE-2026-56434 | nginx | 1.22.1-9+deb12u10 |
| Low | DEBIAN-CVE-2025-1179 | binutils | no fix listed |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GHSA-vxq7-64xx-v4gw | urllib3 | 2.8.0 |
| Low | DEBIAN-CVE-2009-4487 | nginx | no fix listed |
| Low | DEBIAN-CVE-2026-9669 | python3.11 | 3.11.2-6+deb12u9 |
| Low | DEBIAN-CVE-2026-41071 | libheif | no fix listed |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | DEBIAN-CVE-2017-13716 | binutils | no fix listed |
| Low | BIT-mongodb-2024-3372 | mongodb | 5.0.25 |
| Low | BIT-mongodb-2024-3372 | MongoDB (R) | 5.0.25 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | DEBIAN-CVE-2026-56209 | aom | 3.6.0-1+deb12u3 |
| Low | GHSA-2qfp-q593-8484 | brotli | 1.2.0 |
| Low | DEBIAN-CVE-2024-50602 | expat | 2.5.0-1+deb12u2 |
| Low | DEBIAN-CVE-2026-0861 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2026-31789 | openssl | 3.0.19-1~deb12u2 |
| Low | DEBIAN-CVE-2025-6297 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2026-33164 | libde265 | 1.0.11-1+deb12u3 |
| Low | DEBIAN-CVE-2026-41411 | vim | no fix listed |
| Low | DLA-3951-1 | curl | 7.74.0-1.3+deb11u14 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2025-69650 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-32989 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2025-6020 | pam | 1.5.2-6+deb12u2 |
| Low | DEBIAN-CVE-2026-84384 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-84447 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2023-2610 | vim | 2:9.0.1378-2+deb12u1 |
| Low | BIT-mongodb-2025-6709 | MongoDB (R) | 6.0.21 |
| Low | BIT-mongodb-2025-6709 | mongodb | 6.0.21 |
| Low | DEBIAN-CVE-2026-84782 | openssl | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 7.15.0latest | 4 months ago | 6.0.10-debian-11-r8 | 95158894 | 12,160 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.