clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,058 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-27601	underscore@1.13.4~dfsg+~1.11.4-3	no fix listed
Low	GHSA-r6ph-v2qm-q3c2	cryptography@44.0.0	46.0.5
Low	DEBIAN-CVE-2026-73078	vim@2:9.0.1378-2	no fix listed
Low	DSA-6131-1	nginx@1.22.1-9	1.22.1-9+deb12u4
Low	DEBIAN-CVE-2025-6395	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2026-32647	nginx@1.22.1-9	1.22.1-9+deb12u5
Low	GO-2023-2041	stdlib@go1.19.12	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.12.0	0.56.0
Low	DSA-5990-1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u4
Low	DEBIAN-CVE-2026-3644	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u8
Low	GO-2025-3751	stdlib@go1.19.12	1.23.10
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-56210	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3
Low	GO-2023-2043	stdlib@go1.19.12	1.20.8
Low	DEBIAN-CVE-2021-32256	binutils@2.40-2	no fix listed
Low	GO-2026-4342	stdlib@go1.19.12	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-47247	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1178	binutils@2.40-2	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.12.0	0.39.0
Low	DEBIAN-CVE-2026-42497	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GHSA-c6hw-5grf-ff96	pillow@11.0.0	13.0.0
Low	GHSA-pchr-8j38-3x4p	pillow@11.0.0	13.0.0
Low	DEBIAN-CVE-2026-52860	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	BIT-mongodb-2026-9753	mongodb@6.0.10-1	7.0.35
Low	BIT-mongodb-2026-9753	MongoDB (R)@6.0.10	7.0.35
Low	DEBIAN-CVE-2026-13608	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-84444	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-84446	libheif@1.15.1-1+deb12u1	no fix listed
Low	GO-2025-4155	stdlib@go1.19.12	1.24.11
Low	DEBIAN-CVE-2026-48962	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-42011	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DSA-5867-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u4
Low	GHSA-65qm-jvmh-6pqg	pillow@11.0.0	13.0.0
Low	GHSA-p4wg-p73j-c528	pillow@11.0.0	13.0.0
Low	GHSA-q45j-58j2-45rg	pillow@11.0.0	13.0.0
Low	BIT-mongodb-2025-6713	MongoDB (R)@6.0.10	6.0.22
Low	BIT-mongodb-2025-6713	mongodb@6.0.10-1	6.0.22
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.36.0-7+deb12u1	no fix listed
Low	BIT-mongodb-2025-3083	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-3083	mongodb@6.0.10-1	5.0.31
Low	DEBIAN-CVE-2026-58050	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GO-2025-4014	stdlib@go1.19.12	1.24.8
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-56208	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.