clearml Helm chart

Name: clearml Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

allegroai

Scored 21 Oct 2026

MLOps platform

Latest 7.15.0 4 months agodeploys tag 6.0.10-debian-11-r8 18Artifact Hub

clearml 7.15.0 deploys 4 container images: bitnamilegacy/mongodb, allegroai/clearml, docker.dragonflydb.io/dragonflydb/dragonfly and docker.elastic.co/elasticsearch/elasticsearch. Across the 2 measured, 1,068 findings — 9 critical, 5 high — 7 on CISA KEV. The highest contribution is DSA-5880-1 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,16095158894

1,068 findings over 2 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
allegroai/clearml×8	2.0.0-613	22113713	8,720
docker.dragonflydb.io/dragonflydb/dragonfly	v1.36.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,058 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2025-10060	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-10060	MongoDB (R)@6.0.10	6.0.25
Low	BIT-mongodb-2025-6710	MongoDB (R)@6.0.10	6.0.21
Low	BIT-mongodb-2025-6710	mongodb@6.0.10-1	6.0.21
Low	DEBIAN-CVE-2024-53589	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-33636	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2026-54240	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2026-54241	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2025-32414	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	DEBIAN-CVE-2025-66863	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	DEBIAN-CVE-2026-17084	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u9
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-80230	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-66862	binutils@2.40-2	no fix listed
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.13.6	1.18.7
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-68431	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-32570	dav1d@1.0.0-2+deb12u1	no fix listed
Low	GO-2025-3420	stdlib@go1.19.12	1.22.11
Low	BIT-mongodb-2025-6714	MongoDB (R)@6.0.10	6.0.23
Low	BIT-mongodb-2025-6714	mongodb@6.0.10-1	6.0.23
Low	GHSA-ffc3-869f-jxw9	pyjwt@2.8.0	2.14.0
Low	GHSA-29vq-49wr-vm6x	werkzeug@3.1.3	3.1.6
Low	DEBIAN-CVE-2026-107778	krb5@1.20.1-2+deb12u2	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@44.0.0	50.0.0
Low	GO-2025-3956	stdlib@go1.19.12	1.23.12
Low	GO-2026-4946	stdlib@go1.19.12	1.25.9
Low	GO-2025-3595	golang.org/x/net@v0.14.0	0.38.0
Low	DEBIAN-CVE-2026-34982	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2025-64720	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	DSA-5951-1	icu@72.1-3	72.1-3+deb12u1
Low	DEBIAN-CVE-2025-8177	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-88373	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-7545	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GO-2026-6629	golang.org/x/text@v0.12.0	0.41.0
Low	DEBIAN-CVE-2026-45382	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.29.2	5.29.5
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-45383	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	PYSEC-2026-3554	cryptography@44.0.0	49.0.0
Low	GHSA-pwv6-vv43-88gr	pillow@11.0.0	12.2.0
Low	GO-2024-2598	stdlib@go1.19.12	1.21.8
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2025-5245	binutils@2.40-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.15.0latest	4 months ago	6.0.10-debian-11-r8	95158894	12,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/allegroai/clearml.svg)](https://charts.stackradar.io/charts/allegroai/clearml)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.