StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
click@8.0.3
8.3.3

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
click@8.0.4
8.3.3

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
click@8.1.3
8.3.3

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
click@8.1.3
8.3.3

Open the chart page →

3,294
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3

Open the chart page →

2,347
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3

Open the chart page →

43,341
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
click@8.1.3
8.3.3

Open the chart page →

3,158
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
click@8.1.3
8.3.3

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3

Open the chart page →

3,811
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
click@7.1.2
8.3.3

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3

Open the chart page →

8,556
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3

Open the chart page →

4,560
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
click@8.2.1
8.3.3

Open the chart page →

11,950
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
click@7.0
8.3.3

Open the chart page →

1,458
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
click@7.1.2
8.3.3

Open the chart page →

1,166
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
click@8.1.7
8.3.3
ahmetgrbzz/web_server:1.02e7fef69c29f
click@8.1.7
8.3.3

Open the chart page →

3,034
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
click@7.0
8.3.3

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
click@8.1.3
8.3.3

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
socialmediamacroscope/preprocessing:0.1.3ca863306314b
click@8.1.7
8.3.3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
click@8.1.7
8.3.3

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
click@8.1.6
8.3.3

Open the chart page →

1,588
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
click@8.3.1
8.3.3

Open the chart page →

2,555
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
click@8.3.1
8.3.3

Open the chart page →

2,298
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3

Open the chart page →

5,288
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
click@7.0
8.3.3

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3

Open the chart page →

40,715
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
click@8.2.1
8.3.3
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
click@8.1.7
8.3.3

Open the chart page →

18,922
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
click@8.1.8
8.3.3
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
click@8.3.1
8.3.3

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
click@8.1.8
8.3.3

Open the chart page →

6,583
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
click@8.2.1
8.3.3

Open the chart page →

2,376
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
click@8.1.8
8.3.3

Open the chart page →

4,749
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
click@8.3.1
8.3.3

Open the chart page →

3,854
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3

Open the chart page →

8,189
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3

Open the chart page →

2,565
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3

Open the chart page →

22,084
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
click@8.1.7
8.3.3

Open the chart page →

12,912
libretimepodzone-chartsVerified publisher0.4.14 of 9See more

libretime podzone-charts 0.4.1

4 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-api:latesteae026cc8909
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-playout:latest71a8706531aa
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
click@8.1.8
8.3.3

Open the chart page →

11,149
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3

Open the chart page →

5,451
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
click@8.1.8
8.3.3

Open the chart page →

3,071
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3

Open the chart page →

4,616
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
click@8.1.3
8.3.3

Open the chart page →

14,537
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
click@8.1.3
8.3.3

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
click@8.1.7
8.3.3

Open the chart page →

4,272

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ahmetgrbzz/result_server:1.008e10f9c0f53
click@8.1.7
8.3.3
1
ahmetgrbzz/result_server:2.035c37ae2bafd
click@8.1.7
8.3.3
1
ahmetgrbzz/web_server:1.02e7fef69c29f
click@8.1.7
8.3.3
1
ahmetgrbzz/web_server:2.0f018bafd2b0c
click@8.1.7
8.3.3
1
airbyte/manifest-server:7.23.73b3a670af168
click@8.1.8
8.3.3
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
click@8.3.0
8.3.3
1
alerta/alerta-web:8.5.04786b9eaa606
click@8.0.3
8.3.3
1
alexvm6/pythonalex:latest89a05786879c
click@8.1.3
8.3.3
1
allegroai/clearml:2.0.0-613713ae38f7daf
click@8.1.8
8.3.3
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3
1
amancevice/superset:0.28.1c8c04bfe3d66
click@6.7
8.3.3
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
click@7.1.1
8.3.3
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
click@6.7
8.3.3
1
amundsendev/amundsen-search:2.4.099dda9502c3e
click@6.7
8.3.3
1
anchore/anchore-engine:v0.10.0bde9eedf639d
click@7.0
8.3.3
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
click@7.0
8.3.3
1
andreymileshin/kube-info:v0.1.0f7b300bc9e66
click@8.1.8
8.3.3
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
click@8.1.8
8.3.3
1
apache/airflow:2.8.4-python3.964e58748b6b9
click@8.1.7
8.3.3
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
click@8.1.7
8.3.3
1
apache/airflow:2.8.1e5560ad0b86e
click@8.1.7
8.3.3
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
click@8.0.4
8.3.3
1
apache/superset:4.0.1ab9467fd712c
click@8.1.3
8.3.3
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
click@8.1.8
8.3.3
1
archish27/python-fastapi-postgres:latest6610071a2101
click@8.1.3
8.3.3
1
aristidetm/basic-notebook:3.6.5469dbc951224
click@8.1.7
8.3.3
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
click@8.1.7
8.3.3
1
arunvelsriram/utils:latest655ad18fd8d6
click@8.1.6
8.3.3
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
click@7.1.2
8.3.3
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3
1
assistiot/fl_repository:latest0fce3ea719a5
click@8.1.3
8.3.3
1
assistiot/fl_training_collector:latest792715dd3084
click@8.0.3
8.3.3
1
assistiot/open_api_backend:1.1.230812ba93555
click@8.1.7
8.3.3
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
click@8.0.3
8.3.3
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
click@8.0.3
8.3.3
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
click@8.1.7
8.3.3
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
click@8.1.7
8.3.3
1
assistiot/traffic-classification_api:2.0.0e32b87786142
click@8.0.3
8.3.3
1
avinash263/pyredis263:latestaa2b8727f1a6
click@8.1.3
8.3.3
1
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
click@7.1.2
8.3.3
1
baserow/backend:2.3.37c00549b3a6f
click@8.3.1
8.3.3
1
baserow/backend:1.31.1e0b3c8130b91
click@8.1.7
8.3.3
1
baserow/baserow:1.30.1df0c42eb67e8
click@8.1.7
8.3.3
1
behnambm/docker-sample:v1bd3ad88afff9
click@8.1.7
8.3.3
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
click@7.0
8.3.3
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
click@8.1.8
8.3.3
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
click@7.1.2
8.3.3
1
bmeares/meerschaum:2.8.48e9c5bacaa82
click@8.1.8
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.