StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3

Open the chart page →

7,579
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
click@8.1.7
8.3.3

Open the chart page →

2,452
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
ghcr.io/devops-ia/simple-krr-dashboard:1.6.34c625eff5410
click@8.3.1
8.3.3

Open the chart page →

2,234
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
click@8.1.8
8.3.3

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
click@8.3.1
8.3.3

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
click@8.1.8
8.3.3

Open the chart page →

4,634
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
click@8.3.1
8.3.3

Open the chart page →

1,693
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
click@8.3.1
8.3.3

Open the chart page →

2,003
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
click@8.1.7
8.3.3

Open the chart page →

1,133
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3

Open the chart page →

18,517
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
click@8.1.3
8.3.3

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
click@8.3.0
8.3.3

Open the chart page →

3,804
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
click@8.3.1
8.3.3
agentarea/agentarea-worker:latest1e5cb68ee77a
click@8.3.1
8.3.3

Open the chart page →

14,914
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
click@8.2.1
8.3.3

Open the chart page →

12,037
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3

Open the chart page →

17,877
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
click@8.2.1
8.3.3

Open the chart page →

9,971
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
click@8.1.7
8.3.3

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
click@8.1.7
8.3.3

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
click@8.1.7
8.3.3

Open the chart page →

1,944
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3

Open the chart page →

4,854
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3

Open the chart page →

3,558
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
click@8.1.7
8.3.3

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3

Open the chart page →

10,858
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3

Open the chart page →

9,562
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
click@8.3.1
8.3.3

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
click@8.1.8
8.3.3

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3

Open the chart page →

5,305
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
click@7.1.1
8.3.3

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
click@8.0.1
8.3.3

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
click@8.1.3
8.3.3

Open the chart page →

3,924
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
click@8.0.1
8.3.3

Open the chart page →

10,231
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
click@7.0
8.3.3

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
click@8.1.7
8.3.3

Open the chart page →

16,346
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
click@8.3.0
8.3.3

Open the chart page →

4,132
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3

Open the chart page →

3,345
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.31 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
click@8.1.7
8.3.3

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
click@8.1.8
8.3.3

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
click@8.1.8
8.3.3

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
click@7.0
8.3.3

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3

Open the chart page →

16,514

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
bootc/puppetboard:1.1.0f1383295e7be
click@7.0
8.3.3
1
buntha/mlflow:2.1.1154542cc3083
click@8.1.3
8.3.3
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
click@8.1.3
8.3.3
1
cdignam/kodiak:v0.54.05a6a55b39cee
click@8.0.1
8.3.3
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
click@8.1.8
8.3.3
1
chaostoolkit/back:latest734f3af86125
click@7.1.2
8.3.3
1
chaostoolkit/front:latest7f4a7eb9f7df
click@7.1.2
8.3.3
1
chaostoolkit/middle:latestb95ba4961cfc
click@7.1.2
8.3.3
1
chorss/docker-pgadmin4:4.115c549cacb8ab
click@7.0
8.3.3
1
citizenstig/httpbin:latestb81c818ccb86
click@6.7
8.3.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
click@8.1.7
8.3.3
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
click@8.1.8
8.3.3
1
cleveritcz/opencve:1.5.0c75c1636e0b7
click@7.1.2
8.3.3
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
click@8.1.7
8.3.3
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
click@8.1.7
8.3.3
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
click@8.1.7
8.3.3
1
clsen2024/daejeon_2-3:latest1156cd87c8fb
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
click@8.1.7
8.3.3
1
codecov/self-hosted-api:24.4.10475cb1c3136
click@8.0.4
8.3.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
click@8.1.7
8.3.3
1
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3
1
cspconsole/report-collector:1.0.15839750248193b
click@8.3.1
8.3.3
1
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
click@8.3.1
8.3.3
1
danuk/telegram-sender:0.0.1026560388070
click@8.1.3
8.3.3
1
daskdev/dask:1.1.04ecd7bc35500
click@7.0
8.3.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
click@7.0
8.3.3
1
datamate/seafile-professional:11.0.202dd66b722464
click@8.2.1
8.3.3
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
click@7.1.2
8.3.3
1
datawire/aes:1.13.62beb65062c8b
click@7.1.2
8.3.3
1
datawire/aes:3.11.195ec30b3c732
click@8.1.7
8.3.3
1
datawire/emissary:3.12.21f67a1292d2a
click@8.1.8
8.3.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
click@7.1.2
8.3.3
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
click@8.1.7
8.3.3
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
click@8.1.3
8.3.3
1
devopsgoofy/k8s-platform:latestad865312099f
click@8.1.7
8.3.3
1
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
click@8.0.4
8.3.3
1
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3
1
djjudas21/alertify:0.1.0ba22be670c37
click@8.2.1
8.3.3
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
click@8.2.1
8.3.3
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
click@8.2.1
8.3.3
1
douz/helpdesk:latest4384103d0219
click@8.1.3
8.3.3
1
dpage/pgadmin4:8.418cd5711fc9a
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.