StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
click@7.1.2
8.3.3

Open the chart page →

12,007
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
click@8.1.8
8.3.3

Open the chart page →

12,473
speedtest-exporteralekcVerified publisher0.2.01 of 1See more

speedtest-exporter alekc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
click@8.1.3
8.3.3

Open the chart page →

741
wsealekcVerified publisher0.1.11 of 1See more

wse alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
click@7.1.2
8.3.3

Open the chart page →

1,146
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
click@8.1.7
8.3.3

Open the chart page →

6,324
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
click@8.3.1
8.3.3

Open the chart page →

5,558
ansible-playbook-operatoransible-playbook-operatorVerified publisher0.1.71 of 1See more

ansible-playbook-operator ansible-playbook-operator 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
click@8.3.2
8.3.3

Open the chart page →

1,339
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
click@8.1.7
8.3.3
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
click@8.1.7
8.3.3

Open the chart page →

25,669
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
click@8.3.1
8.3.3

Open the chart page →

1,565
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3

Open the chart page →

1,488
aias-servicesarlas-stackVerified publisher28.8.04 of 5See more

aias-services arlas-stack 28.8.0

4 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
click@8.1.6
8.3.3
gisaia/airs:0.18.15abfe00317bf
click@8.1.6
8.3.3
gisaia/aproc-service:0.18.1ac6564921994
click@8.1.6
8.3.3
gisaia/fam:0.18.1ae525930b4b6
click@8.1.6
8.3.3

Open the chart page →

1,001
arlas-aiasarlas-stackVerified publisher28.8.05 of 22See more

arlas-aias arlas-stack 28.8.0

5 of the 22 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
click@8.1.6
8.3.3
gisaia/airs:0.18.15abfe00317bf
click@8.1.6
8.3.3
gisaia/aproc-service:0.18.1ac6564921994
click@8.1.6
8.3.3
gisaia/fam:0.18.1ae525930b4b6
click@8.1.6
8.3.3
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
click@8.2.1
8.3.3

Open the chart page →

40,238
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

2,418
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3

Open the chart page →

22,568
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
click@8.1.3
8.3.3

Open the chart page →

4,367
trainingcollectorassist-iot-fl-training-collector1.1.01 of 1See more

trainingcollector assist-iot-fl-training-collector 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/fl_training_collector:latest792715dd3084
click@8.0.3
8.3.3

Open the chart page →

1,719
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

10,061
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
click@8.1.7
8.3.3

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
click@8.0.3
8.3.3
assistiot/resource-provisioning_im:1.0.0a942dc14030a
click@8.0.3
8.3.3

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
click@8.1.7
8.3.3
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
click@8.1.7
8.3.3

Open the chart page →

45,363
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
click@8.0.3
8.3.3

Open the chart page →

1,166
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
click@8.0.3
8.3.3

Open the chart page →

32,501
phonebook-chartasumankamberoglu0.1.52 of 3See more

phonebook-chart asumankamberoglu 0.1.5

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
click@8.1.3
8.3.3
paulkellerman/webserver-app:latest5a37b74f61b9
click@8.1.3
8.3.3

Open the chart page →

3,176
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
click@8.1.7
8.3.3

Open the chart page →

9,412
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
click@8.0.3
8.3.3

Open the chart page →

5,507
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
click@8.1.7
8.3.3

Open the chart page →

1,790
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
click@7.1.2
8.3.3

Open the chart page →

5,521
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
click@6.7
8.3.3

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
click@6.7
8.3.3

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
click@6.7
8.3.3

Open the chart page →

4,269
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
click@6.7
8.3.3

Open the chart page →

11,833
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
click@8.3.1
8.3.3

Open the chart page →

2,738
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
click@7.0
8.3.3

Open the chart page →

20,671
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
click@8.1.7
8.3.3

Open the chart page →

2,727
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
click@8.1.7
8.3.3

Open the chart page →

10,145
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
click@7.0
8.3.3

Open the chart page →

18,980
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-rwd:log74ded2d92f07
click@8.1.8
8.3.3

Open the chart page →

26,996
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
click@7.0
8.3.3

Open the chart page →

1,292
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
click@7.1.2
8.3.3

Open the chart page →

2,504
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
click@8.1.3
8.3.3

Open the chart page →

2,573
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
click@8.1.8
8.3.3

Open the chart page →

10,776
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
click@8.1.7
8.3.3

Open the chart page →

16,198
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
click@8.1.7
8.3.3

Open the chart page →

15,371
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
click@7.1.2
8.3.3
chaostoolkit/front:latest7f4a7eb9f7df
click@7.1.2
8.3.3
chaostoolkit/middle:latestb95ba4961cfc
click@7.1.2
8.3.3

Open the chart page →

5,557
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
click@8.1.7
8.3.3

Open the chart page →

1,126
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
click@8.1.8
8.3.3

Open the chart page →

4,803
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
click@8.1.7
8.3.3

Open the chart page →

4,042
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
click@8.1.3
8.3.3

Open the chart page →

1,227

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
bootc/puppetboard:1.1.0f1383295e7be
click@7.0
8.3.3
1
buntha/mlflow:2.1.1154542cc3083
click@8.1.3
8.3.3
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
click@8.1.3
8.3.3
1
cdignam/kodiak:v0.54.05a6a55b39cee
click@8.0.1
8.3.3
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
click@8.1.8
8.3.3
1
chaostoolkit/back:latest734f3af86125
click@7.1.2
8.3.3
1
chaostoolkit/front:latest7f4a7eb9f7df
click@7.1.2
8.3.3
1
chaostoolkit/middle:latestb95ba4961cfc
click@7.1.2
8.3.3
1
chorss/docker-pgadmin4:4.115c549cacb8ab
click@7.0
8.3.3
1
citizenstig/httpbin:latestb81c818ccb86
click@6.7
8.3.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
click@8.1.7
8.3.3
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
click@8.1.8
8.3.3
1
cleveritcz/opencve:1.5.0c75c1636e0b7
click@7.1.2
8.3.3
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
click@8.1.7
8.3.3
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
click@8.1.7
8.3.3
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
click@8.1.7
8.3.3
1
clsen2024/daejeon_2-3:latest1156cd87c8fb
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
click@8.1.7
8.3.3
1
codecov/self-hosted-api:24.4.10475cb1c3136
click@8.0.4
8.3.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
click@8.1.7
8.3.3
1
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3
1
cspconsole/report-collector:1.0.15839750248193b
click@8.3.1
8.3.3
1
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
click@8.3.1
8.3.3
1
danuk/telegram-sender:0.0.1026560388070
click@8.1.3
8.3.3
1
daskdev/dask:1.1.04ecd7bc35500
click@7.0
8.3.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
click@7.0
8.3.3
1
datamate/seafile-professional:11.0.202dd66b722464
click@8.2.1
8.3.3
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
click@7.1.2
8.3.3
1
datawire/aes:1.13.62beb65062c8b
click@7.1.2
8.3.3
1
datawire/aes:3.11.195ec30b3c732
click@8.1.7
8.3.3
1
datawire/emissary:3.12.21f67a1292d2a
click@8.1.8
8.3.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
click@7.1.2
8.3.3
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
click@8.1.7
8.3.3
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
click@8.1.3
8.3.3
1
devopsgoofy/k8s-platform:latestad865312099f
click@8.1.7
8.3.3
1
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
click@8.0.4
8.3.3
1
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3
1
djjudas21/alertify:0.1.0ba22be670c37
click@8.2.1
8.3.3
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
click@8.2.1
8.3.3
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
click@8.2.1
8.3.3
1
douz/helpdesk:latest4384103d0219
click@8.1.3
8.3.3
1
dpage/pgadmin4:8.418cd5711fc9a
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.