StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
click@8.0.3
8.3.3

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
click@8.0.4
8.3.3

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
click@8.1.3
8.3.3

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
click@8.1.3
8.3.3

Open the chart page →

3,294
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3

Open the chart page →

2,347
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3

Open the chart page →

43,341
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
click@8.1.3
8.3.3

Open the chart page →

3,158
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
click@8.1.3
8.3.3

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3

Open the chart page →

3,811
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
click@7.1.2
8.3.3

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3

Open the chart page →

8,556
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3

Open the chart page →

4,560
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
click@8.2.1
8.3.3

Open the chart page →

11,950
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
click@7.0
8.3.3

Open the chart page →

1,458
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
click@7.1.2
8.3.3

Open the chart page →

1,166
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
click@8.1.7
8.3.3
ahmetgrbzz/web_server:1.02e7fef69c29f
click@8.1.7
8.3.3

Open the chart page →

3,034
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
click@7.0
8.3.3

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
click@8.1.3
8.3.3

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
socialmediamacroscope/preprocessing:0.1.3ca863306314b
click@8.1.7
8.3.3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
click@8.1.7
8.3.3

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
click@8.1.6
8.3.3

Open the chart page →

1,588
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
click@8.3.1
8.3.3

Open the chart page →

2,555
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
click@8.3.1
8.3.3

Open the chart page →

2,298
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3

Open the chart page →

5,288
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
click@7.0
8.3.3

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3

Open the chart page →

40,715
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
click@8.2.1
8.3.3
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
click@8.1.7
8.3.3

Open the chart page →

18,922
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
click@8.1.8
8.3.3
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
click@8.3.1
8.3.3

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
click@8.1.8
8.3.3

Open the chart page →

6,583
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
click@8.2.1
8.3.3

Open the chart page →

2,376
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
click@8.1.8
8.3.3

Open the chart page →

4,749
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
click@8.3.1
8.3.3

Open the chart page →

3,854
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3

Open the chart page →

8,189
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3

Open the chart page →

2,565
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3

Open the chart page →

22,084
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
click@8.1.7
8.3.3

Open the chart page →

12,912
libretimepodzone-chartsVerified publisher0.4.14 of 9See more

libretime podzone-charts 0.4.1

4 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-api:latesteae026cc8909
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-playout:latest71a8706531aa
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
click@8.1.8
8.3.3

Open the chart page →

11,149
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3

Open the chart page →

5,451
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
click@8.1.8
8.3.3

Open the chart page →

3,071
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3

Open the chart page →

4,616
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
click@8.1.3
8.3.3

Open the chart page →

14,537
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
click@8.1.3
8.3.3

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
click@8.1.7
8.3.3

Open the chart page →

4,272

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
bootc/puppetboard:1.1.0f1383295e7be
click@7.0
8.3.3
1
buntha/mlflow:2.1.1154542cc3083
click@8.1.3
8.3.3
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
click@8.1.3
8.3.3
1
cdignam/kodiak:v0.54.05a6a55b39cee
click@8.0.1
8.3.3
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
click@8.1.8
8.3.3
1
chaostoolkit/back:latest734f3af86125
click@7.1.2
8.3.3
1
chaostoolkit/front:latest7f4a7eb9f7df
click@7.1.2
8.3.3
1
chaostoolkit/middle:latestb95ba4961cfc
click@7.1.2
8.3.3
1
chorss/docker-pgadmin4:4.115c549cacb8ab
click@7.0
8.3.3
1
citizenstig/httpbin:latestb81c818ccb86
click@6.7
8.3.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
click@8.1.7
8.3.3
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
click@8.1.8
8.3.3
1
cleveritcz/opencve:1.5.0c75c1636e0b7
click@7.1.2
8.3.3
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
click@8.1.7
8.3.3
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
click@8.1.7
8.3.3
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
click@8.1.7
8.3.3
1
clsen2024/daejeon_2-3:latest1156cd87c8fb
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
click@8.1.7
8.3.3
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
click@8.1.7
8.3.3
1
codecov/self-hosted-api:24.4.10475cb1c3136
click@8.0.4
8.3.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
click@8.1.7
8.3.3
1
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3
1
cspconsole/report-collector:1.0.15839750248193b
click@8.3.1
8.3.3
1
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
click@8.3.1
8.3.3
1
danuk/telegram-sender:0.0.1026560388070
click@8.1.3
8.3.3
1
daskdev/dask:1.1.04ecd7bc35500
click@7.0
8.3.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
click@7.0
8.3.3
1
datamate/seafile-professional:11.0.202dd66b722464
click@8.2.1
8.3.3
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
click@7.1.2
8.3.3
1
datawire/aes:1.13.62beb65062c8b
click@7.1.2
8.3.3
1
datawire/aes:3.11.195ec30b3c732
click@8.1.7
8.3.3
1
datawire/emissary:3.12.21f67a1292d2a
click@8.1.8
8.3.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
click@7.1.2
8.3.3
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
click@8.1.7
8.3.3
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
click@8.1.7
8.3.3
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
click@8.1.3
8.3.3
1
devopsgoofy/k8s-platform:latestad865312099f
click@8.1.7
8.3.3
1
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
click@8.0.4
8.3.3
1
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3
1
djjudas21/alertify:0.1.0ba22be670c37
click@8.2.1
8.3.3
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
click@8.2.1
8.3.3
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
click@8.2.1
8.3.3
1
douz/helpdesk:latest4384103d0219
click@8.1.3
8.3.3
1
dpage/pgadmin4:8.418cd5711fc9a
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.