StackRadarChart IndexLive demo

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.2; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 576; of 17,781 indexed, latest versions
Container images: 614; deployed by those charts
Fix available: 2 of 3; affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected package	Affected versions	Fixed in	Images
clickpypi	6.7, 7.0, 7.1.1, 7.1.2+16 more	8.3.3	614
python-clickdeb	8.1.3-2	no fix listed	8
python-clickrpm	8.2.1-160000.2.2	8.2.1-160000.3.1	1

OSV records: DEBIAN-CVE-2026-7246 PYSEC-2026-2132 SUSE-SU-2026:22321-1
Also known as: GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars

Chart

Latest

Affected images

Radar Score

calibre-webvista

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	click@8.2.1	8.3.3

Open the chart page →

7,628

vote-appvote-app

1 of 6 See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
thecloudspark/app-vote :1.0	c7da7417a86a	click@8.1.3	8.3.3

Open the chart page →

3,031

voteappvoting-app-helm-charts-repo

1 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	click@8.1.3	8.3.3

Open the chart page →

8,262

voteappvoting-app-helm-charts-repo-cloud

1 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	click@8.1.3	8.3.3

Open the chart page →

8,262

kongwallarm

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	click@7.0	8.3.3

Open the chart page →

11,405

wallarm-node-nextwallarm

1 of 2 See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	click@8.1.7	8.3.3

Open the chart page →

2,408

wallarm-oobwallarm

1 of 3 See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.10.1	aecd88b24c51	click@8.1.7	8.3.3

Open the chart page →

2,824

wasabi-s3-operatorwasabi-s3-operator

1 of 1 See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
kenchrcum/wasabi-s3-operator :0.2.7	ce657c622ce5	click@8.3.2	8.3.3

Open the chart page →

628

wazuhwazuh-helm-eks

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	click@8.1.3	8.3.3

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	click@7.0	8.3.3

Open the chart page →

11,119

supersetwbstack

1 of 1 See more

7,085

weather-chartweather-web-app

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	click@8.0.4	8.3.3

Open the chart page →

2,670

welcome-elos-webappwelcome-elos-webapp

1 of 1 See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
pococze/python-hello-elos :2.0.0	7a1aab425e51	click@8.1.7	8.3.3

Open the chart page →

2,678

ambassadorwenerme

1 of 2 See more

4,086

emissary-ingresswenerme

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	click@8.1.8	8.3.3

Open the chart page →

10,843

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.15.1	35034611d981	click@7.1.2	8.3.3

Open the chart page →

22,665

wexa-studiowexa-studio

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	click@8.2.1	8.3.3

Open the chart page →

14,983

ceph-csi-cephfswikimedia

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	click@6.7	8.3.3

Open the chart page →

10,285

ceph-csi-rbdwikimedia

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	click@6.7	8.3.3

Open the chart page →

11,784

powerdnsadminwitcom-gmbh

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	click@8.0.3	8.3.3

Open the chart page →

2,643

xkopsxkops

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	click@8.1.7	8.3.3

Open the chart page →

13,677

zahori-serverzahori

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	click@8.1.3	8.3.3

Open the chart page →

5,846

zerossl-cert-managerzerossl-cert-manager

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	click@8.1.8	8.3.3

Open the chart page →

570

alertmanager-matrix-forwarderzloi-space

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	click@8.0.3	8.3.3

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	click@8.0.3	8.3.3

Open the chart page →

1,636

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	click@8.3.2	8.3.3

Open the chart page →

7,849

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
dpage/pgadmin4 :7.5	37946e4f3e7b	click@8.1.4	8.3.3	1
dpage/pgadmin4 :9.11.0	50700ac17936	click@8.3.1	8.3.3	1
dpage/pgadmin4 :9.2	52cb72a9e3da	click@8.1.8	8.3.3	1
dpage/pgadmin4 :8.13	561c1f8f99f2	click@8.1.7	8.3.3	1
dpage/pgadmin4 :4.5	a5a656e1d5fd	click@7.0	8.3.3	1
dpage/pgadmin4 :4.22	b1f00b8163cf	click@7.1.2	8.3.3	1
drgrove/mtls-server :v0.14.2	361721759a2b	click@7.0	8.3.3	1
dserio83/velero-api :0.3.1	6b3d9115fee2	click@8.1.8	8.3.3	1
dserio83/velero-watchdog :0.1.8	d5deae589229	click@8.1.8	8.3.3	1
dysnix/pritunl :v1.29-r8	19951e3e7a32	click@7.1.2	8.3.3	1
eclipseaerios/aerios-k8s-shim :v1.0.0	d4ed3d8e5db4	click@8.1.7	8.3.3	1
eclipseaerios/hlo-data-aggregator :v3.0.0	b433c2b9f5dc	click@8.1.7	8.3.3	1
eclipseaerios/hlo-deployment-engine :v3.0.0	d582d39208c7	click@8.1.7	8.3.3	1
eclipseaerios/hlo-fe-engine :v3.0.0	8ed2df4ca692	click@8.1.7	8.3.3	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	click@8.3.1	8.3.3	1
eclipseaerios/self-awareness-hardware-info :1.4.4	34b72f45b46a	click@8.3.1	8.3.3	1
eclipseaerios/self-awareness-power-consumption :1.3.3	c8af377c709f	click@8.3.1	8.3.3	1
eclipseaerios/trust-manager :1.0.0	f55442e2c0ed	click@8.1.8	8.3.3	1
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	click@7.0	8.3.3	1
erenozcan17/flask_analytics :v3.1	c9b6f0dfbffc	click@8.2.1	8.3.3	1
errbotio/errbot :6.1.9	00ee4e0953ab	click@8.1.3	8.3.3	1
esphome/esphome :1.18.0	3f51ec10e823	click@7.1.2	8.3.3	1
esphome/esphome :2024.3.0	9ab8cc88b28c	click@8.1.7	8.3.3	1
esphome/esphome :2024.12.2	b2c6322700ac	click@8.1.7	8.3.3	1
esphome/esphome :2025.3.0	def8b6e4f517	click@8.1.7	8.3.3	1
evk02/mlflow :2.2.1	ef6ff257ef35	click@8.1.3	8.3.3	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	click@8.1.3	8.3.3	1
fiware/bae-activation-service :v0.0.3	3e3ec88d59ed	click@7.1.2	8.3.3	1
fiware/ishare-satellite :1.2.0	c3c1c8ccfb45	click@8.1.3	8.3.3	1
flag5/clustersecret :0.0.9	4ad5748bfcc6	click@8.0.3	8.3.3	1
flyway/flyway :9.15	45b5d7cdc75a	click@8.1.3	8.3.3	1
flyway/flyway :9.14.1-alpine	80f12c80502b	click@8.1.3	8.3.3	1
forchaladtest/testwebapp :0.1	5909cf64ef53	click@7.1.2	8.3.3	1
fossology/fossology :4.2.1	8bd1f22ba7bb	click@8.1.3	8.3.3	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	click@8.0.4	8.3.3	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	click@8.0.4	8.3.3	1
freedom98/flask :k3.0	d7ce1533f297	click@8.1.8	8.3.3	1
galaxy/cloudman-server :latest	e5c265fe9fcd	click@8.1.3	8.3.3	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	click@8.3.1	8.3.3	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	click@7.1.2	8.3.3	1
gethue/hue :4.11.0	11b649636e68	click@8.1.3	8.3.3	1
gethue/hue :latest	7d5c1b9f8a79	click@8.3.1	8.3.3	1
gmaas2/github-api :latest	148fc2d9afe9	click@8.1.3	8.3.3	1
goofball222/pritunl :1.30.3070.59	43c0743701d4	click@8.0.3	8.3.3	1
goofball222/pritunl :1.32.3602.80	7bf26032dfce	click@8.1.3	8.3.3	1
gpappsoft/privacyidea-docker :3.12.2	af7841adad26	click@8.1.8	8.3.3	1
grafana/oncall :v1.16.5	499851658393	click@8.2.1	8.3.3	1
greenbirdit/locust :0.9.0	e99d53bdc944	click@7.0	8.3.3	1
halkeye/slack-resurrect :v0.1.4	77b05e95fdb5	click@7.0	8.3.3	1
hamidyousefi93/saam-test :latest	c34f071f6ed0	click@8.1.7	8.3.3	1