StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3

Open the chart page →

7,579
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
click@8.1.7
8.3.3

Open the chart page →

2,452
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
ghcr.io/devops-ia/simple-krr-dashboard:1.6.34c625eff5410
click@8.3.1
8.3.3

Open the chart page →

2,234
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
click@8.1.8
8.3.3

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
click@8.3.1
8.3.3

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
click@8.1.8
8.3.3

Open the chart page →

4,634
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
click@8.3.1
8.3.3

Open the chart page →

1,693
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
click@8.3.1
8.3.3

Open the chart page →

2,003
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
click@8.1.7
8.3.3

Open the chart page →

1,133
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3

Open the chart page →

18,517
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
click@8.1.3
8.3.3

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
click@8.3.0
8.3.3

Open the chart page →

3,804
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
click@8.3.1
8.3.3
agentarea/agentarea-worker:latest1e5cb68ee77a
click@8.3.1
8.3.3

Open the chart page →

14,914
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
click@8.2.1
8.3.3

Open the chart page →

12,037
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3

Open the chart page →

17,877
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
click@8.2.1
8.3.3

Open the chart page →

9,971
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
click@8.1.7
8.3.3

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
click@8.1.7
8.3.3

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
click@8.1.7
8.3.3

Open the chart page →

1,944
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3

Open the chart page →

4,854
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3

Open the chart page →

3,558
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
click@8.1.7
8.3.3

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3

Open the chart page →

10,858
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3

Open the chart page →

9,562
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
click@8.3.1
8.3.3

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
click@8.1.8
8.3.3

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3

Open the chart page →

5,305
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
click@7.1.1
8.3.3

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
click@8.0.1
8.3.3

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
click@8.1.3
8.3.3

Open the chart page →

3,924
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
click@8.0.1
8.3.3

Open the chart page →

10,231
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
click@7.0
8.3.3

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
click@8.1.7
8.3.3

Open the chart page →

16,346
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
click@8.3.0
8.3.3

Open the chart page →

4,132
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3

Open the chart page →

3,345
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.31 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
click@8.1.7
8.3.3

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
click@8.1.8
8.3.3

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
click@8.1.8
8.3.3

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
click@7.0
8.3.3

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3

Open the chart page →

16,514

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:7.537946e4f3e7b
click@8.1.4
8.3.3
1
dpage/pgadmin4:9.11.050700ac17936
click@8.3.1
8.3.3
1
dpage/pgadmin4:9.252cb72a9e3da
click@8.1.8
8.3.3
1
dpage/pgadmin4:8.13561c1f8f99f2
click@8.1.7
8.3.3
1
dpage/pgadmin4:4.5a5a656e1d5fd
click@7.0
8.3.3
1
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3
1
drgrove/mtls-server:v0.14.2361721759a2b
click@7.0
8.3.3
1
dserio83/velero-api:0.3.16b3d9115fee2
click@8.1.8
8.3.3
1
dserio83/velero-watchdog:0.1.8d5deae589229
click@8.1.8
8.3.3
1
dysnix/pritunl:v1.29-r819951e3e7a32
click@7.1.2
8.3.3
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
click@8.1.7
8.3.3
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
click@8.1.7
8.3.3
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
click@8.1.7
8.3.3
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
click@8.1.7
8.3.3
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
click@8.3.1
8.3.3
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
click@8.3.1
8.3.3
1
eclipseaerios/self-awareness-power-consumption:1.3.3c8af377c709f
click@8.3.1
8.3.3
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
click@8.1.8
8.3.3
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
click@7.0
8.3.3
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
click@8.2.1
8.3.3
1
errbotio/errbot:6.1.900ee4e0953ab
click@8.1.3
8.3.3
1
esphome/esphome:1.18.03f51ec10e823
click@7.1.2
8.3.3
1
esphome/esphome:2024.3.09ab8cc88b28c
click@8.1.7
8.3.3
1
esphome/esphome:2024.12.2b2c6322700ac
click@8.1.7
8.3.3
1
esphome/esphome:2025.3.0def8b6e4f517
click@8.1.7
8.3.3
1
evk02/mlflow:2.2.1ef6ff257ef35
click@8.1.3
8.3.3
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
click@8.1.3
8.3.3
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
click@7.1.2
8.3.3
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
click@8.1.3
8.3.3
1
flag5/clustersecret:0.0.94ad5748bfcc6
click@8.0.3
8.3.3
1
flyway/flyway:9.1545b5d7cdc75a
click@8.1.3
8.3.3
1
flyway/flyway:9.14.1-alpine80f12c80502b
click@8.1.3
8.3.3
1
forchaladtest/testwebapp:0.15909cf64ef53
click@7.1.2
8.3.3
1
fossology/fossology:4.2.18bd1f22ba7bb
click@8.1.3
8.3.3
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
click@8.0.4
8.3.3
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
click@8.0.4
8.3.3
1
freedom98/flask:k3.0d7ce1533f297
click@8.1.8
8.3.3
1
galaxy/cloudman-server:lateste5c265fe9fcd
click@8.1.3
8.3.3
1
geopython/pycsw:3.0.0-beta284662ea6b78b
click@8.3.1
8.3.3
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
click@7.1.2
8.3.3
1
gethue/hue:4.11.011b649636e68
click@8.1.3
8.3.3
1
gethue/hue:latest7d5c1b9f8a79
click@8.3.1
8.3.3
1
gmaas2/github-api:latest148fc2d9afe9
click@8.1.3
8.3.3
1
goofball222/pritunl:1.30.3070.5943c0743701d4
click@8.0.3
8.3.3
1
goofball222/pritunl:1.32.3602.807bf26032dfce
click@8.1.3
8.3.3
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
click@8.1.8
8.3.3
1
grafana/oncall:v1.16.5499851658393
click@8.2.1
8.3.3
1
greenbirdit/locust:0.9.0e99d53bdc944
click@7.0
8.3.3
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
click@7.0
8.3.3
1
hamidyousefi93/saam-test:latestc34f071f6ed0
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.