StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
click@8.1.7
8.3.3

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3

Open the chart page →

1,447
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
click@8.0.3
8.3.3

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
click@8.0.3
8.3.3

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
click@8.1.3
8.3.3

Open the chart page →

9,145
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
click@8.1.8
8.3.3

Open the chart page →

10,622
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
click@8.1.7
8.3.3

Open the chart page →

2,800
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
click@8.3.1
8.3.3

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
click@8.1.7
8.3.3

Open the chart page →

2,119
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
click@7.1.2
8.3.3

Open the chart page →

4,086
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
click@8.2.1
8.3.3

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
click@8.1.3
8.3.3

Open the chart page →

11,384
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
click@7.1.2
8.3.3

Open the chart page →

4,918
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
click@8.1.3
8.3.3

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3

Open the chart page →

5,987
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
click@8.1.7
8.3.3
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
click@8.1.7
8.3.3

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
click@8.1.7
8.3.3

Open the chart page →

6,041
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
click@7.1.2
8.3.3

Open the chart page →

5,173
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
click@6.7
8.3.3

Open the chart page →

5,851
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
click@8.1.7
8.3.3
stackstorm/st2api:3.86f56d239d280
click@8.1.7
8.3.3
stackstorm/st2auth:3.833ecfda16608
click@8.1.7
8.3.3
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
click@8.1.7
8.3.3
stackstorm/st2notifier:3.8f190a6212195
click@8.1.7
8.3.3
stackstorm/st2rulesengine:3.8259503496ff9
click@8.1.7
8.3.3
stackstorm/st2scheduler:3.8b1de2055c362
click@8.1.7
8.3.3
stackstorm/st2sensorcontainer:3.8b1a338f64773
click@8.1.7
8.3.3
stackstorm/st2stream:3.81c8904a3bf67
click@8.1.7
8.3.3
stackstorm/st2timersengine:3.81bf35bfaf00c
click@8.1.7
8.3.3
stackstorm/st2workflowengine:3.819fdfffdbba8
click@8.1.7
8.3.3

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
click@8.1.7
8.3.3

Open the chart page →

3,004
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
click@8.3.2
8.3.3

Open the chart page →

4,332
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3

Open the chart page →

17,245
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
click@8.1.7
8.3.3

Open the chart page →

3,534
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
click@8.1.8
8.3.3

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
click@8.1.8
8.3.3

Open the chart page →

3,033
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
click@7.0
8.3.3

Open the chart page →

4,515
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
click@8.1.7
8.3.3

Open the chart page →

1,339
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
click@8.1.3
8.3.3

Open the chart page →

6,168
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
click@8.3.1
8.3.3

Open the chart page →

17,263
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
click@6.7
8.3.3

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
click@8.2.1
8.3.3

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
click@8.3.1
8.3.3

Open the chart page →

13,953
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.8.063ea05e73842
click@8.1.3
8.3.3
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
click@8.1.3
8.3.3
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
click@8.1.3
8.3.3
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
click@8.1.3
8.3.3

Open the chart page →

96,941
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
click@8.0.3
8.3.3

Open the chart page →

1,841
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
click@8.1.7
8.3.3

Open the chart page →

1,650
k8s-telegram-sendertelegram-senderVerified publisher0.0.11 of 1See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
danuk/telegram-sender:0.0.1026560388070
click@8.1.3
8.3.3

Open the chart page →

3,048
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
click@8.2.1
8.3.3

Open the chart page →

1,272
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
click@8.1.7
8.3.3

Open the chart page →

3,569
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
click@7.1.2
8.3.3

Open the chart page →

4,605
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
click@8.1.7
8.3.3

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
click@8.3.1
8.3.3

Open the chart page →

9,316
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
click@8.1.4
8.3.3

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3

Open the chart page →

13,874
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
click@8.1.8
8.3.3

Open the chart page →

2,286
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
click@7.1.2
8.3.3

Open the chart page →

3,717
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
click@7.1.2
8.3.3

Open the chart page →

10,598

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
click@8.1.8
8.3.3
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
click@8.1.7
8.3.3
1
hansehe/locust:1.1.0bc8e45262bc4
click@8.1.8
8.3.3
1
hayk96/alerta-web:9.0.486377705e9e3
click@8.1.7
8.3.3
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
click@8.1.3
8.3.3
1
heartexlabs/label-studio:latestaa461572e8f9
click@8.1.7
8.3.3
1
helmforge/fastmcp-server:0.2.061f759a1421f
click@8.3.2
8.3.3
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
click@8.1.3
8.3.3
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
click@8.1.7
8.3.3
1
homeassistant/home-assistant:2026.75a531753cea9
click@8.1.8
8.3.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
click@8.1.7
8.3.3
1
i4trust/activation-service:2.2.09f3719176893
click@8.1.3
8.3.3
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
click@8.1.2
8.3.3
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
click@8.3.1
8.3.3
1
improwised/erpnext-worker:v13.4.197280b55cbd4
click@7.1.2
8.3.3
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
click@8.1.3
8.3.3
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
click@8.1.3
8.3.3
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
click@8.3.2
8.3.3
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
click@7.0
8.3.3
1
irakli/ms-hello-python:latest9e7a91ba9ae0
click@7.1.2
8.3.3
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
click@7.0
8.3.3
1
istio/examples-helloworld-v1:latest328b237e4fb1
click@8.1.7
8.3.3
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
click@8.1.7
8.3.3
1
jakuboskera/guestbook:v0.3.04989afa06e74
click@8.0.3
8.3.3
1
jakuboskera/todo:v0.2.3714b1adbbc2d
click@8.1.8
8.3.3
1
jamoos/kweather:history163e2e8a6e87
click@8.1.7
8.3.3
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
click@8.1.8
8.3.3
1
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3
1
josh5/unmanic:0.2.64d49c4816260
click@8.1.7
8.3.3
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
click@7.1.2
8.3.3
1
julb/http-reqtrace:1.1.00806409af397
click@7.1.2
8.3.3
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
click@8.3.2
8.3.3
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
click@7.1.2
8.3.3
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
click@8.1.3
8.3.3
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
click@8.3.2
8.3.3
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
click@8.3.2
8.3.3
1
kenchrcum/hetzner-s3-operator:0.1.384dae7aeea5b
click@8.3.2
8.3.3
1
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
click@8.3.2
8.3.3
1
kennethreitz/httpbin:latest599fe5e50731
click@7.0
8.3.3
1
kfirfer/slackgpt:0.0.15461331bd838e
click@8.1.7
8.3.3
1
kfserving/models-web-app:v0.6.1f322d6ffdfa3
click@8.0.1
8.3.3
1
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
1
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3
1
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3
1
kodekloud/webapp-color:latest99c3821ea49b
click@7.0
8.3.3
1
kong/httpbin:latesta6ac46531193
click@8.1.8
8.3.3
1
kserve/models-web-app:v0.8.063ea05e73842
click@8.1.3
8.3.3
1
kserve/models-web-app:v0.13.073486345a602
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.