StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3

Open the chart page →

7,579
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
click@8.1.7
8.3.3

Open the chart page →

2,452
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
ghcr.io/devops-ia/simple-krr-dashboard:1.6.34c625eff5410
click@8.3.1
8.3.3

Open the chart page →

2,234
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
click@8.1.8
8.3.3

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
click@8.3.1
8.3.3

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
click@8.1.8
8.3.3

Open the chart page →

4,634
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
click@8.3.1
8.3.3

Open the chart page →

1,693
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
click@8.3.1
8.3.3

Open the chart page →

2,003
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
click@8.1.7
8.3.3

Open the chart page →

1,133
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3

Open the chart page →

18,517
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
click@8.1.3
8.3.3

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
click@8.3.0
8.3.3

Open the chart page →

3,804
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
click@8.3.1
8.3.3
agentarea/agentarea-worker:latest1e5cb68ee77a
click@8.3.1
8.3.3

Open the chart page →

14,914
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
click@8.2.1
8.3.3

Open the chart page →

12,037
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3

Open the chart page →

17,877
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
click@8.2.1
8.3.3

Open the chart page →

9,971
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
click@8.1.7
8.3.3

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
click@8.1.7
8.3.3

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
click@8.1.7
8.3.3

Open the chart page →

1,944
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3

Open the chart page →

4,854
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3

Open the chart page →

3,558
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
click@8.1.7
8.3.3

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3

Open the chart page →

10,858
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3

Open the chart page →

9,562
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
click@8.3.1
8.3.3

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
click@8.1.8
8.3.3

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3

Open the chart page →

5,305
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
click@7.1.1
8.3.3

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
click@8.0.1
8.3.3

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
click@8.1.3
8.3.3

Open the chart page →

3,924
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
click@8.0.1
8.3.3

Open the chart page →

10,231
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
click@7.0
8.3.3

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
click@8.1.7
8.3.3

Open the chart page →

16,346
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
click@8.3.0
8.3.3

Open the chart page →

4,132
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3

Open the chart page →

3,345
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.31 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
click@8.1.7
8.3.3

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
click@8.1.8
8.3.3

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
click@8.1.8
8.3.3

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
click@7.0
8.3.3

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3

Open the chart page →

16,514

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
click@8.1.8
8.3.3
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
click@8.1.7
8.3.3
1
hansehe/locust:1.1.0bc8e45262bc4
click@8.1.8
8.3.3
1
hayk96/alerta-web:9.0.486377705e9e3
click@8.1.7
8.3.3
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
click@8.1.3
8.3.3
1
heartexlabs/label-studio:latestaa461572e8f9
click@8.1.7
8.3.3
1
helmforge/fastmcp-server:0.2.061f759a1421f
click@8.3.2
8.3.3
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
click@8.1.3
8.3.3
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
click@8.1.7
8.3.3
1
homeassistant/home-assistant:2026.75a531753cea9
click@8.1.8
8.3.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
click@8.1.7
8.3.3
1
i4trust/activation-service:2.2.09f3719176893
click@8.1.3
8.3.3
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
click@8.1.2
8.3.3
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
click@8.3.1
8.3.3
1
improwised/erpnext-worker:v13.4.197280b55cbd4
click@7.1.2
8.3.3
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
click@8.1.3
8.3.3
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
click@8.1.3
8.3.3
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
click@8.3.2
8.3.3
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
click@7.0
8.3.3
1
irakli/ms-hello-python:latest9e7a91ba9ae0
click@7.1.2
8.3.3
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
click@7.0
8.3.3
1
istio/examples-helloworld-v1:latest328b237e4fb1
click@8.1.7
8.3.3
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
click@8.1.7
8.3.3
1
jakuboskera/guestbook:v0.3.04989afa06e74
click@8.0.3
8.3.3
1
jakuboskera/todo:v0.2.3714b1adbbc2d
click@8.1.8
8.3.3
1
jamoos/kweather:history163e2e8a6e87
click@8.1.7
8.3.3
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
click@8.1.8
8.3.3
1
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3
1
josh5/unmanic:0.2.64d49c4816260
click@8.1.7
8.3.3
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
click@7.1.2
8.3.3
1
julb/http-reqtrace:1.1.00806409af397
click@7.1.2
8.3.3
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
click@8.3.2
8.3.3
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
click@7.1.2
8.3.3
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
click@8.1.3
8.3.3
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
click@8.3.2
8.3.3
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
click@8.3.2
8.3.3
1
kenchrcum/hetzner-s3-operator:0.1.384dae7aeea5b
click@8.3.2
8.3.3
1
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
click@8.3.2
8.3.3
1
kennethreitz/httpbin:latest599fe5e50731
click@7.0
8.3.3
1
kfirfer/slackgpt:0.0.15461331bd838e
click@8.1.7
8.3.3
1
kfserving/models-web-app:v0.6.1f322d6ffdfa3
click@8.0.1
8.3.3
1
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
1
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3
1
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3
1
kodekloud/webapp-color:latest99c3821ea49b
click@7.0
8.3.3
1
kong/httpbin:latesta6ac46531193
click@8.1.8
8.3.3
1
kserve/models-web-app:v0.8.063ea05e73842
click@8.1.3
8.3.3
1
kserve/models-web-app:v0.13.073486345a602
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.