StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3

Open the chart page →

7,579
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
click@8.1.7
8.3.3

Open the chart page →

2,452
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
ghcr.io/devops-ia/simple-krr-dashboard:1.6.34c625eff5410
click@8.3.1
8.3.3

Open the chart page →

2,234
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
click@8.1.8
8.3.3

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
click@8.3.1
8.3.3

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
click@8.1.8
8.3.3

Open the chart page →

4,634
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
click@8.3.1
8.3.3

Open the chart page →

1,693
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
click@8.3.1
8.3.3

Open the chart page →

2,003
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
click@8.1.7
8.3.3

Open the chart page →

1,133
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3

Open the chart page →

18,517
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
click@8.1.3
8.3.3

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
click@8.3.0
8.3.3

Open the chart page →

3,804
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
click@8.3.1
8.3.3
agentarea/agentarea-worker:latest1e5cb68ee77a
click@8.3.1
8.3.3

Open the chart page →

14,914
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
click@8.2.1
8.3.3

Open the chart page →

12,037
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3

Open the chart page →

17,877
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
click@8.2.1
8.3.3

Open the chart page →

9,971
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
click@8.1.7
8.3.3

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
click@8.1.7
8.3.3

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
click@8.1.7
8.3.3

Open the chart page →

1,944
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3

Open the chart page →

4,854
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3

Open the chart page →

3,558
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
click@8.1.7
8.3.3

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3

Open the chart page →

10,858
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3

Open the chart page →

9,562
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
click@8.3.1
8.3.3

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
click@8.1.8
8.3.3

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3

Open the chart page →

5,305
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
click@7.1.1
8.3.3

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
click@8.0.1
8.3.3

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
click@8.1.3
8.3.3

Open the chart page →

3,924
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
click@8.0.1
8.3.3

Open the chart page →

10,231
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
click@7.0
8.3.3

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
click@8.1.7
8.3.3

Open the chart page →

16,346
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
click@8.3.0
8.3.3

Open the chart page →

4,132
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3

Open the chart page →

3,345
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.31 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
click@8.1.7
8.3.3

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
click@8.1.8
8.3.3

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
click@8.1.8
8.3.3

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
click@7.0
8.3.3

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3

Open the chart page →

16,514

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
mawad98/backstage-pyactions:demo99422c56a274
click@8.3.1
8.3.3
1
mher/flower:2.051c3c3db5be3
click@8.1.6
8.3.3
1
milesmcc/shynet:v0.13.1ba54f7797a6b
click@8.1.3
8.3.3
1
milesmcc/shynet:v0.12.0e821e31140f7
click@8.0.3
8.3.3
1
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3
1
mindsdb/mindsdb:latest163011c09299
click@8.3.2
8.3.3
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3
1
mshanley80/httpbin2022:latest5b189a70c0fb
click@8.1.3
8.3.3
1
muhammedgamal/fp23:latest74b4cd69b6fa
click@8.1.7
8.3.3
1
nabinchhetri/flask-app:v2.0be189fbf3411
click@8.1.3
8.3.3
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
click@8.1.7
8.3.3
1
neilpeterson/aks-helloworld:v1fb47732ef36b
click@6.7
8.3.3
1
neilpeterson/chart-tweet:latest64fd8dab075f
click@6.7
8.3.3
1
netboxcommunity/netbox:v3.2.83d652dca5351
click@8.1.3
8.3.3
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
click@8.1.7
8.3.3
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
click@8.3.2
8.3.3
1
neuvector/prometheus-exporter:1.0.181d78ed4eef40
click@8.1.7
8.3.3
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
click@8.1.3
8.3.3
1
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3
1
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3
1
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3
1
opea/asr:1.025dd26d9cd09
click@8.1.7
8.3.3
1
opea/chatqna:1.038c51b791efa
click@8.1.7
8.3.3
1
opea/codegen:1.058f91683892d
click@8.1.7
8.3.3
1
opea/codetrans:1.0e2436483b73d
click@8.1.7
8.3.3
1
opea/docsum:1.03eaa91849512
click@8.1.7
8.3.3
1
opea/guardrails-tgi:1.0262c6048aab8
click@8.1.7
8.3.3
1
opea/guardrails-tgi:latestf68bec6a1271
click@8.1.8
8.3.3
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
click@8.1.7
8.3.3
1
opea/speecht5:1.0249afad3d268
click@8.1.7
8.3.3
1
opea/tts:1.0257ae94709e9
click@8.1.7
8.3.3
1
opea/web-retriever-chroma:1.0fe08165d7770
click@8.1.7
8.3.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
click@8.2.1
8.3.3
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
click@8.3.1
8.3.3
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
click@8.2.1
8.3.3
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
click@8.2.1
8.3.3
1
opencsghq/label-studio:v2.5.047e22aa71870
click@8.1.7
8.3.3
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
click@8.1.7
8.3.3
1
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
click@6.7
8.3.3
1
opendatacube/restcube:latest91870111837c
click@6.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.