StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
click@8.0.3
8.3.3

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
click@8.0.4
8.3.3

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
click@8.1.3
8.3.3

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
click@8.1.3
8.3.3

Open the chart page →

3,294
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3

Open the chart page →

2,347
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3

Open the chart page →

43,341
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
click@8.1.3
8.3.3

Open the chart page →

3,158
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
click@8.1.3
8.3.3

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3

Open the chart page →

3,811
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
click@7.1.2
8.3.3

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3

Open the chart page →

8,556
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3

Open the chart page →

4,560
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
click@8.2.1
8.3.3

Open the chart page →

11,950
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
click@7.0
8.3.3

Open the chart page →

1,458
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
click@7.1.2
8.3.3

Open the chart page →

1,166
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
click@8.1.7
8.3.3
ahmetgrbzz/web_server:1.02e7fef69c29f
click@8.1.7
8.3.3

Open the chart page →

3,034
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
click@7.0
8.3.3

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
click@8.1.3
8.3.3

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
socialmediamacroscope/preprocessing:0.1.3ca863306314b
click@8.1.7
8.3.3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
click@8.1.7
8.3.3

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
click@8.1.6
8.3.3

Open the chart page →

1,588
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
click@8.3.1
8.3.3

Open the chart page →

2,555
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
click@8.3.1
8.3.3

Open the chart page →

2,298
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3

Open the chart page →

5,288
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
click@7.0
8.3.3

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3

Open the chart page →

40,715
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
click@8.2.1
8.3.3
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
click@8.1.7
8.3.3

Open the chart page →

18,922
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
click@8.1.8
8.3.3
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
click@8.3.1
8.3.3

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
click@8.1.8
8.3.3

Open the chart page →

6,583
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
click@8.2.1
8.3.3

Open the chart page →

2,376
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
click@8.1.8
8.3.3

Open the chart page →

4,749
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
click@8.3.1
8.3.3

Open the chart page →

3,854
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3

Open the chart page →

8,189
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3

Open the chart page →

2,565
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3

Open the chart page →

22,084
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
click@8.1.7
8.3.3

Open the chart page →

12,912
libretimepodzone-chartsVerified publisher0.4.14 of 9See more

libretime podzone-charts 0.4.1

4 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-api:latesteae026cc8909
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-playout:latest71a8706531aa
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
click@8.1.8
8.3.3

Open the chart page →

11,149
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3

Open the chart page →

5,451
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
click@8.1.8
8.3.3

Open the chart page →

3,071
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3

Open the chart page →

4,616
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
click@8.1.3
8.3.3

Open the chart page →

14,537
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
click@8.1.3
8.3.3

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
click@8.1.7
8.3.3

Open the chart page →

4,272

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
mawad98/backstage-pyactions:demo99422c56a274
click@8.3.1
8.3.3
1
mher/flower:2.051c3c3db5be3
click@8.1.6
8.3.3
1
milesmcc/shynet:v0.13.1ba54f7797a6b
click@8.1.3
8.3.3
1
milesmcc/shynet:v0.12.0e821e31140f7
click@8.0.3
8.3.3
1
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3
1
mindsdb/mindsdb:latest163011c09299
click@8.3.2
8.3.3
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3
1
mshanley80/httpbin2022:latest5b189a70c0fb
click@8.1.3
8.3.3
1
muhammedgamal/fp23:latest74b4cd69b6fa
click@8.1.7
8.3.3
1
nabinchhetri/flask-app:v2.0be189fbf3411
click@8.1.3
8.3.3
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
click@8.1.7
8.3.3
1
neilpeterson/aks-helloworld:v1fb47732ef36b
click@6.7
8.3.3
1
neilpeterson/chart-tweet:latest64fd8dab075f
click@6.7
8.3.3
1
netboxcommunity/netbox:v3.2.83d652dca5351
click@8.1.3
8.3.3
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
click@8.1.7
8.3.3
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
click@8.3.2
8.3.3
1
neuvector/prometheus-exporter:1.0.181d78ed4eef40
click@8.1.7
8.3.3
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
click@8.1.3
8.3.3
1
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3
1
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3
1
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3
1
opea/asr:1.025dd26d9cd09
click@8.1.7
8.3.3
1
opea/chatqna:1.038c51b791efa
click@8.1.7
8.3.3
1
opea/codegen:1.058f91683892d
click@8.1.7
8.3.3
1
opea/codetrans:1.0e2436483b73d
click@8.1.7
8.3.3
1
opea/docsum:1.03eaa91849512
click@8.1.7
8.3.3
1
opea/guardrails-tgi:1.0262c6048aab8
click@8.1.7
8.3.3
1
opea/guardrails-tgi:latestf68bec6a1271
click@8.1.8
8.3.3
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
click@8.1.7
8.3.3
1
opea/speecht5:1.0249afad3d268
click@8.1.7
8.3.3
1
opea/tts:1.0257ae94709e9
click@8.1.7
8.3.3
1
opea/web-retriever-chroma:1.0fe08165d7770
click@8.1.7
8.3.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
click@8.2.1
8.3.3
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
click@8.3.1
8.3.3
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
click@8.2.1
8.3.3
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
click@8.2.1
8.3.3
1
opencsghq/label-studio:v2.5.047e22aa71870
click@8.1.7
8.3.3
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
click@8.1.7
8.3.3
1
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
click@6.7
8.3.3
1
opendatacube/restcube:latest91870111837c
click@6.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.