StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
click@8.1.7
8.3.3

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3

Open the chart page →

1,447
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
click@8.0.3
8.3.3

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
click@8.0.3
8.3.3

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
click@8.1.3
8.3.3

Open the chart page →

9,145
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
click@8.1.8
8.3.3

Open the chart page →

10,622
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
click@8.1.7
8.3.3

Open the chart page →

2,800
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
click@8.3.1
8.3.3

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
click@8.1.7
8.3.3

Open the chart page →

2,119
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
click@7.1.2
8.3.3

Open the chart page →

4,086
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
click@8.2.1
8.3.3

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
click@8.1.3
8.3.3

Open the chart page →

11,384
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
click@7.1.2
8.3.3

Open the chart page →

4,918
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
click@8.1.3
8.3.3

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3

Open the chart page →

5,987
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
click@8.1.7
8.3.3
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
click@8.1.7
8.3.3

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
click@8.1.7
8.3.3

Open the chart page →

6,041
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
click@7.1.2
8.3.3

Open the chart page →

5,173
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
click@6.7
8.3.3

Open the chart page →

5,851
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
click@8.1.7
8.3.3
stackstorm/st2api:3.86f56d239d280
click@8.1.7
8.3.3
stackstorm/st2auth:3.833ecfda16608
click@8.1.7
8.3.3
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
click@8.1.7
8.3.3
stackstorm/st2notifier:3.8f190a6212195
click@8.1.7
8.3.3
stackstorm/st2rulesengine:3.8259503496ff9
click@8.1.7
8.3.3
stackstorm/st2scheduler:3.8b1de2055c362
click@8.1.7
8.3.3
stackstorm/st2sensorcontainer:3.8b1a338f64773
click@8.1.7
8.3.3
stackstorm/st2stream:3.81c8904a3bf67
click@8.1.7
8.3.3
stackstorm/st2timersengine:3.81bf35bfaf00c
click@8.1.7
8.3.3
stackstorm/st2workflowengine:3.819fdfffdbba8
click@8.1.7
8.3.3

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
click@8.1.7
8.3.3

Open the chart page →

3,004
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
click@8.3.2
8.3.3

Open the chart page →

4,332
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3

Open the chart page →

17,245
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
click@8.1.7
8.3.3

Open the chart page →

3,534
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
click@8.1.8
8.3.3

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
click@8.1.8
8.3.3

Open the chart page →

3,033
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
click@7.0
8.3.3

Open the chart page →

4,515
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
click@8.1.7
8.3.3

Open the chart page →

1,339
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
click@8.1.3
8.3.3

Open the chart page →

6,168
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
click@8.3.1
8.3.3

Open the chart page →

17,263
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
click@6.7
8.3.3

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
click@8.2.1
8.3.3

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
click@8.3.1
8.3.3

Open the chart page →

13,953
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.8.063ea05e73842
click@8.1.3
8.3.3
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
click@8.1.3
8.3.3
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
click@8.1.3
8.3.3
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
click@8.1.3
8.3.3

Open the chart page →

96,941
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
click@8.0.3
8.3.3

Open the chart page →

1,841
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
click@8.1.7
8.3.3

Open the chart page →

1,650
k8s-telegram-sendertelegram-senderVerified publisher0.0.11 of 1See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
danuk/telegram-sender:0.0.1026560388070
click@8.1.3
8.3.3

Open the chart page →

3,048
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
click@8.2.1
8.3.3

Open the chart page →

1,272
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
click@8.1.7
8.3.3

Open the chart page →

3,569
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
click@7.1.2
8.3.3

Open the chart page →

4,605
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
click@8.1.7
8.3.3

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
click@8.3.1
8.3.3

Open the chart page →

9,316
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
click@8.1.4
8.3.3

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3

Open the chart page →

13,874
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
click@8.1.8
8.3.3

Open the chart page →

2,286
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
click@7.1.2
8.3.3

Open the chart page →

3,717
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
click@7.1.2
8.3.3

Open the chart page →

10,598

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wms:latest1b90cdf68831
click@6.7
8.3.3
1
opendatacube/wps:latest80df355a660b
click@8.1.8
8.3.3
1
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
click@8.0.4
8.3.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
click@8.0.3
8.3.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3
1
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3
1
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3
1
pococze/python-hello-elos:2.0.07a1aab425e51
click@8.1.7
8.3.3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3
1
prowlercloud/prowler-api:5.31.14f252d579be2
click@8.3.1
8.3.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3
1
pysga1996/python-redis-web:latestfdeec30ad482
click@8.1.3
8.3.3
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
click@8.1.7
8.3.3
1
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3
1
redash/redash:10.0.0.b503639392753c0376
click@6.7
8.3.3
1
redash/redash:26.3.0c5c9148f5c38
click@8.1.3
8.3.3
1
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3
1
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
click@8.1.3
8.3.3
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
click@8.1.3
8.3.3
1
roadiehq/community-backstage-image:latestef355bf5b639
click@7.0
8.3.3
1
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3
1
robotshop/rs-payment:latest774b52c6180d
click@8.0.1
8.3.3
1
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
1
rommapp/romm:5.2.03512f2ca4557
click@8.2.1
8.3.3
1
rommapp/romm:4.4.1b909e95d1aab
click@8.2.1
8.3.3
1
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3
1
rook/ceph:v1.19.2944a1dd70496
click@8.0.3
8.3.3
1
rtuszik/photon-docker:2.4.021549c60f9e6
click@8.2.1
8.3.3
1
runx1/opta-agent:latest0ca3867d3200
click@8.1.2
8.3.3
1
salehmir/jesse:1.10.101afa95f979e9
click@8.0.4
8.3.3
1
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
click@8.1.8
8.3.3
1
seafileltd/seafile-mc:9.0.106693911bcc40
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:10.0.170628f29c663
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
click@8.0.1
8.3.3
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
click@8.0.1
8.3.3
1
seldonio/locust-core:0.81d0da98a2d76
click@7.0
8.3.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
click@8.0.0a1
8.3.3
1
sharanalwar/redchef-backend:latest8d3cab80df49
click@8.1.8
8.3.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
click@7.1.2
8.3.3
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
1
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.