StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
click@7.1.2
8.3.3

Open the chart page →

7,579
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
click@8.1.7
8.3.3

Open the chart page →

2,452
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
ghcr.io/devops-ia/simple-krr-dashboard:1.6.34c625eff5410
click@8.3.1
8.3.3

Open the chart page →

2,234
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
click@8.1.8
8.3.3

Open the chart page →

2,331
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
click@8.3.1
8.3.3

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
click@8.1.8
8.3.3

Open the chart page →

4,634
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
click@8.3.1
8.3.3

Open the chart page →

1,693
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
click@8.3.1
8.3.3

Open the chart page →

2,003
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
click@8.1.7
8.3.3

Open the chart page →

1,133
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
click@8.1.2
8.3.3
kobotoolbox/kpi:2.022.24dbcacc01bccd4
click@8.1.2
8.3.3

Open the chart page →

18,517
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
click@8.1.3
8.3.3

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
click@8.1.8
8.3.3

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
click@8.3.0
8.3.3

Open the chart page →

3,804
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
click@8.3.1
8.3.3
agentarea/agentarea-worker:latest1e5cb68ee77a
click@8.3.1
8.3.3

Open the chart page →

14,914
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
click@8.2.1
8.3.3

Open the chart page →

12,037
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
click@8.1.3
8.3.3

Open the chart page →

17,877
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
click@8.1.7
8.3.3
ddosify/selfhosted_backend:3.2.93c11e3182652
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
click@8.1.7
8.3.3

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
click@7.0
8.3.3

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
click@8.2.1
8.3.3

Open the chart page →

9,971
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
click@8.1.7
8.3.3

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
click@8.1.7
8.3.3

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
click@8.1.7
8.3.3

Open the chart page →

1,944
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
click@8.1.8
8.3.3

Open the chart page →

4,854
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
click@8.0.3
8.3.3

Open the chart page →

3,558
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
click@8.2.1
8.3.3

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
click@8.1.3
8.3.3

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
click@8.1.7
8.3.3

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3

Open the chart page →

10,858
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
click@8.2.1
8.3.3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
click@8.2.1
8.3.3
omkara25/simple-microservice-app-user-service:v2d62cba548580
click@8.2.1
8.3.3

Open the chart page →

9,562
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
click@8.3.1
8.3.3

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
click@7.1.2
8.3.3

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
click@8.1.8
8.3.3

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
click@8.1.8
8.3.3

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3

Open the chart page →

5,305
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
click@7.1.1
8.3.3

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
click@8.0.1
8.3.3

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
click@7.1.2
8.3.3

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
click@8.1.3
8.3.3

Open the chart page →

3,924
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
click@8.0.1
8.3.3

Open the chart page →

10,231
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
click@7.0
8.3.3

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
click@8.1.7
8.3.3

Open the chart page →

16,346
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
click@8.3.0
8.3.3

Open the chart page →

4,132
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
click@7.1.2
8.3.3

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
click@7.1.2
8.3.3

Open the chart page →

3,345
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.31 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
click@8.1.7
8.3.3

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
click@8.1.8
8.3.3

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
click@8.1.8
8.3.3

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
click@7.0
8.3.3

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3

Open the chart page →

16,514

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wms:latest1b90cdf68831
click@6.7
8.3.3
1
opendatacube/wps:latest80df355a660b
click@8.1.8
8.3.3
1
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
click@8.0.4
8.3.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
click@8.0.3
8.3.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3
1
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3
1
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3
1
pococze/python-hello-elos:2.0.07a1aab425e51
click@8.1.7
8.3.3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3
1
prowlercloud/prowler-api:5.31.14f252d579be2
click@8.3.1
8.3.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3
1
pysga1996/python-redis-web:latestfdeec30ad482
click@8.1.3
8.3.3
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
click@8.1.7
8.3.3
1
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3
1
redash/redash:10.0.0.b503639392753c0376
click@6.7
8.3.3
1
redash/redash:26.3.0c5c9148f5c38
click@8.1.3
8.3.3
1
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3
1
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
click@8.1.3
8.3.3
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
click@8.1.3
8.3.3
1
roadiehq/community-backstage-image:latestef355bf5b639
click@7.0
8.3.3
1
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3
1
robotshop/rs-payment:latest774b52c6180d
click@8.0.1
8.3.3
1
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
1
rommapp/romm:5.2.03512f2ca4557
click@8.2.1
8.3.3
1
rommapp/romm:4.4.1b909e95d1aab
click@8.2.1
8.3.3
1
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3
1
rook/ceph:v1.19.2944a1dd70496
click@8.0.3
8.3.3
1
rtuszik/photon-docker:2.4.021549c60f9e6
click@8.2.1
8.3.3
1
runx1/opta-agent:latest0ca3867d3200
click@8.1.2
8.3.3
1
salehmir/jesse:1.10.101afa95f979e9
click@8.0.4
8.3.3
1
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
click@8.1.8
8.3.3
1
seafileltd/seafile-mc:9.0.106693911bcc40
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:10.0.170628f29c663
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
click@8.0.1
8.3.3
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
click@8.0.1
8.3.3
1
seldonio/locust-core:0.81d0da98a2d76
click@7.0
8.3.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
click@8.0.0a1
8.3.3
1
sharanalwar/redchef-backend:latest8d3cab80df49
click@8.1.8
8.3.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
click@7.1.2
8.3.3
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
1
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.