StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
click@7.1.2
8.3.3

Open the chart page →

12,007
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
click@8.1.8
8.3.3

Open the chart page →

12,473
speedtest-exporteralekcVerified publisher0.2.01 of 1See more

speedtest-exporter alekc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
click@8.1.3
8.3.3

Open the chart page →

741
wsealekcVerified publisher0.1.11 of 1See more

wse alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
click@7.1.2
8.3.3

Open the chart page →

1,146
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
click@8.1.7
8.3.3

Open the chart page →

6,324
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
click@8.3.1
8.3.3

Open the chart page →

5,558
ansible-playbook-operatoransible-playbook-operatorVerified publisher0.1.71 of 1See more

ansible-playbook-operator ansible-playbook-operator 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
click@8.3.2
8.3.3

Open the chart page →

1,339
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
click@8.1.7
8.3.3
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
click@8.1.7
8.3.3
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
click@8.1.7
8.3.3

Open the chart page →

25,669
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
click@8.3.1
8.3.3

Open the chart page →

1,565
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3

Open the chart page →

1,488
aias-servicesarlas-stackVerified publisher28.8.04 of 5See more

aias-services arlas-stack 28.8.0

4 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
click@8.1.6
8.3.3
gisaia/airs:0.18.15abfe00317bf
click@8.1.6
8.3.3
gisaia/aproc-service:0.18.1ac6564921994
click@8.1.6
8.3.3
gisaia/fam:0.18.1ae525930b4b6
click@8.1.6
8.3.3

Open the chart page →

1,001
arlas-aiasarlas-stackVerified publisher28.8.05 of 22See more

arlas-aias arlas-stack 28.8.0

5 of the 22 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
click@8.1.6
8.3.3
gisaia/airs:0.18.15abfe00317bf
click@8.1.6
8.3.3
gisaia/aproc-service:0.18.1ac6564921994
click@8.1.6
8.3.3
gisaia/fam:0.18.1ae525930b4b6
click@8.1.6
8.3.3
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
click@8.2.1
8.3.3

Open the chart page →

40,238
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

2,418
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3

Open the chart page →

22,568
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
click@8.1.3
8.3.3

Open the chart page →

4,367
trainingcollectorassist-iot-fl-training-collector1.1.01 of 1See more

trainingcollector assist-iot-fl-training-collector 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/fl_training_collector:latest792715dd3084
click@8.0.3
8.3.3

Open the chart page →

1,719
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
click@8.1.3
8.3.3

Open the chart page →

10,061
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
click@8.1.7
8.3.3

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
click@8.0.3
8.3.3
assistiot/resource-provisioning_im:1.0.0a942dc14030a
click@8.0.3
8.3.3

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
click@8.1.7
8.3.3
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
click@8.1.7
8.3.3

Open the chart page →

45,363
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
click@8.0.3
8.3.3

Open the chart page →

1,166
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
click@8.0.3
8.3.3

Open the chart page →

32,501
phonebook-chartasumankamberoglu0.1.52 of 3See more

phonebook-chart asumankamberoglu 0.1.5

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
click@8.1.3
8.3.3
paulkellerman/webserver-app:latest5a37b74f61b9
click@8.1.3
8.3.3

Open the chart page →

3,176
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
click@8.1.7
8.3.3

Open the chart page →

9,412
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
click@8.0.3
8.3.3

Open the chart page →

5,507
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
click@8.1.7
8.3.3

Open the chart page →

1,790
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
click@7.1.2
8.3.3

Open the chart page →

5,521
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
click@6.7
8.3.3

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
click@6.7
8.3.3

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
click@6.7
8.3.3

Open the chart page →

4,269
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
click@6.7
8.3.3

Open the chart page →

11,833
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
click@8.3.1
8.3.3

Open the chart page →

2,738
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
click@7.0
8.3.3

Open the chart page →

20,671
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
click@8.1.7
8.3.3

Open the chart page →

2,727
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
click@8.1.7
8.3.3

Open the chart page →

10,145
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
click@7.0
8.3.3

Open the chart page →

18,980
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-rwd:log74ded2d92f07
click@8.1.8
8.3.3

Open the chart page →

26,996
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
click@7.0
8.3.3

Open the chart page →

1,292
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
click@7.1.2
8.3.3

Open the chart page →

2,504
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
click@8.1.3
8.3.3

Open the chart page →

2,573
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
click@8.1.8
8.3.3

Open the chart page →

10,776
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
click@8.1.7
8.3.3

Open the chart page →

16,198
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
click@8.1.7
8.3.3

Open the chart page →

15,371
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
click@7.1.2
8.3.3
chaostoolkit/front:latest7f4a7eb9f7df
click@7.1.2
8.3.3
chaostoolkit/middle:latestb95ba4961cfc
click@7.1.2
8.3.3

Open the chart page →

5,557
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
click@8.1.7
8.3.3

Open the chart page →

1,126
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
click@8.1.8
8.3.3

Open the chart page →

4,803
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
click@8.1.7
8.3.3

Open the chart page →

4,042
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
click@8.1.3
8.3.3

Open the chart page →

1,227

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wms:latest1b90cdf68831
click@6.7
8.3.3
1
opendatacube/wps:latest80df355a660b
click@8.1.8
8.3.3
1
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
click@8.0.4
8.3.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
click@8.0.3
8.3.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3
1
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3
1
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3
1
pococze/python-hello-elos:2.0.07a1aab425e51
click@8.1.7
8.3.3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3
1
prowlercloud/prowler-api:5.31.14f252d579be2
click@8.3.1
8.3.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3
1
pysga1996/python-redis-web:latestfdeec30ad482
click@8.1.3
8.3.3
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
click@8.1.7
8.3.3
1
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3
1
redash/redash:10.0.0.b503639392753c0376
click@6.7
8.3.3
1
redash/redash:26.3.0c5c9148f5c38
click@8.1.3
8.3.3
1
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3
1
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
click@8.1.3
8.3.3
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
click@8.1.3
8.3.3
1
roadiehq/community-backstage-image:latestef355bf5b639
click@7.0
8.3.3
1
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3
1
robotshop/rs-payment:latest774b52c6180d
click@8.0.1
8.3.3
1
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
1
rommapp/romm:5.2.03512f2ca4557
click@8.2.1
8.3.3
1
rommapp/romm:4.4.1b909e95d1aab
click@8.2.1
8.3.3
1
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3
1
rook/ceph:v1.19.2944a1dd70496
click@8.0.3
8.3.3
1
rtuszik/photon-docker:2.4.021549c60f9e6
click@8.2.1
8.3.3
1
runx1/opta-agent:latest0ca3867d3200
click@8.1.2
8.3.3
1
salehmir/jesse:1.10.101afa95f979e9
click@8.0.4
8.3.3
1
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
click@8.1.8
8.3.3
1
seafileltd/seafile-mc:9.0.106693911bcc40
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:10.0.170628f29c663
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
click@8.0.1
8.3.3
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
click@8.0.1
8.3.3
1
seldonio/locust-core:0.81d0da98a2d76
click@7.0
8.3.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
click@8.0.0a1
8.3.3
1
sharanalwar/redchef-backend:latest8d3cab80df49
click@8.1.8
8.3.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
click@7.1.2
8.3.3
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
1
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.