StackRadar

CVE-2026-7246

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
614
deployed by those charts
Fix available
2 of 3
affected packages

Security update for python-click

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 614 images.

Affected packageAffected versionsFixed inImages
clickpypi6.7, 7.0, 7.1.1, 7.1.2+16 more8.3.3614
python-clickdeb8.1.3-2no fix listed8
python-clickrpm8.2.1-160000.2.28.2.1-160000.3.11
OSV records
DEBIAN-CVE-2026-7246PYSEC-2026-2132SUSE-SU-2026:22321-1
Also known as
GHSA-47fr-3ffg-hgmw

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
click@8.0.3
8.3.3

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
click@8.0.4
8.3.3

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
click@8.1.3
8.3.3

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
click@8.1.3
8.3.3

Open the chart page →

3,294
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
click@7.1.2
8.3.3

Open the chart page →

2,347
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
click@7.1.2
8.3.3
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
click@8.1.3
8.3.3

Open the chart page →

43,341
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
click@8.1.3
8.3.3

Open the chart page →

3,158
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
click@8.1.3
8.3.3

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
click@8.1.3
8.3.3

Open the chart page →

3,811
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
click@7.1.2
8.3.3

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
click@8.0.3
8.3.3

Open the chart page →

8,556
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
click@8.1.7
8.3.3

Open the chart page →

4,560
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
click@8.2.1
8.3.3

Open the chart page →

11,950
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
click@7.0
8.3.3

Open the chart page →

1,458
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
click@8.1.7
8.3.3

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
click@7.1.2
8.3.3

Open the chart page →

1,166
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
click@8.1.7
8.3.3
ahmetgrbzz/web_server:1.02e7fef69c29f
click@8.1.7
8.3.3

Open the chart page →

3,034
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
click@7.0
8.3.3

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
click@8.1.3
8.3.3

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
click@7.1.2
8.3.3

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
socialmediamacroscope/preprocessing:0.1.3ca863306314b
click@8.1.7
8.3.3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
click@8.1.7
8.3.3

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
click@8.1.3
python-click@8.1.3-2
8.3.3
no fix listed

Open the chart page →

30,028
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
click@8.1.6
8.3.3

Open the chart page →

1,588
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
click@8.3.1
8.3.3

Open the chart page →

2,555
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
click@8.3.1
8.3.3

Open the chart page →

2,298
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
click@8.2.1
8.3.3

Open the chart page →

5,288
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
click@7.0
8.3.3

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
click@7.0
8.3.3

Open the chart page →

40,715
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
click@8.2.1
8.3.3
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
click@8.1.7
8.3.3

Open the chart page →

18,922
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
click@8.1.8
8.3.3
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
click@8.3.1
8.3.3

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
click@8.1.8
8.3.3

Open the chart page →

6,583
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
click@8.2.1
8.3.3

Open the chart page →

2,376
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
click@8.1.8
8.3.3

Open the chart page →

4,749
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
click@8.3.1
8.3.3

Open the chart page →

3,854
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3

Open the chart page →

8,189
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3

Open the chart page →

2,565
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
click@8.1.8
8.3.3
knspar/phronetis-operator:0.1.60c4f0543ee58
click@8.2.1
8.3.3

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3

Open the chart page →

22,084
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
click@8.1.7
8.3.3

Open the chart page →

12,912
libretimepodzone-chartsVerified publisher0.4.14 of 9See more

libretime podzone-charts 0.4.1

4 of the 9 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-api:latesteae026cc8909
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-playout:latest71a8706531aa
click@8.1.8
8.3.3
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
click@8.1.8
8.3.3

Open the chart page →

11,149
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3

Open the chart page →

5,451
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
click@8.1.8
8.3.3

Open the chart page →

3,071
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3

Open the chart page →

4,616
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
click@8.1.3
8.3.3

Open the chart page →

14,537
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
click@8.1.3
8.3.3

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
click@8.1.7
8.3.3

Open the chart page →

12,566
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-7246.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
click@8.1.7
8.3.3

Open the chart page →

4,272

Container images carrying it

614 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wms:latest1b90cdf68831
click@6.7
8.3.3
1
opendatacube/wps:latest80df355a660b
click@8.1.8
8.3.3
1
openmined/syft-backend:0.9.5b72f74a68b32
click@8.1.8
8.3.3
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
click@8.1.7
8.3.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
click@7.1.2
8.3.3
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
click@7.1.2
8.3.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
click@8.0.4
8.3.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
click@8.0.3
8.3.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
click@8.1.7
8.3.3
1
phan2410/dummy-service:0.0.89c6ed6de26ca
click@8.1.8
8.3.3
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
click@8.1.8
8.3.3
1
phntom/email-manager:0.1.22d8e2a9f2f085
click@8.1.3
8.3.3
1
pococze/python-hello-elos:2.0.07a1aab425e51
click@8.1.7
8.3.3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
click@8.1.7
8.3.3
1
prowlercloud/prowler-api:5.31.14f252d579be2
click@8.3.1
8.3.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
click@8.1.8
8.3.3
1
pysga1996/python-redis-web:latestfdeec30ad482
click@8.1.3
8.3.3
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
click@8.1.7
8.3.3
1
redash/redash:25.8.000d813437db5
click@8.1.3
8.3.3
1
redash/redash:10.0.0.b503639392753c0376
click@6.7
8.3.3
1
redash/redash:26.3.0c5c9148f5c38
click@8.1.3
8.3.3
1
redislabs/redisearch:2.4.1433561794c5c8
click@8.1.3
8.3.3
1
redislabs/redisinsight:1.14.0b03ab1426d0d
click@8.1.3
8.3.3
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
click@8.1.3
8.3.3
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
click@8.1.3
8.3.3
1
roadiehq/community-backstage-image:latestef355bf5b639
click@7.0
8.3.3
1
robmarkcole/deepstack-ui:latest410275726459
click@8.0.1
8.3.3
1
robotshop/rs-payment:latest774b52c6180d
click@8.0.1
8.3.3
1
robustadev/krr:v1.30.0b8d782e568c7
click@8.1.7
8.3.3
1
rommapp/romm:5.2.03512f2ca4557
click@8.2.1
8.3.3
1
rommapp/romm:4.4.1b909e95d1aab
click@8.2.1
8.3.3
1
rook/ceph:v1.20.72f970c425617
click@8.0.3
8.3.3
1
rook/ceph:v1.19.2944a1dd70496
click@8.0.3
8.3.3
1
rtuszik/photon-docker:2.4.021549c60f9e6
click@8.2.1
8.3.3
1
runx1/opta-agent:latest0ca3867d3200
click@8.1.2
8.3.3
1
salehmir/jesse:1.10.101afa95f979e9
click@8.0.4
8.3.3
1
samueldg/snappass:latest3987195edbe6
click@7.0
8.3.3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
click@8.1.8
8.3.3
1
seafileltd/seafile-mc:9.0.106693911bcc40
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:10.0.170628f29c663
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:9.0.97ac833196f60
click@8.1.3
8.3.3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
click@8.1.7
8.3.3
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
click@8.0.1
8.3.3
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
click@8.0.1
8.3.3
1
seldonio/locust-core:0.81d0da98a2d76
click@7.0
8.3.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
click@8.0.0a1
8.3.3
1
sharanalwar/redchef-backend:latest8d3cab80df49
click@8.1.8
8.3.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
click@7.1.2
8.3.3
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
click@8.1.7
8.3.3
1
sirrend/helmup-notifications-service:0.1.3997866417011
click@8.1.7
8.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.