StackRadar

mlflow 0.1.2 Helm chart

getindataVerified publisher

Scored 14 Sept 2026

MLflow - an open source platform for the machine learning lifecycle

Version 0.1.2 4 years agodeploys tag latest 2Artifact Hub

mlflow 0.1.2 deploys 1 container image: gcr.io/getindata-images-public/mlflow. Across them, 178 findings1 critical, 3 high 1 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 2.11.3, fixed in 3.15.0.

Radar Score

2,4521349125

178 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
gcr.io/getindata-images-public/mlflowlatest13491252,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

125 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-8rrh-rw8j-w5fxwheel@0.43.00.46.2
LowGHSA-v87r-6q3f-2j67gitpython@3.1.433.1.49
LowGHSA-pgqp-8h46-6x4jmlflow@2.11.33.5.0
LowGHSA-mv93-w799-cj2wgitpython@3.1.433.1.50
LowPYSEC-2026-3948gitpython@3.1.433.1.57
LowGHSA-65h7-c7c4-mghxmlflow@2.11.33.9.0
LowDLA-4321-1openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u35.32.1-4+deb11u4
LowGHSA-hh9p-6wh2-4mfcgitpython@3.1.433.1.58
LowGHSA-3rp5-jjmw-4wv2gitpython@3.1.433.1.53
LowGHSA-34jh-p97f-mpxfurllib3@2.2.12.2.2
LowGHSA-4xh5-x5gv-qwphpip@24.025.3
LowGHSA-q3gw-8236-5jw4mlflow@2.11.3no fix listed
LowGHSA-pwv6-vv43-88grpillow@10.3.012.2.0
LowGHSA-h35f-9h28-mq5csetuptools@65.5.183.0.0
LowGHSA-fj7v-r99m-22gqpillow@10.3.012.3.0
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowPYSEC-2026-3788gitpython@3.1.433.1.59
LowDSA-5678-1glibc@2.31-13+deb11u82.31-13+deb11u10
LowDLA-4267-1gnutls28@3.7.1-5+deb11u43.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-5+deb11u43.7.1-5+deb11u7
LowPYSEC-2026-3721pip@24.026.2
LowGHSA-wxj7-3fx5-pp9mmlflow@2.11.32.22.2
LowGHSA-cpwx-vrp4-4pq7jinja2@3.1.33.1.6
LowGHSA-4x5p-f36r-mxxrmlflow@2.11.33.4.0rc0
LowGHSA-87hc-h4r5-73f7werkzeug@3.0.23.1.5
LowDLA-4061-1libtasn1-6@4.16.0-2+deb11u14.16.0-2+deb11u2
LowGHSA-7833-fr7j-v32qgitpython@3.1.433.1.59
LowGHSA-gqvg-gmmx-x4hmmlflow@2.11.33.15.0
LowGHSA-r5m9-wm49-959fmlflow@2.11.33.11.0rc0
LowGHSA-f2m9-wcf4-cwwxmlflow@2.11.33.11.0
LowGHSA-3wxw-xv34-2frggitpython@3.1.433.1.59
LowDLA-4145-1expat@2.2.10-2+deb11u52.2.10-2+deb11u7
LowGHSA-pq67-6m6q-mj2vurllib3@2.2.12.5.0
LowGHSA-65pc-fj4g-8rjxidna@3.73.15
LowGHSA-9wx4-h78v-vm56requests@2.31.02.32.0
LowPYSEC-2025-17mlflow@2.11.32.19.0
LowGHSA-jfmj-5v4g-7637zipp@3.18.13.19.1
LowDLA-4490-1openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u5
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.12.5.0
LowDLA-4259-1systemd@247.3-7+deb11u4247.3-7+deb11u7
LowGHSA-qccp-gfcp-xxvcurllib3@2.2.12.7.0
LowDLA-3875-1gnutls28@3.7.1-5+deb11u43.7.1-5+deb11u6
LowDLA-4492-1gnutls28@3.7.1-5+deb11u43.7.1-5+deb11u9
LowGHSA-qpgc-w4mg-6v92mlflow@2.11.32.16.0
LowDLA-4176-1openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u3
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowDLA-4181-1glibc@2.31-13+deb11u82.31-13+deb11u13
LowGHSA-fh64-r2vc-xvhrmlflow@2.11.33.11.1
LowGHSA-p538-c434-8v24gitpython@3.1.433.1.56

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.2latest4 years agolatest13491252,452

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/getindata/mlflow.svg)](https://charts.stackradar.io/charts/getindata/mlflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.