mlflow Helm chart

Name: mlflow Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

getindata

Scored 14 Sept 2026

MLflow - an open source platform for the machine learning lifecycle

Latest 0.1.2 4 years agodeploys tag latest 2Artifact Hub

mlflow 0.1.2 deploys 1 container image: gcr.io/getindata-images-public/mlflow. Across them, 178 findings — 1 critical, 3 high — 1 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 2.11.3, fixed in 3.15.0.

Radar Score

2,4521349125

178 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
gcr.io/getindata-images-public/mlflow	latest	1349125	2,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

178 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-7gcm-g887-7qv7	protobuf@4.25.3	5.29.6
Medium	GHSA-j62r-wxqq-f3gf	mlflow@2.11.3	2.12.1
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.6.0	0.6.3
Low	PYSEC-2026-2132	click@8.1.7	8.3.3
Low	GHSA-jm78-9fvv-mhgr	gitpython@3.1.43	3.1.58
Low	GHSA-hc5x-x2vx-497g	gunicorn@21.2.0	22.0.0
Low	GHSA-9rj7-rf2p-w77r	gitpython@3.1.43	3.1.58
Low	GHSA-62p4-gmf7-7g93	pillow@10.3.0	12.3.0
Low	PYSEC-2026-3787	gitpython@3.1.43	3.1.59
Low	GHSA-whj4-6x5x-4v2j	pillow@10.3.0	12.2.0
Low	GHSA-rgxp-2hwp-jwgg	pyarrow@15.0.2	23.0.1
Low	GHSA-vjc4-5qp5-m44j	pillow@10.3.0	12.3.0
Low	GHSA-8c7q-86fq-vvmh	mlflow@2.11.3	3.11.0rc1
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.1.3	3.1.5
Low	GHSA-xj96-63gp-2gmr	pillow@10.3.0	12.3.0
Low	GHSA-5wmx-573v-2qwq	markdown@3.6	3.8.1
Low	GHSA-cfh3-3jmp-rvhc	pillow@10.3.0	12.1.1
Low	PYSEC-2026-3951	gitpython@3.1.43	3.1.55
Low	GHSA-gmj6-6f8f-6699	jinja2@3.1.3	3.1.5
Low	PYSEC-2026-3784	gitpython@3.1.43	3.1.58
Low	GHSA-f9vj-2wh5-fj8j	werkzeug@3.0.2	3.0.6
Low	GHSA-3f7w-8rr8-f37f	gitpython@3.1.43	3.1.57
Low	GHSA-45hq-cxwh-f6vc	pillow@10.3.0	12.3.0
Low	GHSA-fjr4-x663-mwxc	gitpython@3.1.43	3.1.54
Low	GHSA-5x94-69rx-g8h2	pillow@10.3.0	12.3.0
Low	GHSA-phj9-mv4w-65pm	pillow@10.3.0	12.3.0
Low	GHSA-g6pg-52vf-843h	mlflow@2.11.3	no fix listed
Low	GHSA-f2ff-p2ww-7p4p	sqlparse@0.5.0	0.6.0
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.5.0	0.6.0
Low	GHSA-8v84-f9pq-wr9x	pillow@10.3.0	12.3.0
Low	GHSA-wf93-45jw-7689	pip@24.0	26.1.2
Low	GHSA-6r8x-57c9-28j4	pillow@10.3.0	12.3.0
Low	GHSA-9hw9-ch79-4vh6	pillow@10.3.0	12.3.0
Low	GHSA-jjj6-mw9f-p565	pillow@10.3.0	12.3.0
Low	GHSA-4gmw-gg2m-w46p	gitpython@3.1.43	3.1.58
Low	GHSA-h75v-3vvj-5mfj	jinja2@3.1.3	3.1.4
Low	GHSA-v92g-xgxw-vvmm	mako@1.3.3	1.3.11
Low	GHSA-7545-fcxq-7j24	gitpython@3.1.43	3.1.48
Low	PYSEC-2024-161	pyarrow@15.0.2	17.0.0
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.0	0.6.4
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	GHSA-8qvm-5x2c-j2w7	protobuf@4.25.3	4.25.8
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.0	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.0	0.6.4
Low	GHSA-29vq-49wr-vm6x	werkzeug@3.0.2	3.1.6
Low	GHSA-768j-98cg-p3fv	fonttools@4.51.0	4.60.2
Low	GHSA-hgf8-39gv-g3f2	werkzeug@3.0.2	3.1.4
Low	GHSA-w5xq-c4pf-ghq7	mlflow@2.11.3	3.10.0
Low	DSA-5726-1	krb5@1.18.3-6+deb11u4	1.18.3-6+deb11u5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.2latest	4 years ago	latest	1349125	2,452

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/getindata/mlflow.svg)](https://charts.stackradar.io/charts/getindata/mlflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.