StackRadar

mlflow-controller 0.1.8 Helm chart

mlflow-deployment-controller

Scored 14 Sept 2026

A Helm chart for Mlflow Deployment Controller

Version 0.1.8 3 years agodeploys tag mlflow-controller-0.1.8 1Artifact Hub

mlflow-controller 0.1.8 deploys 2 container images: tachyongroup/mlflow-deployment-controller-ui and tachyongroup/mlflow-deployment-controller. Across them, 533 findings12 critical, 16 high 8 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 1.25.0, fixed in 3.15.0.

Radar Score

8,9571216188317

533 findings over 2 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
tachyongroup/mlflow-deployment-controller-uimlflow-controller-0.1.87101021885,148
tachyongroup/mlflow-deployment-controllermlflow-controller-0.1.856861293,809

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

213 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowPYSEC-2026-2132click@8.1.38.3.3
LowGHSA-jm78-9fvv-mhgrgitpython@3.1.313.1.58
LowGHSA-hc5x-x2vx-497ggunicorn@20.1.022.0.0
LowDSA-5122-1gzip@1.10-41.10-4+deb11u1
LowDSA-5123-1xz-utils@5.2.5-25.2.5-2.1~deb11u1
LowGHSA-9rj7-rf2p-w77rgitpython@3.1.313.1.58
LowGHSA-m49c-5c52-6696mlflow@1.25.0no fix listed
LowPYSEC-2023-165gitpython@3.1.313.1.35
LowGHSA-44wm-f244-xhp3pillow@9.4.010.3.0
LowGHSA-62p4-gmf7-7g93pillow@9.4.012.3.0
LowGHSA-f42m-mvfv-cgw5mlflow@1.25.0no fix listed
LowPYSEC-2026-3787gitpython@3.1.313.1.59
LowDSA-5330-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u5
LowGHSA-vjc4-5qp5-m44jpillow@9.4.012.3.0
LowGHSA-8c7q-86fq-vvmhmlflow@1.25.03.11.0rc1
LowDLA-3907-1sqlite3@3.34.1-33.34.1-3+deb11u1
LowGHSA-q2x7-8rv6-6q7hjinja2@3.1.23.1.5
LowGHSA-xj96-63gp-2gmrpillow@9.4.012.3.0
LowGHSA-xqr8-7jwr-rhp7certifi@2022.12.72023.7.22
LowGHSA-wfm5-v35h-vwf4gitpython@3.1.313.1.33
LowGHSA-5wmx-573v-2qwqmarkdown@3.4.13.8.1
LowPYSEC-2026-3951gitpython@3.1.313.1.55
LowGHSA-2wc2-fm75-p42xsoupsieve@2.42.8.4
LowGHSA-836r-79rf-4m37soupsieve@2.42.8.4
LowDLA-3363-1pcre2@10.32-510.32-5+deb10u1
LowGHSA-gmj6-6f8f-6699jinja2@3.1.23.1.5
LowDSA-5147-1dpkg@1.20.91.20.10
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u36.1+20181013-2+deb10u5
LowPYSEC-2026-3784gitpython@3.1.313.1.58
LowGHSA-f9vj-2wh5-fj8jwerkzeug@2.2.33.0.6
LowGHSA-r6ph-v2qm-q3c2cryptography@39.0.146.0.5
LowGHSA-3f7w-8rr8-f37fgitpython@3.1.313.1.57
LowDLA-3626-1krb5@1.17-3+deb10u51.17-3+deb10u6
LowGHSA-j5g9-f88f-gfj3httplib2@0.21.00.32.0
LowDSA-5200-1libtirpc@1.3.1-11.3.1-1+deb11u1
LowGHSA-45hq-cxwh-f6vcpillow@9.4.012.3.0
LowGHSA-fjr4-x663-mwxcgitpython@3.1.313.1.54
LowDSA-5174-1gnupg2@2.2.27-2+deb11u12.2.27-2+deb11u2
LowGHSA-5x94-69rx-g8h2pillow@9.4.012.3.0
LowGHSA-phj9-mv4w-65pmpillow@9.4.012.3.0
LowGHSA-g6pg-52vf-843hmlflow@1.25.0no fix listed
LowGHSA-f2ff-p2ww-7p4psqlparse@0.4.30.6.0
LowGHSA-pwgv-4x5q-6m9fsqlparse@0.4.30.6.0
LowGHSA-8v84-f9pq-wr9xpillow@9.4.012.3.0
LowGHSA-43fp-rhv2-5gv8certifi@2021.10.82022.12.07
LowPYSEC-2026-3553cryptography@39.0.149.0.0
LowGHSA-wf93-45jw-7689pip@22.0.426.1.2
LowGHSA-rrm6-wvj7-cwh2sqlparse@0.4.30.4.4
LowGHSA-6r8x-57c9-28j4pillow@9.4.012.3.0
LowGHSA-9hw9-ch79-4vh6pillow@9.4.012.3.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.8latest3 years agomlflow-controller-0.1.812161883178,957

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mlflow-deployment-controller/mlflow-controller.svg)](https://charts.stackradar.io/charts/mlflow-deployment-controller/mlflow-controller)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.