StackRadar

mlflow-controller 0.1.8 Helm chart

mlflow-deployment-controller

Scored 14 Sept 2026

A Helm chart for Mlflow Deployment Controller

Version 0.1.8 3 years agodeploys tag mlflow-controller-0.1.8 1Artifact Hub

mlflow-controller 0.1.8 deploys 2 container images: tachyongroup/mlflow-deployment-controller-ui and tachyongroup/mlflow-deployment-controller. Across them, 533 findings12 critical, 16 high 8 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 1.25.0, fixed in 3.15.0.

Radar Score

8,9571216188317

533 findings over 2 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
tachyongroup/mlflow-deployment-controller-uimlflow-controller-0.1.87101021885,148
tachyongroup/mlflow-deployment-controllermlflow-controller-0.1.856861293,809

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

213 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-jjj6-mw9f-p565pillow@9.4.012.3.0
LowGHSA-xgmm-8j9v-c9wxpyjwt@2.6.02.13.0
LowGHSA-4gmw-gg2m-w46pgitpython@3.1.313.1.58
LowDSA-5266-1expat@2.2.10-2+deb11u32.2.10-2+deb11u5
LowGHSA-h75v-3vvj-5mfjjinja2@3.1.23.1.4
LowGHSA-v92g-xgxw-vvmmmako@1.2.41.3.11
LowGHSA-7545-fcxq-7j24gitpython@3.1.313.1.48
LowGHSA-2mqj-m65w-jghxgitpython@3.1.313.1.41
LowPYSEC-2024-161pyarrow@10.0.117.0.0
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.4.80.6.4
LowGHSA-9hjg-9r4m-mvj7requests@2.28.22.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@3.20.04.25.8
LowDLA-3782-1util-linux@2.33.1-0.12.33.1-0.1+deb10u1
LowDSA-5650-1util-linux@2.36.1-8+deb11u12.36.1-8+deb11u2
LowDLA-3586-1ncurses@6.1+20181013-2+deb10u36.1+20181013-2+deb10u4
LowDLA-3692-1curl@7.64.0-4+deb10u47.64.0-4+deb10u8
LowGHSA-8ppf-4f7h-5ppjpyasn1@0.4.80.6.4
LowGHSA-hm4w-wwcw-mr6rpyasn1@0.4.80.6.4
LowDSA-5236-1expat@2.2.10-2+deb11u32.2.10-2+deb11u4
LowDLA-3763-1curl@7.64.0-4+deb10u47.64.0-4+deb10u9
LowGHSA-h5c8-rqwp-cp95jinja2@3.1.23.1.3
LowGHSA-29vq-49wr-vm6xwerkzeug@2.2.33.1.6
LowGHSA-m5vv-6r4h-3vj9azure-identity@1.12.01.16.1
LowGHSA-768j-98cg-p3fvfonttools@4.38.04.60.2
LowGHSA-hgf8-39gv-g3f2werkzeug@2.2.33.1.4
LowDLA-3398-1curl@7.64.0-4+deb10u47.64.0-4+deb10u6
LowDLA-4127-1subversion@1.14.1-3+deb11u11.14.1-3+deb11u2
LowGHSA-w5xq-c4pf-ghq7mlflow@1.25.03.10.0
LowDSA-5203-1gnutls28@3.7.1-53.7.1-5+deb11u2
LowDSA-5726-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u5
LowGHSA-prg7-hcfm-mfcrsqlparse@0.4.30.6.0
LowDLA-3783-1expat@2.2.6-2+deb10u62.2.6-2+deb10u7
LowDLA-3893-1expat@2.2.10-2+deb11u32.2.10-2+deb11u6
LowGHSA-rwj8-pgh3-r573gitpython@3.1.313.1.52
LowGHSA-752w-5fwx-jx9fpyjwt@2.6.02.12.0
LowGHSA-v87r-6q3f-2j67gitpython@3.1.313.1.49
LowGHSA-pgqp-8h46-6x4jmlflow@1.25.03.5.0
LowDLA-3341-1curl@7.64.0-4+deb10u47.64.0-4+deb10u5
LowGHSA-mv93-w799-cj2wgitpython@3.1.313.1.50
LowDSA-5587-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u11
LowDLA-3472-1libx11@2:1.6.7-1+deb10u22:1.6.7-1+deb10u3
LowPYSEC-2026-3554cryptography@39.0.149.0.0
LowPYSEC-2026-3948gitpython@3.1.313.1.57
LowDLA-3740-1gnutls28@3.6.7-4+deb10u93.6.7-4+deb10u12
LowGHSA-65h7-c7c4-mghxmlflow@1.25.03.9.0
LowDLA-4321-1openssl@1.1.1n-0+deb11u11.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowGHSA-hh9p-6wh2-4mfcgitpython@3.1.313.1.58
LowGHSA-3rp5-jjmw-4wv2gitpython@3.1.313.1.53
LowGHSA-34jh-p97f-mpxfurllib3@1.26.141.26.19

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.8latest3 years agomlflow-controller-0.1.812161883178,957

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mlflow-deployment-controller/mlflow-controller.svg)](https://charts.stackradar.io/charts/mlflow-deployment-controller/mlflow-controller)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.