StackRadar

mlflow-controller 0.1.8 Helm chart

mlflow-deployment-controller

Scored 14 Sept 2026

A Helm chart for Mlflow Deployment Controller

Version 0.1.8 3 years agodeploys tag mlflow-controller-0.1.8 1Artifact Hub

mlflow-controller 0.1.8 deploys 2 container images: tachyongroup/mlflow-deployment-controller-ui and tachyongroup/mlflow-deployment-controller. Across them, 533 findings12 critical, 16 high 8 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 1.25.0, fixed in 3.15.0.

Radar Score

8,9571216188317

533 findings over 2 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
tachyongroup/mlflow-deployment-controller-uimlflow-controller-0.1.87101021885,148
tachyongroup/mlflow-deployment-controllermlflow-controller-0.1.856861293,809

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

344 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDLA-3763-1curl@7.64.0-4+deb10u47.64.0-4+deb10u9
LowGHSA-h5c8-rqwp-cp95jinja2@3.1.23.1.3
LowGHSA-29vq-49wr-vm6xwerkzeug@2.2.33.1.6
LowGHSA-m5vv-6r4h-3vj9azure-identity@1.12.01.16.1
LowGHSA-768j-98cg-p3fvfonttools@4.38.04.60.2
LowGHSA-hgf8-39gv-g3f2werkzeug@2.2.33.1.4
LowDLA-3398-1curl@7.64.0-4+deb10u47.64.0-4+deb10u6
LowDLA-4127-1subversion@1.14.1-3+deb11u11.14.1-3+deb11u2
LowGHSA-w5xq-c4pf-ghq7mlflow@1.25.03.10.0
LowDSA-5203-1gnutls28@3.7.1-53.7.1-5+deb11u2
LowDSA-5726-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u5
LowGHSA-prg7-hcfm-mfcrsqlparse@0.4.30.6.0
LowDLA-3783-1expat@2.2.6-2+deb10u62.2.6-2+deb10u7
LowDLA-3893-1expat@2.2.10-2+deb11u32.2.10-2+deb11u6
LowGHSA-rwj8-pgh3-r573gitpython@3.1.313.1.52
LowGHSA-752w-5fwx-jx9fpyjwt@2.6.02.12.0
LowGHSA-v87r-6q3f-2j67gitpython@3.1.313.1.49
LowGHSA-pgqp-8h46-6x4jmlflow@1.25.03.5.0
LowDLA-3341-1curl@7.64.0-4+deb10u47.64.0-4+deb10u5
LowGHSA-mv93-w799-cj2wgitpython@3.1.313.1.50
LowDSA-5587-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u11
LowDLA-3472-1libx11@2:1.6.7-1+deb10u22:1.6.7-1+deb10u3
LowPYSEC-2026-3554cryptography@39.0.149.0.0
LowPYSEC-2026-3948gitpython@3.1.313.1.57
LowDLA-3740-1gnutls28@3.6.7-4+deb10u93.6.7-4+deb10u12
LowGHSA-65h7-c7c4-mghxmlflow@1.25.03.9.0
LowDLA-4321-1openssl@1.1.1n-0+deb11u11.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowGHSA-hh9p-6wh2-4mfcgitpython@3.1.313.1.58
LowGHSA-3rp5-jjmw-4wv2gitpython@3.1.313.1.53
LowGHSA-34jh-p97f-mpxfurllib3@1.26.141.26.19
LowGHSA-4xh5-x5gv-qwphpip@22.0.425.3
LowGHSA-q3gw-8236-5jw4mlflow@1.25.0no fix listed
LowDSA-5370-1apr@1.7.0-6+deb11u11.7.0-6+deb11u2
LowGHSA-h35f-9h28-mq5csetuptools@57.5.083.0.0
LowDSA-5364-1apr-util@1.6.1-51.6.1-5+deb11u1
LowDLA-3321-1gnutls28@3.6.7-4+deb10u93.6.7-4+deb10u10
LowDLA-4432-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u16
LowGHSA-fj7v-r99m-22gqpillow@9.4.012.3.0
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowPYSEC-2026-3788gitpython@3.1.313.1.59
LowGHSA-83fm-w79m-64r5mlflow@1.25.02.3.1
LowDLA-3850-1glibc@2.28-10+deb10u22.28-10+deb10u4
LowDSA-5678-1glibc@2.31-13+deb11u32.31-13+deb11u10
LowDLA-4267-1gnutls28@3.7.1-53.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-53.7.1-5+deb11u7
LowDLA-3660-1gnutls28@3.6.7-4+deb10u93.6.7-4+deb10u11
LowDLA-3962-1glib2.0@2.66.8-12.66.8-1+deb11u5
LowPYSEC-2026-3721pip@22.0.426.2
LowGHSA-wxj7-3fx5-pp9mmlflow@1.25.02.22.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.8latest3 years agomlflow-controller-0.1.812161883178,957

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mlflow-deployment-controller/mlflow-controller.svg)](https://charts.stackradar.io/charts/mlflow-deployment-controller/mlflow-controller)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.