mlflow-controller Helm chart
mlflow-deployment-controllerScored 14 Sept 2026
A Helm chart for Mlflow Deployment Controller
Latest 0.1.8 3 years agodeploys tag mlflow-controller-0.1.8 1Artifact Hub
mlflow-controller 0.1.8 deploys 2 container images: tachyongroup/mlflow-deployment-controller-ui and tachyongroup/mlflow-deployment-controller. Across them, 533 findings — 12 critical, 16 high — 8 on CISA KEV. The highest contribution is GHSA-7gwp-5pfp-969j in mlflow 1.25.0, fixed in 3.15.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| tachyongroup/ | mlflow-controller-0.1.8 | 710102188 | 5,148 |
| tachyongroup/ | mlflow-controller-0.1.8 | 5686129 | 3,809 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-4qq5-mxxx-m6gg | mlflow | 2.8.0 |
| Medium | GHSA-ffw3-6378-cqgp | mlflow | 2.6.0 |
| Medium | GHSA-hvc6-42vf-jhf8 | mlflow | 2.9.2 |
| Medium | GHSA-6xj8-rrqx-r4cv | mlflow | 2.22.0rc0 |
| Medium | GHSA-6749-m5cp-6cg7 | mlflow | 2.10.0 |
| Medium | DLA-3559-1 | libssh2 | 1.8.0-2.1+deb10u1 |
| Medium | GHSA-v945-r3rc-6fjm | mlflow | 2.9.2 |
| Medium | GHSA-wv8q-4f85-2p8p | mlflow | 2.9.2 |
| Medium | GHSA-j8r2-6x86-q33q | requests | 2.31.0 |
| Medium | PYSEC-2026-3952 | gitpython | 3.1.54 |
| Medium | PYSEC-2023-192 | urllib3 | 2.0.6 |
| Medium | GHSA-cxfr-5q3r-2rc2 | mlflow | 2.9.2 |
| Medium | GHSA-956x-8gvw-wg5v | gitpython | 3.1.51 |
| Medium | GHSA-xch3-2f9x-wh9f | mlflow | 3.8.0rc0 |
| Medium | GHSA-pqcv-qw2r-r859 | mlflow | no fix listed |
| Medium | GHSA-hq88-wg7q-gp4g | mlflow | 2.10.0 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | GHSA-3v79-q7ph-j75h | mlflow | 2.10.0 |
| Medium | PYSEC-2026-2161 | gitpython | 3.1.47 |
| Medium | DLA-4087-1 | python3.9 | 3.9.2-1+deb11u3 |
| Medium | GHSA-m2qf-hxjv-5gpq | flask | 2.2.5 |
| Medium | GHSA-9v9h-cgj8-h64p | cryptography | 42.0.2 |
| Medium | GHSA-cv6c-7963-wxcg | mlflow | no fix listed |
| Medium | GHSA-6673-4983-2vx5 | fonttools | 4.43.0 |
| Medium | GHSA-8gq9-2x98-w8hf | protobuf | 3.20.2 |
| Medium | GHSA-vhcx-3pq2-4fvc | mlflow | 3.9.0rc0 |
| Medium | GHSA-rpm5-65cw-6hj4 | gitpython | 3.1.47 |
| Medium | DLA-4057-1 | openssh | 1:8.4p1-5+deb11u4 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | GHSA-ghv6-9r9j-wh4j | mlflow | no fix listed |
| Medium | GHSA-8ghj-p4vj-mr35 | pillow | 10.0.0 |
| Medium | GHSA-3ww4-gg4f-jr7f | cryptography | 42.0.0 |
| Medium | GHSA-q34m-jh98-gwm2 | werkzeug | 3.0.6 |
| Medium | GHSA-vwhf-3v6x-wff8 | mlflow | 2.9.0 |
| Medium | GHSA-5mvj-wmgj-7q8c | mlflow | no fix listed |
| Medium | GHSA-fhff-qmm8-h2fp | mlflow | 3.9.0rc0 |
| Medium | PYSEC-2023-221 | werkzeug | 2.3.8 |
| Medium | GHSA-r9mr-m37c-5fr3 | gitpython | 3.1.54 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | GHSA-76cg-cfhx-373f | mlflow | no fix listed |
| Medium | GHSA-x38x-g6gr-jqff | mlflow | no fix listed |
| Medium | GHSA-wc6j-5g83-xfm6 | mlflow | 2.0.0rc0 |
| Medium | GHSA-43c4-9qgj-x742 | mlflow | no fix listed |
| Medium | GHSA-7p8j-qv6x-f4g4 | mlflow | no fix listed |
| Medium | GHSA-j8mg-pqc5-x9gj | mlflow | no fix listed |
| Medium | GHSA-wf7f-8fxf-xfxc | mlflow | no fix listed |
| Medium | DLA-3530-1 | openssl | 1.1.1n-0+deb10u6 |
| Medium | PYSEC-2023-254 | cryptography | 41.0.6 |
| Medium | DSA-5286-1 | krb5 | 1.18.3-6+deb11u3 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.1.8latest | 3 years ago | mlflow-controller-0.1.8 | 1216188317 | 8,957 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.