mlflow 0.0.30 Helm chart

Name: mlflow Helm chart 0.0.30: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-mlflow

Scored 21 Oct 2026

Hardened MLflow Tracking Server (experiment tracking + model registry) on a 0-CVE nonroot image, with a bundled PostgreSQL backend store.

Version 0.0.30app version 3.16.1 (not verified against the render) 0Artifact Hub

mlflow 0.0.30 deploys 2 container images: ghcr.io/quenchworks/images/mlflow and ghcr.io/quenchworks/images/postgresql. Across them, 21 findings — 0 critical, 0 high. The highest contribution is CGA-4mf7-96v4-52mj in python-3.12 3.12.15-r2, with no fix listed. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

13100020

21 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/mlflow	digest-pinned	00011	77
ghcr.io/quenchworks/images/postgresql	digest-pinned	0009	54

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

16 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	CGA-4mf7-96v4-52mj	python-3.12@3.12.15-r2	no fix listed
Low	CGA-232h-86ff-rxm7	python-3.12@3.12.15-r2	no fix listed
Low	CGA-3h86-qrh3-64w8	python-3.12@3.12.15-r2	no fix listed
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-g32q-4xf3-638m	python-3.12@3.12.15-r2	no fix listed
Low	CGA-3ghx-j4h4-2hj2	python-3.12@3.12.15-r2	no fix listed
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r7	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.5-r1	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.5-r1	no fix listed
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-477g-5pph-75mj	python-3.12@3.12.15-r2	no fix listed
None	CGA-2j8v-487x-wgg8	python-3.12@3.12.15-r2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.34latest	—	3.16.1	00022	148
0.0.33	—	3.16.1	00020	135
0.0.32	—	3.16.1	00020	135
0.0.30	—	3.16.1	00020	131
0.0.29	—	3.16.1	00022	140
0.0.27	—	3.16.1	00029	201
0.0.26	—	3.16.1	00029	201
0.0.24	—	3.16.1	00025	167
0.0.22	—	3.16.1	00025	167
0.0.21	—	3.16.1	00127	211
0.0.20	—	3.15.2	00126	208
0.0.19	—	3.15.2	00132	262
0.0.18	—	3.15.2	00130	246

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-mlflow/mlflow.svg)](https://charts.stackradar.io/charts/quench-mlflow/mlflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.