apache/airflow:2.10.2-python3.9 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow

apache/airflow:2.10.2-python3.9 resolved to ce90bdc3d2af, scanned 14 Sept 2026: 772 findings, 2 critical; deployed by 1 chart, among them rada-platform.

Radar Score

8,59723132634

772 findings on digest ce90bdc3d2af · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.10.2-python3.9resolves to	ce90bdc3d2af	1 chart	6 days ago	23132634	8,597

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

634 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ce90bdc3d2af as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-63074	openssl@3.0.14-1~deb12u2	no fix listed
Low	GHSA-8r55-rv5w-6pfm	apache-airflow@2.10.2	2.11.1
Low	GHSA-mq44-7p77-q5h7	aiohttp@3.10.5	3.14.2
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	GHSA-hg6j-4rv6-33pg	aiohttp@3.10.5	3.14.0
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u8	no fix listed
Low	PYSEC-2026-3711	apache-airflow@2.10.2	3.3.1
Low	GHSA-hw6f-rjfj-j7j7	eventlet@0.37.0	0.40.3
Low	GHSA-4xh5-x5gv-qwph	pip@23.0.1	25.3
Low	GHSA-mwh4-6h8g-pg8w	aiohttp@3.10.5	3.13.4
Low	GHSA-33g2-gx67-c2h3	apache-airflow@2.10.2	3.2.2
Low	GHSA-cg3x-89rc-x9mw	apache-airflow@2.10.2	3.2.2
Low	DEBIAN-CVE-2026-8328	python3.11@3.11.2-6+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-35414	openssh@1:9.2p1-2+deb12u3	1:9.2p1-2+deb12u10
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-70462	rsync@3.2.7-1	no fix listed
Low	DEBIAN-CVE-2026-44173	mariadb@1:10.11.9+maria~deb12	1:10.11.18-0+deb12u1
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u8	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@58.1.0	83.0.0
Low	DEBIAN-CVE-2026-0672	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GHSA-mqqc-3gqh-h2x8	aiohttp@3.10.5	3.13.3
Low	PYSEC-2026-3713	apache-airflow-providers-amazon@8.28.0	9.34.0
Low	DEBIAN-CVE-2026-53788	rsync@3.2.7-1	no fix listed
Low	GHSA-fqwm-6jpj-5wxc	tornado@6.4.1	6.5.5
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	PYSEC-2024-182	apache-airflow@2.10.2	2.10.3
Low	GHSA-g283-w6fp-c4fc	apache-airflow-providers-fab@1.3.0	3.6.4
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u8	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DEBIAN-CVE-2026-70454	rsync@3.2.7-1	no fix listed
Low	DEBIAN-CVE-2026-34303	mariadb@1:10.11.9+maria~deb12	1:10.11.18-0+deb12u1
Low	DEBIAN-CVE-2026-44171	mariadb@1:10.11.9+maria~deb12	1:10.11.18-0+deb12u1
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2026-35535	sudo@1.9.13p3-1+deb12u1	1.9.13p3-1+deb12u4
Low	DEBIAN-CVE-2025-4598	systemd@252.30-1~deb12u2	252.38-1~deb12u1
Low	GHSA-7432-952r-cw78	authlib@1.3.2	1.6.9
Low	GHSA-qr67-gv47-xwwh	asyncssh@2.17.0	2.23.1
Low	DEBIAN-CVE-2026-82474	sudo@1.9.13p3-1+deb12u1	no fix listed
Low	PYSEC-2026-3721	pip@23.0.1	26.2
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.10.5	3.13.3
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-60001	openssh@1:9.2p1-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.11@3.11.2-6+deb12u3	no fix listed
Low	DSA-5979-1	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	GHSA-mq26-g339-26xf	pip@23.0.1	23.3
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u3	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
rada-platformrada-platform	0.1.0	2.10.2-python3.9	22

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.