StackRadar

apache/airflow:2.10.2-python3.9 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow

apache/airflow:2.10.2-python3.9 resolved to ce90bdc3d2af, scanned 14 Sept 2026: 772 findings, 2 critical; deployed by 1 chart, among them rada-platform.

Radar Score

8,59723132634

772 findings on digest ce90bdc3d2af · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.10.2-python3.9resolves toce90bdc3d2af1 chart6 days ago231326348,597

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

634 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ce90bdc3d2af as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2013-4392systemd@252.30-1~deb12u2no fix listed
LowDEBIAN-CVE-2023-52971mariadb@1:10.11.9+maria~deb121:10.11.13-0+deb12u1
LowPYSEC-2025-183pyjwt@2.9.0no fix listed
LowGHSA-rv5f-ccpm-xjj4apache-airflow-providers-amazon@8.28.09.22.0
LowGHSA-r95x-qfjj-fjj2authlib@1.3.21.6.12
LowDEBIAN-CVE-2026-78408util-linux@2.38.1-5+deb12u1no fix listed
LowGHSA-w7vc-732c-9m39pyjwt@2.9.02.13.0
LowDEBIAN-CVE-2026-41989libgcrypt20@1.10.1-31.10.1-3+deb12u1
LowPYSEC-2025-265tornado@6.4.16.5.3
LowDEBIAN-CVE-2024-11053curl@7.88.1-10+deb12u77.88.1-10+deb12u10
LowDEBIAN-CVE-2023-52969mariadb@1:10.11.9+maria~deb121:10.11.13-0+deb12u1
LowPYSEC-2026-3709apache-airflow@2.10.23.3.1
LowDEBIAN-CVE-2023-52970mariadb@1:10.11.9+maria~deb121:10.11.13-0+deb12u1
LowDEBIAN-CVE-2026-53799rsync@3.2.7-1no fix listed
LowGO-2026-4981stdlib@go1.22.71.25.10
LowDEBIAN-CVE-2026-6019python3.11@3.11.2-6+deb12u3no fix listed
LowDEBIAN-CVE-2023-31439systemd@252.30-1~deb12u2no fix listed
LowGO-2025-3563stdlib@go1.22.71.23.8
LowDEBIAN-CVE-2026-60331mariadb@1:10.11.9+maria~deb12no fix listed
LowGHSA-fg6f-75jq-6523authlib@1.3.21.6.6
LowGO-2026-4977stdlib@go1.22.71.25.10
LowDEBIAN-CVE-2026-76957expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2023-31437systemd@252.30-1~deb12u2no fix listed
LowDEBIAN-CVE-2025-68973gnupg2@2.2.40-1.12.2.40-1.1+deb12u2
LowDEBIAN-CVE-2026-43619rsync@3.2.7-13.2.7-1+deb12u5
LowGHSA-3322-mjxh-9mp5apache-airflow@2.10.23.3.0
LowGO-2026-4986stdlib@go1.22.71.25.10
LowGHSA-966j-vmvw-g2g9aiohttp@3.10.53.13.4
LowGO-2026-4918stdlib@go1.22.71.25.10
LowDEBIAN-CVE-2024-21096mariadb@1:10.11.9+maria~deb121:10.11.11-0+deb12u1
LowGO-2026-4337stdlib@go1.22.71.24.13
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u82.36-9+deb12u14
LowGHSA-w853-jp5j-5j7ffilelock@3.16.03.20.1
LowDEBIAN-CVE-2026-59998openssh@1:9.2p1-2+deb12u3no fix listed
LowGHSA-qccp-gfcp-xxvcurllib3@1.26.202.7.0
LowDEBIAN-CVE-2023-31438systemd@252.30-1~deb12u2no fix listed
LowPYSEC-2025-15flask-appbuilder@4.5.04.5.3
LowDEBIAN-CVE-2026-1757libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u6
LowGHSA-pqhf-p39g-3x64uv@0.4.10.9.6
LowGO-2026-4601stdlib@go1.22.71.25.8
LowDEBIAN-CVE-2026-60747mariadb@1:10.11.9+maria~deb12no fix listed
LowDEBIAN-CVE-2026-72522expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2008-3234openssh@1:9.2p1-2+deb12u3no fix listed
LowDEBIAN-CVE-2026-56403expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56404expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56405expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56408expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56406expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56407expat@2.5.0-1+deb12u12.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56410expat@2.5.0-1+deb12u12.5.0-1+deb12u3

Used by

1 chart
ChartVersionTagContainers
rada-platformrada-platform0.1.02.10.2-python3.922

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.