apache/airflow:2.10.2-python3.9 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow
apache/airflow:2.10.2-python3.9 resolved to ce90bdc3d2af, scanned 14 Sept 2026: 772 findings, 2 critical; deployed by 1 chart, among them rada-platform.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
772 distinct on this digest
Findings for digest ce90bdc3d2af as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-53795 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-6253 | curl | no fix listed |
| Low | GHSA-mpf4-983q-p7j4 | tornado | 6.5.8 |
| Low | PYSEC-2024-161 | pyarrow | 17.0.0 |
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | DSA-5949-1 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | DEBIAN-CVE-2025-5222 | icu | 72.1-3+deb12u1 |
| Low | GHSA-w2fm-2cpv-w7v5 | aiohttp | 3.13.4 |
| Low | GHSA-8qvm-5x2c-j2w7 | protobuf | 4.25.8 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | DEBIAN-CVE-2026-53784 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-53802 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-70459 | rsync | no fix listed |
| Low | GHSA-8495-4g3g-x7pr | aiohttp | 3.10.11 |
| Low | DEBIAN-CVE-2026-53803 | rsync | no fix listed |
| Low | GHSA-29vq-49wr-vm6x | werkzeug | 3.1.6 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-vfmq-68hx-4jfw | lxml | 6.1.0 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2024-1013 | unixodbc | no fix listed |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | PYSEC-2026-3714 | apache-airflow-providers-google | 22.3.0 |
| Low | DEBIAN-CVE-2026-17084 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DSA-6015-1 | openssl | 3.0.17-1~deb12u3 |
| Low | GHSA-hgf8-39gv-g3f2 | werkzeug | 3.1.4 |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | PYSEC-2026-2106 | aiohttp | 3.14.0 |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | GHSA-3wq7-rqq7-wx6j | aiohttp | 3.13.4 |
| Low | GHSA-r244-wg5g-6w2r | redshift-connector | 2.1.7 |
| Low | DEBIAN-CVE-2022-49043 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-57432 | perl | no fix listed |
| Low | GHSA-m344-f55w-2m6j | authlib | 1.6.9 |
| Low | DEBIAN-CVE-2026-6276 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-53794 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-3276 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2024-26458 | krb5 | no fix listed |
| Low | GHSA-fh55-r93g-j68g | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2025-12084 | python3.11 | 3.11.2-6+deb12u7 |
| Low | PYSEC-2026-2113 | aiohttp | 3.14.1 |
| Low | GHSA-54jq-c3m8-4m76 | aiohttp | 3.13.3 |
| Low | GHSA-prg7-hcfm-mfcr | sqlparse | 0.6.0 |
| Low | PYSEC-2026-2112 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2016-2781 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-1299 | python3.11 | 3.11.2-6+deb12u7 |
| Low | GHSA-g7f3-828f-7h7m | authlib | 1.6.5 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| rada-platformrada-platform | 0.1.0 | 2.10.2-python3.9 | 22 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.