StackRadar

apache/airflow:2.10.2-python3.9 container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow

apache/airflow:2.10.2-python3.9 resolved to ce90bdc3d2af, scanned 15 Sept 2026: 771 findings, 0 critical; deployed by 1 chart, among them rada-platform.

Radar Score

8,14803114653

771 findings on digest ce90bdc3d2af · scanned 15 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.10.2-python3.9resolves toce90bdc3d2af1 chart6 days ago031146538,148

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

771 distinct on this digest

Findings for digest ce90bdc3d2af as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-1502python3.11@3.11.2-6+deb12u3no fix listed
LowDEBIAN-CVE-2025-40909perl@5.36.0-7+deb12u15.36.0-7+deb12u3
LowDEBIAN-CVE-2026-60585mariadb@1:10.11.9+maria~deb12no fix listed
LowGHSA-2vrm-gr82-f7m5aiohttp@3.10.53.13.4
LowDEBIAN-CVE-2026-53786rsync@3.2.7-1no fix listed
LowGHSA-524w-vq63-2xhfapache-airflow-providers-cncf-kubernetes@8.4.110.17.0
LowDEBIAN-CVE-2026-19672python3.11@3.11.2-6+deb12u3no fix listed
LowDEBIAN-CVE-2026-53798rsync@3.2.7-1no fix listed
LowDEBIAN-CVE-2026-48961perl@5.36.0-7+deb12u1no fix listed
LowDEBIAN-CVE-2026-63074openssl@3.0.14-1~deb12u2no fix listed
LowDEBIAN-CVE-2026-0865python3.11@3.11.2-6+deb12u33.11.2-6+deb12u7
LowGHSA-8r55-rv5w-6pfmapache-airflow@2.10.22.11.1
LowGHSA-mq44-7p77-q5h7aiohttp@3.10.53.14.2
LowDEBIAN-CVE-2023-31484perl@5.36.0-7+deb12u15.36.0-7+deb12u3
LowDEBIAN-CVE-2025-14524curl@7.88.1-10+deb12u77.88.1-10+deb12u15
LowGHSA-hg6j-4rv6-33pgaiohttp@3.10.53.14.0
LowDEBIAN-CVE-2025-14831gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u6
LowDEBIAN-CVE-2026-6238glibc@2.36-9+deb12u8no fix listed
LowPYSEC-2026-3711apache-airflow@2.10.23.3.1
LowGHSA-hw6f-rjfj-j7j7eventlet@0.37.00.40.3
LowGHSA-4xh5-x5gv-qwphpip@23.0.125.3
LowGHSA-mwh4-6h8g-pg8waiohttp@3.10.53.13.4
LowGHSA-33g2-gx67-c2h3apache-airflow@2.10.23.2.2
LowGHSA-cg3x-89rc-x9mwapache-airflow@2.10.23.2.2
LowDEBIAN-CVE-2026-8328python3.11@3.11.2-6+deb12u3no fix listed
LowDEBIAN-CVE-2026-35414openssh@1:9.2p1-2+deb12u31:9.2p1-2+deb12u10
LowDEBIAN-CVE-2026-25210expat@2.5.0-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-70462rsync@3.2.7-1no fix listed
LowDEBIAN-CVE-2026-44173mariadb@1:10.11.9+maria~deb121:10.11.18-0+deb12u1
LowDEBIAN-CVE-2026-5435glibc@2.36-9+deb12u8no fix listed
LowGHSA-h35f-9h28-mq5csetuptools@58.1.083.0.0
LowDEBIAN-CVE-2026-0672python3.11@3.11.2-6+deb12u33.11.2-6+deb12u7
LowDEBIAN-CVE-2026-54369acl@2.3.1-3no fix listed
LowGHSA-mqqc-3gqh-h2x8aiohttp@3.10.53.13.3
LowPYSEC-2026-3713apache-airflow-providers-amazon@8.28.09.34.0
LowDEBIAN-CVE-2026-53788rsync@3.2.7-1no fix listed
LowGHSA-fqwm-6jpj-5wxctornado@6.4.16.5.5
LowDEBIAN-CVE-2026-7017perl@5.36.0-7+deb12u1no fix listed
LowDEBIAN-CVE-2024-11053curl@7.88.1-10+deb12u77.88.1-10+deb12u10
LowDEBIAN-CVE-2024-25062libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowDEBIAN-CVE-2026-15806python3.11@3.11.2-6+deb12u3no fix listed
LowDEBIAN-CVE-2026-54371attr@1:2.5.1-4no fix listed
LowPYSEC-2024-182apache-airflow@2.10.22.10.3
LowGHSA-g283-w6fp-c4fcapache-airflow-providers-fab@1.3.03.6.4
LowDEBIAN-CVE-2024-8176expat@2.5.0-1+deb12u12.5.0-1+deb12u2
LowDEBIAN-CVE-2025-0395glibc@2.36-9+deb12u82.36-9+deb12u10
LowDEBIAN-CVE-2026-70454rsync@3.2.7-1no fix listed
LowDEBIAN-CVE-2026-34303mariadb@1:10.11.9+maria~deb121:10.11.18-0+deb12u1
LowDEBIAN-CVE-2026-44171mariadb@1:10.11.9+maria~deb121:10.11.18-0+deb12u1
LowDSA-5962-1gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u5

Used by

1 chart
ChartVersionTagContainers
rada-platformrada-platform0.1.02.10.2-python3.922

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.