apache/airflow:2.8.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow
apache/airflow:2.8.1 resolved to e5560ad0b86e, scanned 14 Sept 2026: 851 findings, 6 critical; deployed by 1 chart, among them airflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
676 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest e5560ad0b86e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | DEBIAN-CVE-2026-75803 | openssl | no fix listed |
| Low | DEBIAN-CVE-2024-33602 | glibc | 2.36-9+deb12u7 |
| Low | DEBIAN-CVE-2025-30693 | mariadb | 1:10.11.13-0+deb12u1 |
| Low | DEBIAN-CVE-2026-4046 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-xgmm-8j9v-c9wx | pyjwt | 2.13.0 |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GHSA-qjxf-f2mg-c6mc | tornado | 6.5.5 |
| Low | DEBIAN-CVE-2026-53801 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-48959 | perl | no fix listed |
| Low | GHSA-j482-47xf-p25c | apache-airflow | 2.9.3 |
| Low | DEBIAN-CVE-2025-32414 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | DEBIAN-CVE-2025-30722 | mariadb | 1:10.11.13-0+deb12u1 |
| Low | GHSA-5357-c2jx-v7qh | authlib | 1.3.1 |
| Low | GHSA-h75v-3vvj-5mfj | jinja2 | 3.1.4 |
| Low | DEBIAN-CVE-2026-7598 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GHSA-v92g-xgxw-vvmm | mako | 1.3.11 |
| Low | DEBIAN-CVE-2026-6791 | glibc | no fix listed |
| Low | GHSA-4g48-54q2-fg7q | apache-airflow | 3.1.8 |
| Low | GHSA-7gpw-8wmc-pm8g | aiohttp | 3.9.4 |
| Low | DEBIAN-CVE-2025-21490 | mariadb | 1:10.11.11-0+deb12u1 |
| Low | DEBIAN-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | GHSA-p34h-wq7j-h5v6 | python-ldap | 3.4.5 |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | DEBIAN-CVE-2023-6597 | python3.11 | 3.11.2-6+deb12u2 |
| Low | DEBIAN-CVE-2026-53795 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-6253 | curl | no fix listed |
| Low | GHSA-mpf4-983q-p7j4 | tornado | 6.5.8 |
| Low | PYSEC-2024-161 | pyarrow | 17.0.0 |
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | DSA-5949-1 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | DEBIAN-CVE-2025-5222 | icu | 72.1-3+deb12u1 |
| Low | GHSA-w2fm-2cpv-w7v5 | aiohttp | 3.13.4 |
| Low | GHSA-8qvm-5x2c-j2w7 | protobuf | 4.25.8 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | DEBIAN-CVE-2026-53784 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-53802 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-70459 | rsync | no fix listed |
| Low | GHSA-8495-4g3g-x7pr | aiohttp | 3.10.11 |
| Low | DEBIAN-CVE-2026-53803 | rsync | no fix listed |
| Low | GHSA-29vq-49wr-vm6x | werkzeug | 3.1.6 |
| Low | GHSA-m5vv-6r4h-3vj9 | azure-identity | 1.16.1 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-vfmq-68hx-4jfw | lxml | 6.1.0 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2024-1013 | unixodbc | no fix listed |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |