apache/airflow:2.8.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow
apache/airflow:2.8.1 resolved to e5560ad0b86e, scanned 14 Sept 2026: 851 findings, 6 critical; deployed by 1 chart, among them airflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
851 distinct on this digest
Findings for digest e5560ad0b86e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | PYSEC-2026-2112 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2016-2781 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-1299 | python3.11 | 3.11.2-6+deb12u7 |
| Low | GHSA-g7f3-828f-7h7m | authlib | 1.6.5 |
| Low | GHSA-2883-wwh7-x57v | apache-airflow | 3.2.2 |
| Low | GHSA-8rrh-rw8j-w5fx | wheel | 0.46.2 |
| Low | DEBIAN-CVE-2026-42767 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-5545 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-48962 | perl | no fix listed |
| Low | GHSA-752w-5fwx-jx9f | pyjwt | 2.12.0 |
| Low | DEBIAN-CVE-2025-7709 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-3784 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-g3jr-4jrm-jvqv | apache-airflow-providers-elasticsearch | 6.5.3 |
| Low | PYSEC-2026-237 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2026-53792 | rsync | no fix listed |
| Low | GHSA-765j-9r45-w2q2 | flask-appbuilder | 4.8.1 |
| Low | GHSA-9ggr-2464-2j32 | authlib | 1.6.4 |
| Low | DEBIAN-CVE-2025-15282 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2025-14819 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-4fh7-7jx4-8f6c | apache-airflow | 3.3.0 |
| Low | DEBIAN-CVE-2026-42015 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2025-11468 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DSA-5770-1 | expat | 2.5.0-1+deb12u1 |
| Low | DEBIAN-CVE-2024-28834 | gnutls28 | 3.7.9-2+deb12u3 |
| Low | GHSA-mfx4-hv73-q22v | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-11824 | sqlite3 | no fix listed |
| Low | GHSA-cq5v-8q36-5273 | aiohttp | 3.14.3 |
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | GHSA-r7r6-cc7p-4v5m | python-ldap | 3.4.5 |
| Low | GHSA-2vpq-fh52-j3wv | snowflake-connector-python | 3.13.1 |
| Low | GHSA-vr7m-c6v4-8cx8 | apache-airflow | 3.2.2 |
| Low | DEBIAN-CVE-2026-1502 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2025-40909 | perl | 5.36.0-7+deb12u3 |
| Low | DEBIAN-CVE-2026-60585 | mariadb | no fix listed |
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | DEBIAN-CVE-2026-53786 | rsync | no fix listed |
| Low | GHSA-524w-vq63-2xhf | apache-airflow-providers-cncf-kubernetes | 10.17.0 |
| Low | DEBIAN-CVE-2026-19672 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-53798 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | GO-2023-1987 | stdlib | 1.19.12 |
| Low | DEBIAN-CVE-2026-0865 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-63074 | openssl | no fix listed |
| Low | GO-2023-1752 | stdlib | 1.19.9 |
| Low | GHSA-8r55-rv5w-6pfm | apache-airflow | 2.11.1 |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2025-14524 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |