apache/airflow:2.8.4-python3.9 container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow

apache/airflow:2.8.4-python3.9 resolved to 64e58748b6b9, scanned 15 Sept 2026: 825 findings, 5 critical; deployed by 1 chart, among them airflow.

Radar Score

9,89458157654

825 findings on digest 64e58748b6b9 · scanned 15 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.8.4-python3.9resolves to	64e58748b6b9	1 chart	9 days ago	58157654	9,894

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

654 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 64e58748b6b9 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-59995	openssh@1:9.2p1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-59996	openssh@1:9.2p1-2+deb12u2	no fix listed
Low	GO-2026-4947	stdlib@go1.21.8	1.25.9
Low	DEBIAN-CVE-2026-2297	python3.11@3.11.2-6	3.11.2-6+deb12u8
Low	DEBIAN-CVE-2026-86143	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	GO-2025-4006	stdlib@go1.21.8	1.24.8
Low	DEBIAN-CVE-2026-56412	expat@2.5.0-1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-47023	mariadb@1:10.11.7+maria~deb12	no fix listed
Low	GHSA-799x-qp47-8qwq	apache-airflow@2.8.4	3.2.2
Low	GO-2026-5037	stdlib@go1.21.8	1.25.11
Low	DEBIAN-CVE-2026-40225	systemd@252.22-1~deb12u1	252.39-1~deb12u2
Low	GO-2026-4971	stdlib@go1.21.8	1.25.10
Low	DEBIAN-CVE-2026-50219	expat@2.5.0-1	2.5.0-1+deb12u3
Low	PYSEC-2026-3705	apache-airflow@2.8.4	3.3.1
Low	DEBIAN-CVE-2025-13837	python3.11@3.11.2-6	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2026-56409	expat@2.5.0-1	2.5.0-1+deb12u3
Low	GO-2026-5972	stdlib@go1.21.8	1.25.13
Low	GO-2026-6088	stdlib@go1.21.8	1.25.13
Low	GO-2026-6089	stdlib@go1.21.8	1.25.13
Low	GO-2026-6090	stdlib@go1.21.8	1.25.13
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2025-1390	libcap2@1:2.66-4	1:2.66-4+deb12u1
Low	DEBIAN-CVE-2026-50813	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1	no fix listed
Low	GO-2026-5038	stdlib@go1.21.8	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.24.1-2	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.20.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56132	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1	no fix listed
Low	GO-2025-4012	stdlib@go1.21.8	1.24.8
Low	GHSA-5vvg-pvhp-hv2m	snowflake-connector-python@3.7.1	3.12.3
Low	GO-2025-3956	stdlib@go1.21.8	1.23.12
Low	DEBIAN-CVE-2025-8058	glibc@2.36-9+deb12u4	2.36-9+deb12u13
Low	GO-2025-4011	stdlib@go1.21.8	1.24.8
Low	GO-2025-4015	stdlib@go1.21.8	1.24.8
Low	GO-2026-6218	stdlib@go1.21.8	1.25.13
Low	DEBIAN-CVE-2026-56392	coreutils@9.1-1	no fix listed
Low	GHSA-27jp-wm6q-gp25	sqlparse@0.4.4	0.5.4
Low	GHSA-8423-8fgw-73vq	tornado@6.4	6.5.8
Low	DEBIAN-CVE-2026-54370	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@7.88.1-10+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u1	no fix listed
Low	GHSA-3496-9g83-7v6x	sqlparse@0.4.4	0.6.0
Low	GO-2025-3373	stdlib@go1.21.8	1.22.11
Low	PYSEC-2026-2275	requests@2.31.0	2.33.0

Used by

1 chart

Chart	Version	Tag	Containers
airflowairflow-helmVerified publisher	8.9.0	2.8.4-python3.9	22

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.