apache/airflow:2.8.4-python3.9 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/airflow
apache/airflow:2.8.4-python3.9 resolved to 64e58748b6b9, scanned 14 Sept 2026: 826 findings, 6 critical; deployed by 1 chart, among them airflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
655 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 64e58748b6b9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | GHSA-r7r6-cc7p-4v5m | python-ldap | 3.4.5 |
| Low | GHSA-2vpq-fh52-j3wv | snowflake-connector-python | 3.13.1 |
| Low | GHSA-vr7m-c6v4-8cx8 | apache-airflow | 3.2.2 |
| Low | DEBIAN-CVE-2026-1502 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2025-40909 | perl | 5.36.0-7+deb12u3 |
| Low | DEBIAN-CVE-2026-60585 | mariadb | no fix listed |
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | DEBIAN-CVE-2026-53786 | rsync | no fix listed |
| Low | GHSA-524w-vq63-2xhf | apache-airflow-providers-cncf-kubernetes | 10.17.0 |
| Low | DEBIAN-CVE-2026-19672 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-53798 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-0865 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-63074 | openssl | no fix listed |
| Low | GHSA-8r55-rv5w-6pfm | apache-airflow | 2.11.1 |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2025-14524 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |
| Low | DEBIAN-CVE-2025-14831 | gnutls28 | 3.7.9-2+deb12u6 |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | PYSEC-2026-3711 | apache-airflow | 3.3.1 |
| Low | GHSA-hw6f-rjfj-j7j7 | eventlet | 0.40.3 |
| Low | GHSA-34jh-p97f-mpxf | urllib3 | 1.26.19 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | GHSA-mwh4-6h8g-pg8w | aiohttp | 3.13.4 |
| Low | GHSA-33g2-gx67-c2h3 | apache-airflow | 3.2.2 |
| Low | GHSA-cg3x-89rc-x9mw | apache-airflow | 3.2.2 |
| Low | DEBIAN-CVE-2026-8328 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-35414 | openssh | 1:9.2p1-2+deb12u10 |
| Low | DEBIAN-CVE-2026-25210 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-70462 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-44173 | mariadb | 1:10.11.18-0+deb12u1 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | DEBIAN-CVE-2026-0672 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GHSA-mqqc-3gqh-h2x8 | aiohttp | 3.13.3 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | PYSEC-2026-3713 | apache-airflow-providers-amazon | 9.34.0 |
| Low | DEBIAN-CVE-2026-53788 | rsync | no fix listed |
| Low | GHSA-fqwm-6jpj-5wxc | tornado | 6.5.5 |
| Low | DEBIAN-CVE-2026-7017 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-15806 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | PYSEC-2024-182 | apache-airflow | 2.10.3 |
| Low | DEBIAN-CVE-2025-0395 | glibc | 2.36-9+deb12u10 |
| Low | DEBIAN-CVE-2023-4039 | gcc-12 | 12.2.0-14+deb12u1 |
| Low | GHSA-2522-mrjc-m688 | apache-airflow | 2.9.0 |
| Low | DSA-5678-1 | glibc | 2.36-9+deb12u7 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| airflowairflow-helmVerified publisher | 8.9.0 | 2.8.4-python3.9 | 22 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.