StackRadar

buntha/mlflow:2.1.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of buntha/mlflow

buntha/mlflow:2.1.1 resolved to 154542cc3083, scanned 14 Sept 2026: 337 findings, 7 critical, 8 on KEV; deployed by 1 chart, among them mlflow-server.

Radar Score

5,30271194225

337 findings on digest 154542cc3083 · scanned 14 Sept 2026

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.1.1resolves to154542cc30831 chart8 days ago711942255,302

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

337 distinct on this digest

Findings for digest 154542cc3083 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-38jv-5279-wg99urllib3@1.26.132.6.3
MediumGHSA-rvhj-8chj-8v3cmlflow@2.1.13.9.0
MediumGHSA-f82r-jj5r-6g97mlflow@2.1.12.12.1
MediumGHSA-4rqf-8pfm-p36rmlflow@2.1.12.17.0rc0
MediumGHSA-pr76-5cm5-w9cjgitpython@3.1.293.1.32
MediumGHSA-r9hx-vwmv-q579setuptools@58.1.065.5.1
MediumPYSEC-2025-49setuptools@58.1.078.1.1
MediumGHSA-gq3w-7jj3-x7grmlflow@2.1.13.8.0rc0
MediumGHSA-3f63-hfp8-52jqpillow@9.3.010.2.0
MediumGHSA-q2r8-vmq7-fpx2mlflow@2.1.13.8.0rc0
MediumGHSA-4qq5-mxxx-m6ggmlflow@2.1.12.8.0
MediumGHSA-ffw3-6378-cqgpmlflow@2.1.12.6.0
MediumGHSA-hvc6-42vf-jhf8mlflow@2.1.12.9.2
MediumGHSA-6xj8-rrqx-r4cvmlflow@2.1.12.22.0rc0
MediumGHSA-6749-m5cp-6cg7mlflow@2.1.12.10.0
MediumGHSA-v945-r3rc-6fjmmlflow@2.1.12.9.2
MediumGHSA-wv8q-4f85-2p8pmlflow@2.1.12.9.2
MediumGHSA-j8r2-6x86-q33qrequests@2.28.12.31.0
MediumPYSEC-2026-3952gitpython@3.1.293.1.54
MediumGHSA-v9hf-5j83-6xpppymysql@1.0.21.1.1
MediumPYSEC-2023-192urllib3@1.26.132.0.6
MediumGHSA-cxfr-5q3r-2rc2mlflow@2.1.12.9.2
MediumGHSA-956x-8gvw-wg5vgitpython@3.1.293.1.51
MediumGHSA-xch3-2f9x-wh9fmlflow@2.1.13.8.0rc0
MediumGHSA-pqcv-qw2r-r859mlflow@2.1.1no fix listed
MediumGHSA-xg9f-g7g7-2323werkzeug@2.2.22.2.3
MediumGHSA-hq88-wg7q-gp4gmlflow@2.1.12.10.0
MediumPYSEC-2024-60idna@3.43.7
MediumGHSA-3v79-q7ph-j75hmlflow@2.1.12.10.0
MediumPYSEC-2026-2161gitpython@3.1.293.1.47
MediumDLA-4087-1python3.9@3.9.2-13.9.2-1+deb11u3
MediumGHSA-m2qf-hxjv-5gpqflask@2.2.22.2.5
MediumGHSA-cv6c-7963-wxcgmlflow@2.1.1no fix listed
MediumGHSA-6673-4983-2vx5fonttools@4.38.04.43.0
MediumGHSA-vhcx-3pq2-4fvcmlflow@2.1.13.9.0rc0
MediumDSA-5584-1bluez@5.55-3.15.55-3.1+deb11u1
MediumDLA-4057-1openssh@1:8.4p1-5+deb11u11:8.4p1-5+deb11u4
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.132.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.132.6.0
MediumGHSA-ghv6-9r9j-wh4jmlflow@2.1.1no fix listed
MediumGHSA-8ghj-p4vj-mr35pillow@9.3.010.0.0
MediumGHSA-q34m-jh98-gwm2werkzeug@2.2.23.0.6
MediumGHSA-vwhf-3v6x-wff8mlflow@2.1.12.9.0
MediumGHSA-5mvj-wmgj-7q8cmlflow@2.1.1no fix listed
MediumGHSA-fhff-qmm8-h2fpmlflow@2.1.13.9.0rc0
MediumPYSEC-2023-221werkzeug@2.2.22.3.8
MediumGHSA-r9mr-m37c-5fr3gitpython@3.1.293.1.54
MediumPYSEC-2024-230certifi@2022.12.72024.7.4
MediumGHSA-76cg-cfhx-373fmlflow@2.1.1no fix listed
MediumGHSA-x38x-g6gr-jqffmlflow@2.1.1no fix listed

Used by

1 chart
ChartVersionTagContainers
mlflow-servermlflowserver0.1.92.1.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.