buntha/mlflow:2.1.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of buntha/mlflow
buntha/mlflow:2.1.1 resolved to 154542cc3083, scanned 14 Sept 2026: 337 findings, 7 critical, 8 on KEV; deployed by 1 chart, among them mlflow-server.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
337 distinct on this digest
Findings for digest 154542cc3083 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-43c4-9qgj-x742 | mlflow | no fix listed |
| Medium | GHSA-7p8j-qv6x-f4g4 | mlflow | no fix listed |
| Medium | GHSA-j8mg-pqc5-x9gj | mlflow | no fix listed |
| Medium | GHSA-wf7f-8fxf-xfxc | mlflow | no fix listed |
| Medium | GHSA-2h4p-vjrc-8xpq | mako | 1.3.12 |
| Medium | GHSA-284h-m62q-gf8w | gitpython | 3.1.59 |
| Medium | GHSA-g35p-px32-whv6 | mlflow | 3.11.0 |
| Medium | GHSA-wvpp-8hx9-p66j | gitpython | 3.1.58 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-j62r-wxqq-f3gf | mlflow | 2.12.1 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | GHSA-jm78-9fvv-mhgr | gitpython | 3.1.58 |
| Low | GHSA-hc5x-x2vx-497g | gunicorn | 22.0.0 |
| Low | GHSA-9rj7-rf2p-w77r | gitpython | 3.1.58 |
| Low | GHSA-m49c-5c52-6696 | mlflow | no fix listed |
| Low | PYSEC-2023-165 | gitpython | 3.1.35 |
| Low | GHSA-44wm-f244-xhp3 | pillow | 10.3.0 |
| Low | GHSA-62p4-gmf7-7g93 | pillow | 12.3.0 |
| Low | GHSA-f42m-mvfv-cgw5 | mlflow | no fix listed |
| Low | PYSEC-2026-3787 | gitpython | 3.1.59 |
| Low | DLA-3954-1 | postgresql-13 | 13.17-0+deb11u1 |
| Low | DLA-4297-1 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| Low | DSA-5330-1 | curl | 7.74.0-1.3+deb11u5 |
| Low | DSA-5554-1 | postgresql-13 | 13.13-0+deb11u1 |
| Low | GHSA-vjc4-5qp5-m44j | pillow | 12.3.0 |
| Low | GHSA-8c7q-86fq-vvmh | mlflow | 3.11.0rc1 |
| Low | DLA-3907-1 | sqlite3 | 3.34.1-3+deb11u1 |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | GHSA-wfm5-v35h-vwf4 | gitpython | 3.1.33 |
| Low | GHSA-5wmx-573v-2qwq | markdown | 3.8.1 |
| Low | PYSEC-2026-3951 | gitpython | 3.1.55 |
| Low | GHSA-gmj6-6f8f-6699 | jinja2 | 3.1.5 |
| Low | PYSEC-2026-3784 | gitpython | 3.1.58 |
| Low | GHSA-f9vj-2wh5-fj8j | werkzeug | 3.0.6 |
| Low | GHSA-3f7w-8rr8-f37f | gitpython | 3.1.57 |
| Low | GHSA-45hq-cxwh-f6vc | pillow | 12.3.0 |
| Low | GHSA-fjr4-x663-mwxc | gitpython | 3.1.54 |
| Low | DSA-5628-1 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u3 |
| Low | GHSA-5x94-69rx-g8h2 | pillow | 12.3.0 |
| Low | GHSA-phj9-mv4w-65pm | pillow | 12.3.0 |
| Low | GHSA-g6pg-52vf-843h | mlflow | no fix listed |
| Low | GHSA-f2ff-p2ww-7p4p | sqlparse | 0.6.0 |
| Low | GHSA-pwgv-4x5q-6m9f | sqlparse | 0.6.0 |
| Low | GHSA-8v84-f9pq-wr9x | pillow | 12.3.0 |
| Low | DLA-3878-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u5 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| mlflow-servermlflowserver | 0.1.9 | 2.1.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.