evk02/mlflow:2.2.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of evk02/mlflow
evk02/mlflow:2.2.1 resolved to ef6ff257ef35, scanned 14 Sept 2026: 350 findings, 6 critical, 7 on KEV; deployed by 1 chart, among them mlflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
350 distinct on this digest
Findings for digest ef6ff257ef35 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-x38x-g6gr-jqff | mlflow | no fix listed |
| Medium | GHSA-43c4-9qgj-x742 | mlflow | no fix listed |
| Medium | GHSA-7p8j-qv6x-f4g4 | mlflow | no fix listed |
| Medium | GHSA-j8mg-pqc5-x9gj | mlflow | no fix listed |
| Medium | GHSA-wf7f-8fxf-xfxc | mlflow | no fix listed |
| Medium | PYSEC-2023-254 | cryptography | 41.0.6 |
| Medium | DSA-5286-1 | krb5 | 1.18.3-6+deb11u3 |
| Medium | GHSA-2h4p-vjrc-8xpq | mako | 1.3.12 |
| Medium | GHSA-284h-m62q-gf8w | gitpython | 3.1.59 |
| Medium | GHSA-hx9q-6w63-j58v | orjson | 3.11.6 |
| Medium | GHSA-g35p-px32-whv6 | mlflow | 3.11.0 |
| Medium | GHSA-jm66-cg57-jjv5 | azure-core | 1.38.0 |
| Medium | GHSA-wvpp-8hx9-p66j | gitpython | 3.1.58 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-j62r-wxqq-f3gf | mlflow | 2.12.1 |
| Medium | PYSEC-2023-246 | aiohttp | 3.8.6 |
| Medium | GHSA-6vqw-3v5j-54x4 | cryptography | 42.0.4 |
| Medium | GHSA-63hf-3vf5-4wqf | aiohttp | 3.13.4 |
| Medium | PYSEC-2026-2191 | kafka-python | 2.3.2 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | GHSA-jm78-9fvv-mhgr | gitpython | 3.1.58 |
| Low | GHSA-q3qx-c6g2-7pw2 | aiohttp | 3.9.0 |
| Low | GHSA-hc5x-x2vx-497g | gunicorn | 22.0.0 |
| Low | GHSA-9rj7-rf2p-w77r | gitpython | 3.1.58 |
| Low | GHSA-m49c-5c52-6696 | mlflow | no fix listed |
| Low | PYSEC-2023-165 | gitpython | 3.1.35 |
| Low | GHSA-44wm-f244-xhp3 | pillow | 10.3.0 |
| Low | GHSA-62p4-gmf7-7g93 | pillow | 12.3.0 |
| Low | GHSA-f42m-mvfv-cgw5 | mlflow | no fix listed |
| Low | PYSEC-2026-2098 | aiohttp | 3.13.4 |
| Low | GHSA-p998-jp59-783m | aiohttp | 3.13.4 |
| Low | PYSEC-2026-3787 | gitpython | 3.1.59 |
| Low | GHSA-8qpw-xqxj-h4r2 | aiohttp | 3.9.2 |
| Low | GHSA-6jhg-hg63-jvvf | aiohttp | 3.13.3 |
| Low | GHSA-g3cq-j2xw-wf74 | aiohttp | 3.14.1 |
| Low | GHSA-g84x-mcqj-x9qq | aiohttp | 3.13.3 |
| Low | GHSA-vjc4-5qp5-m44j | pillow | 12.3.0 |
| Low | GHSA-jj3x-wxrx-4x23 | aiohttp | 3.13.3 |
| Low | GHSA-8c7q-86fq-vvmh | mlflow | 3.11.0rc1 |
| Low | DLA-3907-1 | sqlite3 | 3.34.1-3+deb11u1 |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | GHSA-6mq8-rvhq-8wgg | aiohttp | 3.13.3 |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | GHSA-wfm5-v35h-vwf4 | gitpython | 3.1.33 |
| Low | GHSA-5wmx-573v-2qwq | markdown | 3.8.1 |
| Low | PYSEC-2026-3951 | gitpython | 3.1.55 |
| Low | PYSEC-2026-2190 | kafka-python | 2.3.2 |