StackRadar

evk02/mlflow:2.2.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of evk02/mlflow

evk02/mlflow:2.2.1 resolved to ef6ff257ef35, scanned 14 Sept 2026: 350 findings, 6 critical, 7 on KEV; deployed by 1 chart, among them mlflow.

Radar Score

5,456612103228

350 findings on digest ef6ff257ef35 · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.2.1resolves toef6ff257ef351 chart8 days ago6121032285,456

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

350 distinct on this digest

Findings for digest ef6ff257ef35 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-fh64-r2vc-xvhrmlflow@2.2.13.11.1
LowGHSA-p538-c434-8v24gitpython@3.1.313.1.56
LowDLA-4065-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u6
LowGHSA-27jp-wm6q-gp25sqlparse@0.4.30.5.4
LowGHSA-x746-7m8f-x49cstarlette@0.22.01.1.0
LowGHSA-3496-9g83-7v6xsqlparse@0.4.30.6.0
LowPYSEC-2026-2275requests@2.28.22.33.0
LowDLA-4306-1pam@1.4.0-9+deb11u11.4.0-9+deb11u2
LowDLA-4154-1mariadb-10.5@1:10.5.18-0+deb11u11:10.5.28-0+deb11u2
LowGHSA-46r5-x6jq-v8g6mlflow@2.2.13.11.0rc0
LowGHSA-jw8x-6495-233vscikit-learn@1.2.21.5.0
LowPYSEC-2026-248starlette@0.22.01.3.0
LowDLA-4130-1shadow@1:4.8.1-11:4.8.1-1+deb11u1
LowPYSEC-2026-2151flask@2.2.33.1.3
LowDLA-3891-1mariadb-10.5@1:10.5.18-0+deb11u11:10.5.26-0+deb11u2
LowDLA-4396-1libpng1.6@1.6.37-31.6.37-3+deb11u1
LowGHSA-g7vv-2v7x-gj9ptqdm@4.65.04.66.3
LowDSA-5516-1libxpm@1:3.5.12-11:3.5.12-1.1+deb11u1
LowGHSA-m959-cc7f-wv43cryptography@39.0.246.0.6
LowDLA-4143-1glibc@2.31-13+deb11u32.31-13+deb11u12
LowDLA-4195-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u7
LowGHSA-r73j-pqj5-w3x7pillow@9.4.012.2.0
LowGHSA-jp4c-xjxw-mgf9pip@22.0.426.1
LowGHSA-qmgc-5h2g-mvrwfilelock@3.9.03.20.3
LowGHSA-wjx4-4jcj-g98jpillow@9.4.012.2.0
LowGHSA-fhv5-28vv-h8m8pyjwt@2.6.02.13.0
LowGHSA-mrfv-m5wm-5w6wpynacl@1.5.01.6.2
LowGHSA-h4gh-qq45-vh27cryptography@39.0.243.0.1
LowGHSA-pjjw-qhg8-p2p9aiohttp@3.8.43.8.6
LowGHSA-cfqr-cjx5-5jcmsqlparse@0.4.30.6.0
LowGHSA-993g-76c3-p5m4pyjwt@2.6.02.13.0
LowGHSA-4x4j-2g7c-83w6pillow@9.4.012.3.0
LowGHSA-58qw-9mgm-455vpip@22.0.426.1
LowDLA-4437-1gnupg2@2.2.27-2+deb11u22.2.27-2+deb11u3
LowGHSA-597g-3phw-6986virtualenv@20.20.020.36.1
LowDLA-3972-1tzdata@2021a-1+deb11u52024b-0+deb11u1
LowDLA-4016-1ucf@3.00433.0043+deb11u2
LowDLA-4085-1tzdata@2021a-1+deb11u52025a-0+deb11u1
LowDLA-4105-1tzdata@2021a-1+deb11u52025b-0+deb11u1
LowDLA-4403-1tzdata@2021a-1+deb11u52025b-0+deb11u2
LowDLA-4485-1ca-certificates@2021011920230311+deb12u1~deb11u1
LowPYSEC-2023-175pillow@9.4.010.0.1
LowGHSA-5239-wwwm-4pmqpygments@2.14.02.20.0
LowGHSA-5qmp-p3c4-72qjmlflow@2.2.13.10.1
LowGHSA-r374-rxx8-8654paramiko@2.12.0no fix listed
LowGHSA-6vgw-5pg2-w6jppip@22.0.426.0
LowGHSA-5cpq-8wj7-hf2vcryptography@39.0.241.0.0
LowGHSA-jm77-qphf-c4w8cryptography@39.0.241.0.3
LowGHSA-v8gr-m533-ghj9cryptography@39.0.241.0.4
NoneGHSA-f96h-pmfr-66vwstarlette@0.22.00.40.0

Used by

1 chart
ChartVersionTagContainers
mlflowncsaVerified publisher1.2.12.2.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.