StackRadar

kelvinsp/mlflow:1.26.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of kelvinsp/mlflow

kelvinsp/mlflow:1.26.1 resolved to cd33e6db2a59, scanned 14 Sept 2026: 247 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them mlflow.

Radar Score

4,1565595142

247 findings on digest cd33e6db2a59 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.26.1resolves tocd33e6db2a591 chart7 days ago55951424,156

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

247 distinct on this digest

Findings for digest cd33e6db2a59 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-wvpp-8hx9-p66jgitpython@3.1.273.1.58
MediumGHSA-7gcm-g887-7qv7protobuf@4.21.15.29.6
MediumDLA-3175-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u4
MediumGHSA-j62r-wxqq-f3gfmlflow@1.26.12.12.1
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
LowPYSEC-2026-2132click@8.1.38.3.3
LowGHSA-jm78-9fvv-mhgrgitpython@3.1.273.1.58
LowGHSA-hc5x-x2vx-497ggunicorn@20.1.022.0.0
LowDLA-3614-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u6
LowDSA-5122-1gzip@1.9-31.9-3+deb10u1
LowDSA-5123-1xz-utils@5.2.4-15.2.4-1+deb10u1
LowDSA-5073-1expat@2.2.6-2+deb10u12.2.6-2+deb10u2
LowGHSA-3pgj-pg6c-r5p7oauthlib@3.2.03.2.2
LowGHSA-9rj7-rf2p-w77rgitpython@3.1.273.1.58
LowGHSA-m49c-5c52-6696mlflow@1.26.1no fix listed
LowPYSEC-2023-165gitpython@3.1.273.1.35
LowGHSA-f42m-mvfv-cgw5mlflow@1.26.1no fix listed
LowPYSEC-2026-3787gitpython@3.1.273.1.59
LowDLA-3651-1postgresql-11@11.12-0+deb10u111.22-0+deb10u1
LowDSA-5087-1cyrus-sasl2@2.1.27+dfsg-1+deb10u12.1.27+dfsg-1+deb10u2
LowGHSA-8c7q-86fq-vvmhmlflow@1.26.13.11.0rc1
LowGHSA-q2x7-8rv6-6q7hjinja2@3.1.23.1.5
LowGHSA-xqr8-7jwr-rhp7certifi@2022.5.18.12023.7.22
LowGHSA-wfm5-v35h-vwf4gitpython@3.1.273.1.33
LowPYSEC-2026-3951gitpython@3.1.273.1.55
LowGHSA-gmj6-6f8f-6699jinja2@3.1.23.1.5
LowDSA-5147-1dpkg@1.19.71.19.8
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u5
LowPYSEC-2026-3784gitpython@3.1.273.1.58
LowGHSA-f9vj-2wh5-fj8jwerkzeug@2.1.23.0.6
LowGHSA-3f7w-8rr8-f37fgitpython@3.1.273.1.57
LowDLA-3626-1krb5@1.17-3+deb10u11.17-3+deb10u6
LowGHSA-fjr4-x663-mwxcgitpython@3.1.273.1.54
LowDSA-5174-1gnupg2@2.2.12-1+deb10u12.2.12-1+deb10u2
LowGHSA-g6pg-52vf-843hmlflow@1.26.1no fix listed
LowGHSA-f2ff-p2ww-7p4psqlparse@0.4.20.6.0
LowGHSA-pwgv-4x5q-6m9fsqlparse@0.4.20.6.0
LowGHSA-43fp-rhv2-5gv8certifi@2022.5.18.12022.12.07
LowGHSA-wf93-45jw-7689pip@21.1.326.1.2
LowGHSA-rrm6-wvj7-cwh2sqlparse@0.4.20.4.4
LowGHSA-xgmm-8j9v-c9wxpyjwt@2.4.02.13.0
LowGHSA-4gmw-gg2m-w46pgitpython@3.1.273.1.58
LowDLA-3114-1mariadb-10.3@1:10.3.29-0+deb10u11:10.3.36-0+deb10u1
LowDLA-3165-1expat@2.2.6-2+deb10u12.2.6-2+deb10u6
LowGHSA-h75v-3vvj-5mfjjinja2@3.1.23.1.4
LowGHSA-v92g-xgxw-vvmmmako@1.2.01.3.11
LowGHSA-7545-fcxq-7j24gitpython@3.1.273.1.48
LowGHSA-2mqj-m65w-jghxgitpython@3.1.273.1.41
LowGHSA-9hjg-9r4m-mvj7requests@2.27.12.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@4.21.14.25.8

Used by

1 chart
ChartVersionTagContainers
mlflowkelvins0.4.01.26.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.