kelvinsp/mlflow:1.26.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of kelvinsp/mlflow

kelvinsp/mlflow:1.26.1 resolved to cd33e6db2a59, scanned 14 Sept 2026: 247 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them mlflow.

Radar Score

4,1565595142

247 findings on digest cd33e6db2a59 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.26.1resolves to	cd33e6db2a59	1 chart	7 days ago	5595142	4,156

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

247 distinct on this digest

Findings for digest cd33e6db2a59 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-r5m9-wm49-959f	mlflow@1.26.1	3.11.0rc0
Low	GHSA-f2m9-wcf4-cwwx	mlflow@1.26.1	3.11.0
Low	GHSA-3wxw-xv34-2frg	gitpython@3.1.27	3.1.59
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.9	2.5.0
Low	GHSA-65pc-fj4g-8rjx	idna@3.3	3.15
Low	GHSA-9wx4-h78v-vm56	requests@2.27.1	2.32.0
Low	PYSEC-2025-17	mlflow@1.26.1	2.19.0
Low	PYSEC-2025-183	pyjwt@2.4.0	no fix listed
Low	GHSA-jfmj-5v4g-7637	zipp@3.8.0	3.19.1
Low	GHSA-p4jx-q62p-x5jr	mlflow@1.26.1	2.10.1
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.9	2.7.0
Low	GHSA-qpgc-w4mg-6v92	mlflow@1.26.1	2.16.0
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.9	1.26.18
Low	GHSA-fh64-r2vc-xvhr	mlflow@1.26.1	3.11.1
Low	GHSA-p538-c434-8v24	gitpython@3.1.27	3.1.56
Low	GHSA-27jp-wm6q-gp25	sqlparse@0.4.2	0.5.4
Low	GHSA-3496-9g83-7v6x	sqlparse@0.4.2	0.6.0
Low	PYSEC-2026-2275	requests@2.27.1	2.33.0
Low	GHSA-46r5-x6jq-v8g6	mlflow@1.26.1	3.11.0rc0
Low	PYSEC-2026-2151	flask@2.1.2	3.1.3
Low	DLA-3474-1	systemd@241-7~deb10u7	241-7~deb10u10
Low	PYSEC-2023-102	scipy@1.8.1	1.10.0
Low	DLA-3771-1	python2.7@2.7.16-2+deb10u1	2.7.16-2+deb10u4
Low	DLA-3772-1	python3.7@3.7.3-2+deb10u3	3.7.3-2+deb10u7
Low	GHSA-wp72-7hj9-5265	mlflow@1.26.1	2.2.1
Low	GHSA-jp4c-xjxw-mgf9	pip@21.1.3	26.1
Low	DLA-3755-1	tar@1.30+dfsg-6	1.30+dfsg-6+deb10u1
Low	GHSA-fhv5-28vv-h8m8	pyjwt@2.4.0	2.13.0
Low	GHSA-cfqr-cjx5-5jcm	sqlparse@0.4.2	0.6.0
Low	GHSA-993g-76c3-p5m4	pyjwt@2.4.0	2.13.0
Low	GHSA-58qw-9mgm-455v	pip@21.1.3	26.1
Low	GHSA-px8h-6qxv-m22q	werkzeug@2.1.2	2.2.3
Low	DLA-3112-1	bzip2@1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2
Low	DLA-3114-2	mariadb-10.3@1:10.3.29-0+deb10u1	1:10.3.36-0+deb10u2
Low	DLA-3134-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u8
Low	DLA-3189-1	postgresql-11@11.12-0+deb10u1	11.18-0+deb10u1
Low	DLA-3316-1	postgresql-11@11.12-0+deb10u1	11.19-0+deb10u1
Low	DLA-3337-1	mariadb-10.3@1:10.3.29-0+deb10u1	1:10.3.38-0+deb10u1
Low	DLA-3366-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u11
Low	DLA-3482-1	debian-archive-keyring@2019.1+deb10u1	2019.1+deb10u2
Low	DLA-3684-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2021a-0+deb10u1	2024a-0+deb10u1
Low	DSA-5085-2	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u4
Low	GHSA-5qmp-p3c4-72qj	mlflow@1.26.1	3.10.1
Low	GHSA-6vgw-5pg2-w6jp	pip@21.1.3	26.0

Used by

1 chart

Chart	Version	Tag	Containers
mlflowkelvins	0.4.0	1.26.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.