gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/ml-pipeline/metadata-envoy
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5 resolved to e8bc6cf08613, scanned 14 Sept 2026: 344 findings, 3 critical; deployed by 1 chart, among them kubeflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest e8bc6cf08613 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | UBUNTU-CVE-2019-9923 | tar | 1.28-2.1ubuntu0.2 |
| Medium | UBUNTU-CVE-2019-18276 | bash | 4.3-14ubuntu1.4+esm1 |
| Medium | UBUNTU-CVE-2024-4741 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2022-28321 | pam | 1.1.8-3.2ubuntu2.3+esm2 |
| Medium | UBUNTU-CVE-2024-52533 | glib2.0 | 2.48.2-0ubuntu4.8+esm4 |
| Medium | UBUNTU-CVE-2017-16879 | ncurses | 6.0+20160213-1ubuntu1+esm2 |
| Medium | UBUNTU-CVE-2019-13050 | gnupg | no fix listed |
| Medium | UBUNTU-CVE-2025-49796 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm9 |
| Medium | UBUNTU-CVE-2022-1473 | openssl | 1.0.2g-1ubuntu4.20+esm3 |
| Medium | UBUNTU-CVE-2017-8834 | libcroco | 0.6.11-1ubuntu0.1~esm1 |
| Medium | UBUNTU-CVE-2020-24977 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 |
| Medium | UBUNTU-CVE-2022-29824 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm2 |
| Medium | UBUNTU-CVE-2017-11113 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2021-33560 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 |
| Medium | UBUNTU-CVE-2023-3446 | openssl | 1.0.2g-1ubuntu4.20+esm10 |
| Medium | UBUNTU-CVE-2024-34459 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm7 |
| Medium | UBUNTU-CVE-2021-3516 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2017-11112 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2023-31486 | perl | no fix listed |
| Medium | UBUNTU-CVE-2012-0039 | glib2.0 | no fix listed |
| Medium | UBUNTU-CVE-2020-12825 | libcroco | 0.6.11-1ubuntu0.1~esm1 |
| Medium | UBUNTU-CVE-2016-10228 | glibc | 2.23-0ubuntu11.3+esm3 |
| Medium | UBUNTU-CVE-2023-31484 | perl | 5.22.1-9ubuntu0.9+esm2 |
| Medium | UBUNTU-CVE-2017-13729 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2017-13730 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2017-13731 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2017-13732 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2022-34903 | gnupg | 1.4.20-1ubuntu3.3+esm2 |
| Medium | UBUNTU-CVE-2017-13733 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2011-10043 | perl | no fix listed |
| Medium | UBUNTU-CVE-2019-25013 | glibc | 2.23-0ubuntu11.3+esm3 |
| Medium | UBUNTU-CVE-2021-3537 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 |
| Medium | UBUNTU-CVE-2024-33599 | glibc | 2.23-0ubuntu11.3+esm7 |
| Medium | UBUNTU-CVE-2026-4176 | perl | no fix listed |
| Medium | UBUNTU-CVE-2023-5678 | openssl | 1.0.2g-1ubuntu4.20+esm11 |
| Medium | UBUNTU-CVE-2022-1304 | e2fsprogs | 1.42.13-1ubuntu1.2+esm1 |
| Medium | UBUNTU-CVE-2025-9230 | openssl | 1.0.2g-1ubuntu4.20+esm13 |
| Medium | UBUNTU-CVE-2017-20230 | perl | no fix listed |
| Medium | UBUNTU-CVE-2020-14155 | pcre3 | 2:8.38-3.1ubuntu0.1~esm1 |
| Medium | UBUNTU-CVE-2020-19189 | ncurses | 6.0+20160213-1ubuntu1+esm4 |
| Medium | UBUNTU-CVE-2017-13734 | ncurses | 6.0+20160213-1ubuntu1+esm1 |
| Medium | UBUNTU-CVE-2025-49794 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm9 |
| Medium | UBUNTU-CVE-2024-25062 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm6 |
| Medium | UBUNTU-CVE-2025-6021 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm9 |
| Medium | UBUNTU-CVE-2017-20229 | mawk | no fix listed |
| Medium | UBUNTU-CVE-2024-56171 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm7 |
| Medium | UBUNTU-CVE-2024-0727 | openssl | 1.0.2g-1ubuntu4.20+esm11 |
| Medium | UBUNTU-CVE-2015-8985 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2017-18078 | systemd | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| kubeflowkubeflow | 1.6.2 | 2.0.0-alpha.5 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.