gcr.io/ml-pipeline/metadata-envoy:2.3.0 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/ml-pipeline/metadata-envoy
gcr.io/ml-pipeline/metadata-envoy:2.3.0 resolved to e8e263a919ff, scanned 14 Sept 2026: 225 findings, 4 critical; deployed by 1 chart, among them kubeflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
159 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest e8e263a919ff as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-40225 | systemd | 245.4-4ubuntu3.24+esm3 |
| Low | UBUNTU-CVE-2025-9714 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm2 |
| Low | UBUNTU-CVE-2026-86139 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.20-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-15588 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-8058 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | UBUNTU-CVE-2013-4235 | shadow | no fix listed |
| Low | UBUNTU-CVE-2025-45582 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.30.0-9ubuntu0.5+esm4 |
| Low | UBUNTU-CVE-2026-86144 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2024-10041 | pam | no fix listed |
| Low | UBUNTU-CVE-2023-4641 | shadow | 1:4.8.1-1ubuntu5.20.04.5 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | 0.23.20-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-0989 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2025-5278 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-22795 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2025-3360 | glib2.0 | 2.64.6-1~ubuntu20.04.9+esm1 |
| Low | UBUNTU-CVE-2026-1484 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-0988 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-29111 | systemd | 245.4-4ubuntu3.24+esm3 |
| Low | UBUNTU-CVE-2025-7039 | glib2.0 | 2.64.6-1~ubuntu20.04.9+esm1 |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-41991 | gzip | no fix listed |
| Low | UBUNTU-CVE-2026-40226 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-86469 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-19542 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-53613 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-53615 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-77117 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-80489 | glibc | no fix listed |
| Low | UBUNTU-CVE-2025-68160 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2023-29383 | shadow | no fix listed |
| Low | UBUNTU-CVE-2025-32415 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10 |
| Low | UBUNTU-CVE-2026-42250 | bzip2 | 1.0.8-2ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2025-9820 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Low | UBUNTU-CVE-2026-27456 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-0992 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2025-69418 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2025-8732 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.2-0ubuntu2.1+esm2 |
| Low | USN-6663-1 | openssl | 1.1.1f-1ubuntu2.22 |
| Low | USN-7034-1 | ca-certificates | 20240203~20.04.1 |
| Low | USN-8091-1 | util-linux | 2.34-0.1ubuntu9.6+esm1 |
| Low | USN-8688-1 | pam | 1.3.1-5ubuntu4.7+esm1 |