gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 container image

Google Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/ml-pipeline/metadata-writer

gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 resolved to ec3ae9f6df47, scanned 14 Sept 2026: 212 findings, 0 critical, 5 on KEV; deployed by 1 chart, among them kubeflow.

Radar Score

3,0130569138

212 findings on digest ec3ae9f6df47 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.0.0-alpha.5resolves to	ec3ae9f6df47	1 chart	8 days ago	0569138	3,013

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

138 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ec3ae9f6df47 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-3pgj-pg6c-r5p7	oauthlib@3.1.1	3.2.2
Low	DLA-3954-1	postgresql-13@13.8-0+deb11u1	13.17-0+deb11u1
Low	DLA-4297-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u6
Low	DSA-5330-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u5
Low	DSA-5554-1	postgresql-13@13.8-0+deb11u1	13.13-0+deb11u1
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GHSA-xqr8-7jwr-rhp7	certifi@2021.10.8	2023.7.22
Low	GHSA-496j-2rq6-j6cc	grpcio@1.43.0	1.53.2
Low	DSA-5628-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u3
Low	GHSA-43fp-rhv2-5gv8	certifi@2021.10.8	2022.12.07
Low	DLA-3878-1	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u5
Low	GHSA-wf93-45jw-7689	pip@22.0.4	26.1.2
Low	DSA-5266-1	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u5
Low	DSA-5484-1	librsvg@2.50.3+dfsg-1	2.50.3+dfsg-1+deb11u1
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.4.8	0.6.4
Low	DLA-4251-1	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u8
Low	DLA-3879-1	bluez@5.55-3.1	5.55-3.1+deb11u2
Low	GHSA-9hjg-9r4m-mvj7	requests@2.27.1	2.32.4
Low	GHSA-8qvm-5x2c-j2w7	protobuf@3.19.3	4.25.8
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	DSA-5490-1	aom@1.0.0.errata1-3	1.0.0.errata1-3+deb11u1
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.4.8	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.4.8	0.6.4
Low	DSA-5236-1	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u4
Low	DLA-4026-1	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6
Low	DSA-5346-1	libde265@1.0.8-1	1.0.11-0+deb11u1
Low	DLA-4127-1	subversion@1.14.1-3+deb11u1	1.14.1-3+deb11u2
Low	DSA-5726-1	krb5@1.18.3-6+deb11u2	1.18.3-6+deb11u5
Low	DSA-5686-1	dav1d@0.7.1-3	0.7.1-3+deb11u1
Low	DLA-3893-1	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u6
Low	DSA-5622-1	postgresql-13@13.8-0+deb11u1	13.14-0+deb11u1
Low	DSA-5299-1	openexr@2.5.4-2	2.5.4-2+deb11u1
Low	DSA-5333-1	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u3
Low	DSA-5365-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u7
Low	DSA-5587-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u11
Low	DSA-5433-1	libx11@2:1.7.2-1	2:1.7.2-1+deb11u1
Low	DSA-5255-1	libksba@1.5.0-3	1.5.0-3+deb11u1
Low	DSA-5746-1	postgresql-13@13.8-0+deb11u1	13.16-0+deb11u1
Low	DLA-4107-1	openjpeg2@2.4.0-3	2.4.0-3+deb11u1
Low	DLA-4321-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4
Low	DSA-5305-1	libksba@1.5.0-3	1.5.0-3+deb11u2
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	DSA-5276-1	pixman@0.40.0-1	0.40.0-1.1~deb11u1
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.8	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@22.0.4	25.3
Low	DSA-5370-1	apr@1.7.0-6+deb11u1	1.7.0-6+deb11u2
Low	GHSA-h35f-9h28-mq5c	setuptools@57.5.0	83.0.0
Low	DSA-5364-1	apr-util@1.6.1-5	1.6.1-5+deb11u1
Low	DSA-5349-1	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3
Low	DSA-5567-1	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u5

Used by

1 chart

Chart	Version	Tag	Containers
kubeflowkubeflow	1.6.2	2.0.0-alpha.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.