gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/ml-pipeline/metadata-writer
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 resolved to ec3ae9f6df47, scanned 14 Sept 2026: 212 findings, 0 critical, 5 on KEV; deployed by 1 chart, among them kubeflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest ec3ae9f6df47 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-j8r2-6x86-q33q | requests | 2.31.0 |
| Medium | DEBIAN-CVE-2022-27446 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27455 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27382 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | PYSEC-2023-192 | urllib3 | 2.0.6 |
| Medium | DEBIAN-CVE-2022-27444 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-32086 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | DLA-4087-1 | python3.9 | 3.9.2-1+deb11u3 |
| Medium | GHSA-8gq9-2x98-w8hf | protobuf | 3.19.5 |
| Medium | DSA-5584-1 | bluez | 5.55-3.1+deb11u1 |
| Medium | DLA-4057-1 | openssh | 1:8.4p1-5+deb11u4 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | DSA-5286-1 | krb5 | 1.18.3-6+deb11u3 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| kubeflowkubeflow | 1.6.2 | 2.0.0-alpha.5 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.