gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/ml-pipeline/metadata-writer
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5 resolved to ec3ae9f6df47, scanned 14 Sept 2026: 212 findings, 0 critical, 5 on KEV; deployed by 1 chart, among them kubeflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
212 distinct on this digest
Findings for digest ec3ae9f6df47 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DEBIAN-CVE-2022-32088 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-32083 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-32087 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27451 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27457 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | GHSA-j8r2-6x86-q33q | requests | 2.31.0 |
| Medium | DEBIAN-CVE-2022-27446 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27455 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-27382 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | PYSEC-2023-192 | urllib3 | 2.0.6 |
| Medium | DEBIAN-CVE-2022-27444 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | DEBIAN-CVE-2022-32086 | mariadb-10.5 | 1:10.5.18-0+deb11u1 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | DLA-4087-1 | python3.9 | 3.9.2-1+deb11u3 |
| Medium | GHSA-8gq9-2x98-w8hf | protobuf | 3.19.5 |
| Medium | DSA-5584-1 | bluez | 5.55-3.1+deb11u1 |
| Medium | DLA-4057-1 | openssh | 1:8.4p1-5+deb11u4 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | DSA-5286-1 | krb5 | 1.18.3-6+deb11u3 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | GHSA-3pgj-pg6c-r5p7 | oauthlib | 3.2.2 |
| Low | DLA-3954-1 | postgresql-13 | 13.17-0+deb11u1 |
| Low | DLA-4297-1 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| Low | DSA-5330-1 | curl | 7.74.0-1.3+deb11u5 |
| Low | DSA-5554-1 | postgresql-13 | 13.13-0+deb11u1 |
| Low | DLA-3907-1 | sqlite3 | 3.34.1-3+deb11u1 |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | GHSA-496j-2rq6-j6cc | grpcio | 1.53.2 |
| Low | DSA-5628-1 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u3 |
| Low | GHSA-43fp-rhv2-5gv8 | certifi | 2022.12.07 |
| Low | DLA-3878-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u5 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | DSA-5266-1 | expat | 2.2.10-2+deb11u5 |
| Low | DSA-5484-1 | librsvg | 2.50.3+dfsg-1+deb11u1 |
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | DLA-4251-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u8 |
| Low | DLA-3879-1 | bluez | 5.55-3.1+deb11u2 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | GHSA-8qvm-5x2c-j2w7 | protobuf | 4.25.8 |
| Low | DSA-5650-1 | util-linux | 2.36.1-8+deb11u2 |
| Low | DSA-5490-1 | aom | 1.0.0.errata1-3+deb11u1 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | DSA-5236-1 | expat | 2.2.10-2+deb11u4 |
| Low | DLA-4026-1 | tiff | 4.2.0-1+deb11u6 |
| Low | DSA-5346-1 | libde265 | 1.0.11-0+deb11u1 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| kubeflowkubeflow | 1.6.2 | 2.0.0-alpha.5 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.