ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/mlops-for-all/mlflow-tracking-server

ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0 resolved to d30e631684c3, scanned 14 Sept 2026: 183 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them mlflow-server.

Radar Score

3,1585570103

183 findings on digest d30e631684c3 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.8-1.30.1-v1.0.0resolves to	d30e631684c3	1 chart	7 days ago	5570103	3,158

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

103 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest d30e631684c3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	PYSEC-2026-2132	click@8.1.3	8.3.3
Low	GHSA-jm78-9fvv-mhgr	gitpython@3.1.31	3.1.58
Low	GHSA-hc5x-x2vx-497g	gunicorn@20.1.0	22.0.0
Low	GHSA-9rj7-rf2p-w77r	gitpython@3.1.31	3.1.58
Low	GHSA-m49c-5c52-6696	mlflow@1.30.1	no fix listed
Low	PYSEC-2023-165	gitpython@3.1.31	3.1.35
Low	GHSA-f42m-mvfv-cgw5	mlflow@1.30.1	no fix listed
Low	PYSEC-2026-3787	gitpython@3.1.31	3.1.59
Low	DLA-3651-1	postgresql-11@11.20-0+deb10u1	11.22-0+deb10u1
Low	GHSA-8c7q-86fq-vvmh	mlflow@1.30.1	3.11.0rc1
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.1.2	3.1.5
Low	GHSA-xqr8-7jwr-rhp7	certifi@2023.5.7	2023.7.22
Low	GHSA-wfm5-v35h-vwf4	gitpython@3.1.31	3.1.33
Low	PYSEC-2026-3951	gitpython@3.1.31	3.1.55
Low	GHSA-gmj6-6f8f-6699	jinja2@3.1.2	3.1.5
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u5
Low	PYSEC-2026-3784	gitpython@3.1.31	3.1.58
Low	GHSA-f9vj-2wh5-fj8j	werkzeug@2.3.6	3.0.6
Low	GHSA-3f7w-8rr8-f37f	gitpython@3.1.31	3.1.57
Low	DLA-3626-1	krb5@1.17-3+deb10u5	1.17-3+deb10u6
Low	GHSA-fjr4-x663-mwxc	gitpython@3.1.31	3.1.54
Low	GHSA-g6pg-52vf-843h	mlflow@1.30.1	no fix listed
Low	GHSA-f2ff-p2ww-7p4p	sqlparse@0.4.4	0.6.0
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.4.4	0.6.0
Low	GHSA-wf93-45jw-7689	pip@23.1.2	26.1.2
Low	GHSA-xgmm-8j9v-c9wx	pyjwt@2.7.0	2.13.0
Low	GHSA-4gmw-gg2m-w46p	gitpython@3.1.31	3.1.58
Low	GHSA-h75v-3vvj-5mfj	jinja2@3.1.2	3.1.4
Low	GHSA-v92g-xgxw-vvmm	mako@1.2.4	1.3.11
Low	GHSA-7545-fcxq-7j24	gitpython@3.1.31	3.1.48
Low	GHSA-2mqj-m65w-jghx	gitpython@3.1.31	3.1.41
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	GHSA-8qvm-5x2c-j2w7	protobuf@4.23.3	4.25.8
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	DLA-3586-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u4
Low	GHSA-h5c8-rqwp-cp95	jinja2@3.1.2	3.1.3
Low	GHSA-29vq-49wr-vm6x	werkzeug@2.3.6	3.1.6
Low	GHSA-hgf8-39gv-g3f2	werkzeug@2.3.6	3.1.4
Low	GHSA-w5xq-c4pf-ghq7	mlflow@1.30.1	3.10.0
Low	GHSA-prg7-hcfm-mfcr	sqlparse@0.4.4	0.6.0
Low	DLA-3783-1	expat@2.2.6-2+deb10u6	2.2.6-2+deb10u7
Low	GHSA-rwj8-pgh3-r573	gitpython@3.1.31	3.1.52
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.40.0	0.46.2
Low	DLA-3764-1	postgresql-11@11.20-0+deb10u1	11.22-0+deb10u2
Low	GHSA-752w-5fwx-jx9f	pyjwt@2.7.0	2.12.0
Low	GHSA-v87r-6q3f-2j67	gitpython@3.1.31	3.1.49
Low	GHSA-pgqp-8h46-6x4j	mlflow@1.30.1	3.5.0
Low	GHSA-mv93-w799-cj2w	gitpython@3.1.31	3.1.50
Low	DLA-3600-1	postgresql-11@11.20-0+deb10u1	11.21-0+deb10u2
Low	PYSEC-2026-3948	gitpython@3.1.31	3.1.57

Used by

1 chart

Chart	Version	Tag	Containers
mlflow-servermlflow-server	0.3.0	3.8-1.30.1-v1.0.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.