ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/mlops-for-all/mlflow-tracking-server

ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0 resolved to d30e631684c3, scanned 14 Sept 2026: 183 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them mlflow-server.

Radar Score

3,1585570103

183 findings on digest d30e631684c3 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.8-1.30.1-v1.0.0resolves to	d30e631684c3	1 chart	7 days ago	5570103	3,158

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

183 distinct on this digest

Findings for digest d30e631684c3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-hq88-wg7q-gp4g	mlflow@1.30.1	2.10.0
Medium	PYSEC-2024-60	idna@3.4	3.7
Medium	GHSA-3v79-q7ph-j75h	mlflow@1.30.1	2.10.0
Medium	PYSEC-2026-2161	gitpython@3.1.31	3.1.47
Medium	GHSA-cv6c-7963-wxcg	mlflow@1.30.1	no fix listed
Medium	GHSA-vhcx-3pq2-4fvc	mlflow@1.30.1	3.9.0rc0
Medium	GHSA-rpm5-65cw-6hj4	gitpython@3.1.31	3.1.47
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.16	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.16	2.6.0
Medium	GHSA-ghv6-9r9j-wh4j	mlflow@1.30.1	no fix listed
Medium	GHSA-q34m-jh98-gwm2	werkzeug@2.3.6	3.0.6
Medium	GHSA-vwhf-3v6x-wff8	mlflow@1.30.1	2.9.0
Medium	GHSA-5mvj-wmgj-7q8c	mlflow@1.30.1	no fix listed
Medium	GHSA-fhff-qmm8-h2fp	mlflow@1.30.1	3.9.0rc0
Medium	PYSEC-2023-221	werkzeug@2.3.6	2.3.8
Medium	GHSA-r9mr-m37c-5fr3	gitpython@3.1.31	3.1.54
Medium	PYSEC-2024-230	certifi@2023.5.7	2024.7.4
Medium	GHSA-76cg-cfhx-373f	mlflow@1.30.1	no fix listed
Medium	GHSA-x38x-g6gr-jqff	mlflow@1.30.1	no fix listed
Medium	GHSA-wc6j-5g83-xfm6	mlflow@1.30.1	2.0.0rc0
Medium	GHSA-43c4-9qgj-x742	mlflow@1.30.1	no fix listed
Medium	GHSA-7p8j-qv6x-f4g4	mlflow@1.30.1	no fix listed
Medium	GHSA-wf7f-8fxf-xfxc	mlflow@1.30.1	no fix listed
Medium	DLA-3530-1	openssl@1.1.1n-0+deb10u5	1.1.1n-0+deb10u6
Medium	GHSA-2h4p-vjrc-8xpq	mako@1.2.4	1.3.12
Medium	GHSA-284h-m62q-gf8w	gitpython@3.1.31	3.1.59
Medium	GHSA-g35p-px32-whv6	mlflow@1.30.1	3.11.0
Medium	GHSA-wvpp-8hx9-p66j	gitpython@3.1.31	3.1.58
Medium	GHSA-7gcm-g887-7qv7	protobuf@4.23.3	5.29.6
Medium	GHSA-j62r-wxqq-f3gf	mlflow@1.30.1	2.12.1
Low	PYSEC-2026-2132	click@8.1.3	8.3.3
Low	GHSA-jm78-9fvv-mhgr	gitpython@3.1.31	3.1.58
Low	GHSA-hc5x-x2vx-497g	gunicorn@20.1.0	22.0.0
Low	GHSA-9rj7-rf2p-w77r	gitpython@3.1.31	3.1.58
Low	GHSA-m49c-5c52-6696	mlflow@1.30.1	no fix listed
Low	PYSEC-2023-165	gitpython@3.1.31	3.1.35
Low	GHSA-f42m-mvfv-cgw5	mlflow@1.30.1	no fix listed
Low	PYSEC-2026-3787	gitpython@3.1.31	3.1.59
Low	DLA-3651-1	postgresql-11@11.20-0+deb10u1	11.22-0+deb10u1
Low	GHSA-8c7q-86fq-vvmh	mlflow@1.30.1	3.11.0rc1
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.1.2	3.1.5
Low	GHSA-xqr8-7jwr-rhp7	certifi@2023.5.7	2023.7.22
Low	GHSA-wfm5-v35h-vwf4	gitpython@3.1.31	3.1.33
Low	PYSEC-2026-3951	gitpython@3.1.31	3.1.55
Low	GHSA-gmj6-6f8f-6699	jinja2@3.1.2	3.1.5
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u5
Low	PYSEC-2026-3784	gitpython@3.1.31	3.1.58
Low	GHSA-f9vj-2wh5-fj8j	werkzeug@2.3.6	3.0.6
Low	GHSA-3f7w-8rr8-f37f	gitpython@3.1.31	3.1.57
Low	DLA-3626-1	krb5@1.17-3+deb10u5	1.17-3+deb10u6

Used by

1 chart

Chart	Version	Tag	Containers
mlflow-servermlflow-server	0.3.0	3.8-1.30.1-v1.0.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.