public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13 container image
Amazon ECR PublicScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of public.ecr.aws/outerbounds/metaflow_metadata_service
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13 resolved to f7567ce3419d, scanned 14 Sept 2026: 718 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them metaflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
601 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest f7567ce3419d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-69420 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2026-57433 | perl | no fix listed |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | DEBIAN-CVE-2026-27135 | nghttp2 | 1.52.0-1+deb12u3 |
| Low | DEBIAN-CVE-2023-3618 | tiff | 4.5.0-6+deb12u2 |
| Low | DEBIAN-CVE-2026-13221 | perl | no fix listed |
| Low | GHSA-63vm-454h-vhhq | pyasn1 | 0.6.2 |
| Low | DEBIAN-CVE-2026-42496 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-33636 | libpng1.6 | 1.6.39-2+deb12u4 |
| Low | DEBIAN-CVE-2024-56406 | perl | 5.36.0-7+deb12u2 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2024-37370 | krb5 | 1.20.1-2+deb12u2 |
| Low | DEBIAN-CVE-2025-0840 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-14662 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2023-39616 | aom | no fix listed |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2026-6477 | postgresql-15 | 15.18-0+deb12u1 |
| Low | DEBIAN-CVE-2026-9076 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-14664 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-14670 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-15742 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-62292 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-66032 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-19385 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2024-25269 | libheif | no fix listed |
| Low | PYSEC-2026-2098 | aiohttp | 3.13.4 |
| Low | DEBIAN-CVE-2026-14671 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-14677 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-14680 | postgresql-15 | 15.19-0+deb12u1 |
| Low | GHSA-p998-jp59-783m | aiohttp | 3.13.4 |
| Low | DEBIAN-CVE-2026-12087 | perl | no fix listed |
| Low | DSA-5812-1 | postgresql-15 | 15.9-0+deb12u1 |
| Low | DEBIAN-CVE-2025-8715 | postgresql-15 | 15.14-0+deb12u1 |
| Low | DEBIAN-CVE-2025-1153 | binutils | no fix listed |
| Low | GHSA-jqcq-xjh3-6g23 | github.com/ | no fix listed |
| Low | DEBIAN-CVE-2018-20673 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-48174 | libavif | 0.11.1-1+deb12u1 |
| Low | DEBIAN-CVE-2026-0915 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2025-4802 | glibc | 2.36-9+deb12u11 |
| Low | DEBIAN-CVE-2023-50495 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-4775 | tiff | 4.5.0-6+deb12u4 |
| Low | GHSA-6jhg-hg63-jvvf | aiohttp | 3.13.3 |
| Low | GHSA-g3cq-j2xw-wf74 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-5773 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2023-5981 | gnutls28 | 3.7.9-2+deb12u1 |
| Low | GHSA-g84x-mcqj-x9qq | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2026-63072 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-40355 | krb5 | 1.20.1-2+deb12u5 |