public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13 container image
Amazon ECR PublicScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of public.ecr.aws/outerbounds/metaflow_metadata_service
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13 resolved to f7567ce3419d, scanned 14 Sept 2026: 718 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them metaflow.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
601 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest f7567ce3419d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-jj3x-wxrx-4x23 | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2026-40356 | krb5 | 1.20.1-2+deb12u5 |
| Low | DEBIAN-CVE-2026-45445 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | DEBIAN-CVE-2026-6637 | postgresql-15 | 15.18-0+deb12u1 |
| Low | GHSA-27mf-ghqm-j3j8 | aiohttp | 3.10.11 |
| Low | DEBIAN-CVE-2026-18408 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2023-1972 | binutils | no fix listed |
| Low | DEBIAN-CVE-2022-48303 | tar | 1.34+dfsg-1.2+deb12u1 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | GHSA-6mq8-rvhq-8wgg | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2025-1179 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-15741 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-50142 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-42013 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2017-13716 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-0861 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2026-3833 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | DEBIAN-CVE-2026-31789 | openssl | 3.0.19-1~deb12u2 |
| Low | DEBIAN-CVE-2025-69419 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2026-54874 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-6475 | postgresql-15 | 15.18-0+deb12u1 |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2018-9996 | binutils | no fix listed |
| Low | DEBIAN-CVE-2024-50602 | expat | 2.5.0-1+deb12u2 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GHSA-63hw-fmq6-xxg2 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2025-69650 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-6020 | pam | 1.5.2-6+deb12u2 |
| Low | DEBIAN-CVE-2026-47247 | libheif | no fix listed |
| Low | DEBIAN-CVE-2021-32256 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.42-1+deb12u1 |
| Low | GHSA-xcgm-r5h9-7989 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2025-1178 | binutils | no fix listed |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2026-6479 | postgresql-15 | 15.18-0+deb12u1 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2025-15281 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2025-6297 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2026-45186 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-42011 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2024-12243 | gnutls28 | 3.7.9-2+deb12u4 |
| Low | DEBIAN-CVE-2025-32989 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | GHSA-r6ph-v2qm-q3c2 | cryptography | 46.0.5 |
| Low | DEBIAN-CVE-2026-6464 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |