Datagrok vulnerability index

Known-CVE scan results for every shipped Datagrok Docker image, published as machine-readable OpenVEX + CSV and human-readable HTML.

Core services composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`datagrok`	1.27.7	0	12	80	27	119	Datagrok server — main application	HTML · VEX · CSV
`grok_connect`	2.7.0	0	43	72	21	136	JDBC data-connector service	HTML · VEX · CSV
`grok_pipe`	1.22.1	0	2	7	1	10	WebSocket streaming proxy	HTML · VEX · CSV
`grok_registry_proxy`	1.30.1	0	3	3	1	7	Datagrok-authenticated registry proxy	HTML · VEX · CSV
`grok_spawner`	2.22.2	0	3	8	5	16	Container / compute spawner	HTML · VEX · CSV
`jupyter_kernel_gateway`	1.34.1	32	166	199	87	484	Jupyter kernel gateway (scripting)	HTML · VEX · CSV

Package Docker images composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`admetica`	1.3.1	0	0	36	18	54	Datagrok package Docker image	HTML · VEX · CSV
`api-tests-apitests-docker-test1`	1.10.2	0	0	4	2	6	Datagrok package Docker image	HTML · VEX · CSV
`bio`	2.28.2	0	15	67	15	97	Datagrok package Docker image	HTML · VEX · CSV
`chem-chem`	1.17.13	2	4	7	69	85	Datagrok package Docker image	HTML · VEX · CSV
`chem-chemprop`	1.17.13	0	0	36	18	54	Datagrok package Docker image	HTML · VEX · CSV
`clinical-case`	1.4.0	2	7	11	96	119	Datagrok package Docker image	HTML · VEX · CSV
`cvm-tests-cvmtests-docker-test1`	1.5.1	0	0	3	2	5	Datagrok package Docker image	HTML · VEX · CSV
`cvm-tests-cvmtests-docker-test2`	1.5.1	0	0	4	1	5	Datagrok package Docker image	HTML · VEX · CSV
`dbtests`	1.4.1	2	4	4	86	99	Datagrok package Docker image	HTML · VEX · CSV
`docking-autodock`	1.3.2	0	12	109	49	170	Datagrok package Docker image	HTML · VEX · CSV
`grokky-claude-runtime`	1.0.4	2	9	16	196	234	Datagrok package Docker image	HTML · VEX · CSV
`grokky-mcp-server`	1.0.4	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`julia`	1.9.4	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`mlflow`	2.9.2	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`mlflow-mlflow`	1.1.1	2	5	10	203	230	Datagrok package Docker image	HTML · VEX · CSV
`nlp`	1.2.4	2	5	13	156	186	Datagrok package Docker image	HTML · VEX · CSV
`notebooks-jupyter-notebook`	1.6.2	0	5	255	62	322	Datagrok package Docker image	HTML · VEX · CSV
`oracle-xe`	11.2.0	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`proxy_storage`	2.18.1	0	0	72	19	91	Datagrok package Docker image	HTML · VEX · CSV
`retrosynthesis-aizynthfinder`	1.1.0	5	17	22	92	146	Datagrok package Docker image	HTML · VEX · CSV
`samples`	1.5.0	2	4	4	127	140	Datagrok package Docker image	HTML · VEX · CSV
`smtp`	1.0.0	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`surechembl`	1.1.3	0	0	34	13	47	Datagrok package Docker image	HTML · VEX · CSV

Tools & base images composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`dart`	1.24.3	0	0	32	13	45	Language runtime / base image	HTML · VEX · CSV
`grok_tester`	6.4.5	2	7	20	165	204	CI package-testing image (datagrok-tools)	HTML · VEX · CSV
`kyotocabinet`	1.2.79	0	1	101	16	118	Kyoto Cabinet base image	HTML · VEX · CSV
`micromamba`	1.5.3	0	0	32	13	45	Language runtime / base image	HTML · VEX · CSV
`node`	22.23.1	0	0	42	15	57	Language runtime / base image	HTML · VEX · CSV
`openjdk`	8	0	1	34	14	49	Language runtime / base image	HTML · VEX · CSV
`postgres_rdkit`	2024.09.1-16.4	0	0	27	12	39	PostgreSQL with the RDKit extension	HTML · VEX · CSV
`python`	3.11	0	1	101	16	118	Language runtime / base image	HTML · VEX · CSV

NPM packages composite VEX →

Published Datagrok npm packages — the production dependency tree of the latest version of each, audited with npm audit (devDependencies never reach a consumer install and are excluded).

Package	Version	Crit	High	Med	Low	Total	Reports
`@datagrok/admetica`	1.3.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/alation`	1.3.0	0	0	0	0	0	HTML · VEX · CSV
`datagrok-api`	1.27.7	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/api-samples`	1.2.2	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/api-tests`	1.10.2	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/arrow`	1.6.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/bio`	2.28.2	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/biologics`	1.0.12	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/bionemo`	1.3.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/biostructure-viewer`	1.4.9	2	19	12	2	35	HTML · VEX · CSV
`@datagrok/cddvaultlink`	1.1.0	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/charts`	1.7.0	0	1	1	0	2	HTML · VEX · CSV
`@datagrok/chem`	1.17.13	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/chembl`	1.4.12	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/chembl-api`	1.2.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/chemspace`	1.2.3	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/clinical-case`	1.4.0	0	1	2	0	3	HTML · VEX · CSV
`@datagrok/compute`	1.45.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/compute2`	1.5.8	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/curves`	1.12.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/cvm-tests`	1.5.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/dbtests`	1.4.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/dendrogram`	1.4.15	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/dev-tools`	1.7.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/diff-studio`	1.6.5	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/docking`	1.3.2	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/drug-bank`	1.2.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/eda`	1.6.2	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/eps-viewer`	1.0.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/excalidraw`	1.0.0	0	1	3	0	4	HTML · VEX · CSV
`@datagrok/file-editors`	1.3.1	0	1	0	0	1	HTML · VEX · CSV
`@datagrok/genome-browser`	1.0.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/gis`	1.3.2	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/grokky`	1.0.4	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/helm`	3.0.1	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/hit-triage`	1.10.4	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/jiraconnect`	1.2.3	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/ketcher-sketcher`	2.4.7	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/lib-tests`	1.9.4	0	0	1	0	1	HTML · VEX · CSV
`@datagrok-libraries/arrow`	1.1.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/bio`	6.0.2	0	0	1	0	1	HTML · VEX · CSV
`@datagrok-libraries/chem-meta`	1.2.12	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/codegen-async-to-sync`	0.1.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/compute-api`	0.7.6	0	0	1	0	1	HTML · VEX · CSV
`@datagrok-libraries/compute-utils`	1.46.6	0	0	1	0	1	HTML · VEX · CSV
`@datagrok-libraries/db-explorer`	1.7.4	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/dock-spawn-dg`	0.1.4	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/gridext`	1.5.4	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/hwe`	1.0.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/math`	1.2.7	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/ml`	6.10.15	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/sci-comp`	0.9.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/statistics`	1.12.8	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/test`	1.3.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/tutorials`	1.7.7	0	0	1	0	1	HTML · VEX · CSV
`@datagrok-libraries/utils`	4.7.7	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/webcomponents`	0.3.4	0	0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/webcomponents-vue`	0.3.3	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/media`	1.0.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/metabolicgraph`	1.1.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/mlflow`	1.1.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/nlp`	1.2.4	1	5	6	1	13	HTML · VEX · CSV
`@datagrok/nmrium`	1.3.0	0	3	4	2	9	HTML · VEX · CSV
`@datagrok/notebooks`	1.6.2	1	3	12	0	16	HTML · VEX · CSV
`@datagrok/oligo-batch-calculator`	1.2.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/peptides`	1.27.10	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/phylo-tree-viewer`	1.4.0	0	1	1	0	2	HTML · VEX · CSV
`@datagrok/power-grid`	1.8.3	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/power-pack`	1.8.0	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/proteomics`	1.2.0	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/pubchem-api`	1.3.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/pyodide`	1.4.0	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/reinvent4`	1.0.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/retrosynthesis`	1.1.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/samples`	1.5.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/sequence-translator`	1.11.4	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/sqlite`	1.3.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/surechembl`	1.1.3	0	0	0	0	0	HTML · VEX · CSV
`datagrok-tools`	6.4.5	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/tutorials`	1.11.3	0	0	1	0	1	HTML · VEX · CSV
`@datagrok/ui-tests`	1.3.0	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/usage-analysis`	2.5.1	0	0	0	0	0	HTML · VEX · CSV
`@datagrok/webcomponents`	1.4.3	0	0	0	0	0	HTML · VEX · CSV

Bleeding edge (unreleased builds)

Snapshot of the mutable bleeding-edge tags — the state of the next release, so dependency fixes are visible before a version is cut. Not included in the released composites above.

Service	Scanned	Crit	High	Med	Low	Total	Description	Reports
`datagrok`	2026-07-11	0	0	0	0	0	Datagrok server — main application	HTML · VEX · CSV
`grok_connect`	2026-07-12	0	38	70	21	129	JDBC data-connector service	HTML · VEX · CSV
`grok_pipe`	2026-07-10	0	0	0	0	0	WebSocket streaming proxy	HTML · VEX · CSV
`grok_registry_proxy`	2026-07-12	0	0	0	0	0	Datagrok-authenticated registry proxy	HTML · VEX · CSV
`grok_spawner`	2026-07-12	0	0	0	0	0	Container / compute spawner	HTML · VEX · CSV
`jupyter_kernel_gateway`	2026-07-12	29	140	162	71	402	Jupyter kernel gateway (scripting)	HTML · VEX · CSV

Generated 2026-07-12T14:13:50Z by the Datagrok weekly Vulnerability-Scan job (GROK-18695). Scanner: Google Cloud Container Analysis. Format: OpenVEX 0.2.0. See the security documentation for the remediation policy.