Datagrok vulnerability index

Known-CVE scan results for every shipped Datagrok Docker image, published as machine-readable OpenVEX + CSV and human-readable HTML.

Core services composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`datagrok`	1.27.12	1	23	101	36	161	Datagrok server — main application	HTML · VEX · CSV
`grok_connect`	2.8.4	0	0	30	18	48	JDBC data-connector service	HTML · VEX · CSV
`grok_connect_adbc`	0.1.0	0	3	1	24	29	Datagrok package Docker image	HTML · VEX · CSV
`grok_connect_extended`	2.8.4	0	50	71	21	142	JDBC data-connector service (extended: quarantined drivers — Neptune, Impala)	HTML · VEX · CSV
`grok_pipe`	1.22.2	0	0	0	0	0	WebSocket streaming proxy	HTML · VEX · CSV
`grok_registry_proxy`	1.31.0	0	0	0	0	0	Datagrok-authenticated registry proxy	HTML · VEX · CSV
`grok_spawner`	2.24.0	0	1	0	0	1	Container / compute spawner	HTML · VEX · CSV
`jkg_julia`	1.1.1	4	14	1	0	20	Jupyter kernel gateway — Julia scripting	HTML · VEX · CSV
`jkg_nodejs`	1.1.1	0	0	1	0	1	Jupyter kernel gateway — NodeJS scripting	HTML · VEX · CSV
`jkg_octave`	1.1.1	4	14	1	0	20	Jupyter kernel gateway — Octave scripting	HTML · VEX · CSV
`jkg_python`	1.1.1	6	28	11	1	47	Jupyter kernel gateway — Python scripting	HTML · VEX · CSV
`jkg_r`	1.1.1	4	14	1	0	20	Jupyter kernel gateway — R scripting	HTML · VEX · CSV

Package Docker images composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`admetica`	1.3.2.11923717	4	7	130	74	215	Datagrok package Docker image	HTML · VEX · CSV
`api-tests-apitests-docker-test1`	1.10.3	0	0	5	1	6	Datagrok package Docker image	HTML · VEX · CSV
`bio`	2.28.5	0	15	69	4	88	Datagrok package Docker image	HTML · VEX · CSV
`chem-chem`	1.17.15	3	14	16	95	131	Datagrok package Docker image	HTML · VEX · CSV
`chem-chemprop`	1.17.15	4	6	158	75	243	Datagrok package Docker image	HTML · VEX · CSV
`clinical-case`	1.4.0	2	7	11	96	119	Datagrok package Docker image	HTML · VEX · CSV
`cvm-tests-cvmtests-docker-test1`	1.5.1	0	0	3	2	5	Datagrok package Docker image	HTML · VEX · CSV
`cvm-tests-cvmtests-docker-test2`	1.5.1	0	0	4	1	5	Datagrok package Docker image	HTML · VEX · CSV
`dbtests`	1.4.1	2	4	4	86	99	Datagrok package Docker image	HTML · VEX · CSV
`docking-autodock`	1.3.3	0	12	109	49	170	Datagrok package Docker image	HTML · VEX · CSV
`grokky-claude-runtime`	1.0.4	2	9	16	196	234	Datagrok package Docker image	HTML · VEX · CSV
`grokky-mcp-server`	1.0.4	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`julia`	1.9.4	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`mlflow`	2.9.2	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`mlflow-mlflow`	1.1.1	2	5	10	203	230	Datagrok package Docker image	HTML · VEX · CSV
`nlp`	1.2.5	2	5	14	155	186	Datagrok package Docker image	HTML · VEX · CSV
`notebooks-jupyter-notebook`	1.6.3	0	5	258	62	325	Datagrok package Docker image	HTML · VEX · CSV
`oracle-xe`	11.2.0	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`proxy_storage`	2.18.1	0	0	72	19	91	Datagrok package Docker image	HTML · VEX · CSV
`retrosynthesis-aizynthfinder`	1.1.0	5	17	22	92	146	Datagrok package Docker image	HTML · VEX · CSV
`samples`	1.5.0	2	4	4	127	140	Datagrok package Docker image	HTML · VEX · CSV
`smtp`	1.0.0	0	0	0	0	0	Datagrok package Docker image	HTML · VEX · CSV
`surechembl`	1.1.3	0	0	34	13	47	Datagrok package Docker image	HTML · VEX · CSV

Tools & base images composite VEX →

Service	Version	Crit	High	Med	Low	Total	Description	Reports
`dart`	1.24.3	0	0	32	13	45	Language runtime / base image	HTML · VEX · CSV
`grok_tester`	6.7.5	5	38	29	150	222	CI package-testing image (datagrok-tools)	HTML · VEX · CSV
`jkg_base`	1.1.1	4	14	1	0	20	Jupyter kernel gateway — shared base	HTML · VEX · CSV
`kyotocabinet`	1.2.79	0	0	101	16	117	Kyoto Cabinet base image	HTML · VEX · CSV
`micromamba`	1.5.3	0	0	32	13	45	Language runtime / base image	HTML · VEX · CSV
`node`	22.23.1	0	0	42	15	57	Language runtime / base image	HTML · VEX · CSV
`openjdk`	8	0	0	32	13	45	Language runtime / base image	HTML · VEX · CSV
`postgres_rdkit`	2024.09.1-16.4	0	0	27	12	39	PostgreSQL with the RDKit extension	HTML · VEX · CSV
`python`	3.11	0	0	101	16	117	Language runtime / base image	HTML · VEX · CSV

NPM packages composite VEX →

Published Datagrok npm packages — the production dependency tree of the latest version of each, audited with npm audit (devDependencies never reach a consumer install and are excluded).

Package	Version	High	Med	Total	Reports
`@datagrok/admetica`	1.3.2	0	1	1	HTML · VEX · CSV
`@datagrok/alation`	1.3.0	0	0	0	HTML · VEX · CSV
`datagrok-api`	1.27.12	0	0	0	HTML · VEX · CSV
`@datagrok/api-samples`	1.2.2	0	0	0	HTML · VEX · CSV
`@datagrok/api-tests`	1.10.3	0	0	0	HTML · VEX · CSV
`@datagrok/arrow`	1.6.1	0	0	0	HTML · VEX · CSV
`@datagrok/bio`	2.28.5	0	1	1	HTML · VEX · CSV
`@datagrok/biologics`	1.0.12	0	0	0	HTML · VEX · CSV
`@datagrok/bionemo`	1.3.2	0	0	0	HTML · VEX · CSV
`@datagrok/biostructure-viewer`	1.4.11	0	0	0	HTML · VEX · CSV
`@datagrok/cddvaultlink`	1.1.1	0	0	0	HTML · VEX · CSV
`@datagrok/charts`	1.8.1	0	1	1	HTML · VEX · CSV
`@datagrok/chem`	1.17.15	0	0	0	HTML · VEX · CSV
`@datagrok/chembl`	1.4.12	0	0	0	HTML · VEX · CSV
`@datagrok/chembl-api`	1.2.1	0	0	0	HTML · VEX · CSV
`@datagrok/chemspace`	1.2.3	0	0	0	HTML · VEX · CSV
`@datagrok/clinical-case`	1.4.1	0	0	0	HTML · VEX · CSV
`@datagrok/compute`	1.45.4	0	1	1	HTML · VEX · CSV
`@datagrok/compute2`	1.6.0	0	1	1	HTML · VEX · CSV
`@datagrok/curves`	1.13.3	0	1	1	HTML · VEX · CSV
`@datagrok/cvm-tests`	1.5.1	0	0	0	HTML · VEX · CSV
`@datagrok/dbtests`	1.4.1	0	0	0	HTML · VEX · CSV
`@datagrok/dendrogram`	1.4.16	0	0	0	HTML · VEX · CSV
`@datagrok/dev-tools`	1.7.2	0	0	0	HTML · VEX · CSV
`@datagrok/diff-studio`	1.7.0	0	1	1	HTML · VEX · CSV
`@datagrok/docking`	1.3.3	0	0	0	HTML · VEX · CSV
`@datagrok/drug-bank`	1.2.0	0	0	0	HTML · VEX · CSV
`@datagrok/eda`	1.9.0	0	0	0	HTML · VEX · CSV
`@datagrok/eps-viewer`	1.0.1	0	0	0	HTML · VEX · CSV
`@datagrok/excalidraw`	1.0.1	0	0	0	HTML · VEX · CSV
`@datagrok/file-editors`	1.3.2	0	0	0	HTML · VEX · CSV
`@datagrok/genome-browser`	1.0.1	0	0	0	HTML · VEX · CSV
`@datagrok/gis`	1.3.2	0	0	0	HTML · VEX · CSV
`@datagrok/grokky`	1.0.4	0	0	0	HTML · VEX · CSV
`@datagrok/helm`	3.0.6	0	0	0	HTML · VEX · CSV
`@datagrok/hit-triage`	1.10.6	0	0	0	HTML · VEX · CSV
`@datagrok/jiraconnect`	1.2.4	0	0	0	HTML · VEX · CSV
`@datagrok/ketcher-sketcher`	2.4.9	0	0	0	HTML · VEX · CSV
`@datagrok/lib-tests`	1.9.8	0	1	1	HTML · VEX · CSV
`@datagrok-libraries/arrow`	1.1.2	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/bio`	6.0.7	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/chem-meta`	1.2.12	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/codegen-async-to-sync`	0.1.0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/compute-api`	0.8.0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/compute-utils`	1.47.0	0	1	1	HTML · VEX · CSV
`@datagrok-libraries/db-explorer`	1.7.4	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/dock-spawn-dg`	0.1.4	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/gridext`	1.5.4	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/hwe`	1.0.1	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/math`	1.2.8	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/ml`	6.11.0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/sci-comp`	0.11.0	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/statistics`	1.12.14	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/test`	1.4.1	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/tutorials`	1.7.9	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/utils`	4.7.9	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/webcomponents`	0.3.7	0	0	0	HTML · VEX · CSV
`@datagrok-libraries/webcomponents-vue`	0.4.0	0	0	0	HTML · VEX · CSV
`@datagrok/media`	1.0.0	0	0	0	HTML · VEX · CSV
`@datagrok/metabolicgraph`	1.1.0	0	0	0	HTML · VEX · CSV
`@datagrok/mlflow`	1.1.1	0	0	0	HTML · VEX · CSV
`@datagrok/nlp`	1.2.5	0	0	0	HTML · VEX · CSV
`@datagrok/nmrium`	1.3.1	0	0	0	HTML · VEX · CSV
`@datagrok/notebooks`	1.6.3	0	0	0	HTML · VEX · CSV
`@datagrok/oligo-batch-calculator`	1.2.0	0	0	0	HTML · VEX · CSV
`@datagrok/peptides`	1.27.11	0	0	0	HTML · VEX · CSV
`@datagrok/phylo-tree-viewer`	1.4.1	0	0	0	HTML · VEX · CSV
`@datagrok/power-grid`	1.8.4	0	0	0	HTML · VEX · CSV
`@datagrok/power-pack`	1.8.3	0	0	0	HTML · VEX · CSV
`@datagrok/proteomics`	1.3.0	0	0	0	HTML · VEX · CSV
`@datagrok/pubchem-api`	1.3.1	0	0	0	HTML · VEX · CSV
`@datagrok/pyodide`	1.4.1	0	0	0	HTML · VEX · CSV
`@datagrok/reinvent4`	1.0.1	0	0	0	HTML · VEX · CSV
`@datagrok/retrosynthesis`	1.1.0	0	0	0	HTML · VEX · CSV
`@datagrok/samples`	1.5.0	0	0	0	HTML · VEX · CSV
`@datagrok/scripting`	1.1.1	0	0	0	HTML · VEX · CSV
`@datagrok/sequence-translator`	1.11.5	0	0	0	HTML · VEX · CSV
`@datagrok/sqlite`	1.3.0	0	0	0	HTML · VEX · CSV
`@datagrok/surechembl`	1.1.3	0	0	0	HTML · VEX · CSV
`datagrok-tools`	6.7.5	3	0	3	HTML · VEX · CSV
`@datagrok/tutorials`	1.11.6	0	0	0	HTML · VEX · CSV
`@datagrok/ui-tests`	1.3.0	0	0	0	HTML · VEX · CSV
`@datagrok/usage-analysis`	2.7.1	0	0	0	HTML · VEX · CSV
`@datagrok/webcomponents`	1.4.6	0	0	0	HTML · VEX · CSV

Bleeding edge (unreleased builds)

Snapshot of the mutable bleeding-edge tags — the state of the next release, so dependency fixes are visible before a version is cut. Not included in the released composites above.

Service	Scanned	Build	Crit	High	Med	Low	Total	Description	Reports
`datagrok`	2026-10-05	`3f97ff87` master · 2026-10-02	0	0	0	0	0	Datagrok server — main application	HTML · VEX · CSV
`grok_connect`	2026-10-05	`e07fe0f0` master · 2026-09-28	0	6	37	17	60	JDBC data-connector service	HTML · VEX · CSV
`grok_connect_adbc`	2026-10-05	`4338526f` master · 2026-09-17	0	6	4	31	41	Datagrok package Docker image	HTML · VEX · CSV
`grok_connect_extended`	2026-10-05	`e07fe0f0` master · 2026-09-28	1	56	80	20	157	JDBC data-connector service (extended: quarantined drivers — Neptune, Impala)	HTML · VEX · CSV
`grok_pipe`	2026-10-05	built 2026-10-05	0	0	2	0	2	WebSocket streaming proxy	HTML · VEX · CSV
`grok_registry_proxy`	2026-10-05	`b017d4f3` master · 2026-10-05	0	0	0	0	0	Datagrok-authenticated registry proxy	HTML · VEX · CSV
`grok_spawner`	2026-10-05	`b017d4f3` master · 2026-10-05	0	2	1	0	3	Container / compute spawner	HTML · VEX · CSV
`jkg_base`	2026-08-12	`7acd0328` master · 2026-08-12	0	0	0	0	0	Jupyter kernel gateway — shared base	HTML · VEX · CSV
`jkg_julia`	2026-10-05	`e0f2a2eb` master · 2026-10-04	0	0	0	0	0	Jupyter kernel gateway — Julia scripting	HTML · VEX · CSV
`jkg_nodejs`	2026-10-05	`e0f2a2eb` master · 2026-10-04	0	0	1	0	1	Jupyter kernel gateway — NodeJS scripting	HTML · VEX · CSV
`jkg_octave`	2026-10-05	`e0f2a2eb` master · 2026-10-04	0	2	1	0	3	Jupyter kernel gateway — Octave scripting	HTML · VEX · CSV
`jkg_python`	2026-10-05	`b017d4f3` master · 2026-10-05	0	1	1	0	2	Jupyter kernel gateway — Python scripting	HTML · VEX · CSV
`jkg_r`	2026-10-05	`b017d4f3` master · 2026-10-05	0	0	0	0	0	Jupyter kernel gateway — R scripting	HTML · VEX · CSV

Generated 2026-10-05T01:07:53Z by the Datagrok weekly Vulnerability-Scan job (GROK-18695). Scanner: Google Cloud Container Analysis. Format: OpenVEX 0.2.0. See the security documentation for the remediation policy.