druid 1.3.6 Helm chart

Name: druid Helm chart 1.3.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Apache Druid distributed analytics database with coordinator, broker, historical, middlemanager, overlord, and router

Version 1.3.6 2 days agoapp version 37.0.0 0Artifact Hub

druid 1.3.6 deploys 4 container images: library/busybox, apache/druid, library/postgres and library/zookeeper. Across them, 742 findings — 6 critical, 5 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

8,54165132598

742 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×9	1.37	0000	0
apache/druid×3	37.0.0	6271190	3,812
library/postgres	18.6-trixie	0019159	1,626
library/zookeeper	3.9.5	0342249	3,103

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

117 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-66046	expat@2.5.0-1+deb12u2	no fix listed
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	UBUNTU-CVE-2026-28388	openssl@3.0.2-0ubuntu1.26	no fix listed
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.26	no fix listed
Medium	GHSA-hf6x-8p5f-cgmf	httpcore5@5.3.6	5.4.3
Medium	GHSA-v3jc-474w-2wm6	httpcore5-h2@5.3.6	5.4.3
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.130.Final	4.1.135.Final
Medium	GO-2022-1144	stdlib@go1.18.1	1.18.9
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.26	no fix listed
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	GHSA-g5ww-5jh7-63cx	protobuf-java@3.7.1	3.16.3
Medium	GHSA-gvpg-vgmx-xg6w	nimbus-jose-jwt@9.8.1	9.37.2
Medium	UBUNTU-CVE-2026-28389	openssl@3.0.2-0ubuntu1.26	no fix listed
Medium	UBUNTU-CVE-2026-28390	openssl@3.0.2-0ubuntu1.26	no fix listed
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u13	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.6latest	2 days ago	37.0.0	65132598	8,541

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/druid.svg)](https://charts.stackradar.io/charts/helmforge/druid)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.