druid 1.3.7 Helm chart

Name: druid Helm chart 1.3.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 16 Oct 2026

Apache Druid distributed analytics database with coordinator, broker, historical, middlemanager, overlord, and router

Version 1.3.7 todayapp version 38.0.0 0Artifact Hub

druid 1.3.7 deploys 4 container images: library/busybox, apache/druid, library/postgres and library/zookeeper. Across them, 662 findings — 8 critical, 4 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

8,67984161488

662 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×9	1.37	0000	0
apache/druid×3	38.0.0	6252130	2,906
library/postgres	18.6-trixie	0020155	1,809
library/zookeeper	3.9.5	2289203	3,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

357 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-6607	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-95619	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u13	no fix listed
Low	GO-2026-6609	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-88647	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-33636	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.34.0-3ubuntu1.9	no fix listed
Low	GHSA-jmqq-x5g9-9p2w	async-http-client@3.0.2	3.0.13
Low	GHSA-rqf5-2wxv-rjf4	async-http-client@3.0.2	3.0.13
Low	DEBIAN-CVE-2026-41254	lcms2@2.14-2	2.14-2+deb12u1
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u13	no fix listed
Low	GO-2022-0515	stdlib@go1.18.1	1.17.12
Low	GO-2025-3420	stdlib@go1.18.1	1.22.11
Low	DEBIAN-CVE-2026-107778	krb5@1.21.3-5+deb13u1	no fix listed
Low	GHSA-cmxv-58fp-fm3g	async-http-client@3.0.2	3.0.9
Low	GO-2025-3956	stdlib@go1.18.1	1.23.12
Low	GO-2026-4946	stdlib@go1.24.6	1.25.9
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GO-2024-2598	stdlib@go1.18.1	1.21.8
Low	UBUNTU-CVE-2026-42015	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u13	no fix listed
Low	GO-2023-2186	stdlib@go1.18.1	1.20.11
Low	GHSA-72hv-8253-57qq	jackson-core@2.19.2	2.21.1
Low	GO-2026-6613	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GO-2025-3849	stdlib@go1.18.1	1.23.12
Low	GO-2026-6605	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	GHSA-qx7j-jv8m-fppr	amqp-client@5.20.0	5.31.0
Low	GO-2026-6610	stdlib@go1.24.6	1.26.9
Low	GHSA-gx83-3vf8-gh7j	jackson-databind@2.19.2	2.21.6
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.130.Final	4.1.137.Final
Low	GHSA-337m-mw94-2v6g	commons-configuration2@2.13.0	2.15.0
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u13	no fix listed
Low	GO-2023-1621	stdlib@go1.18.1	1.19.7
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-63074	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	DEBIAN-CVE-2026-95209	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GHSA-ph9c-7hw9-vhhw	jline-builtins@3.9.0	3.30.15
Low	GO-2025-3373	stdlib@go1.18.1	1.22.11
Low	UBUNTU-CVE-2016-2781	coreutils@8.32-4.1ubuntu1.4	no fix listed
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-9	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.19.2	2.21.4
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	GHSA-p2jm-6hj6-9rjg	async-http-client@3.0.2	3.0.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.7latest	today	38.0.0	84161488	8,679
1.3.6	2 days ago	37.0.0	84192581	10,187

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/druid.svg)](https://charts.stackradar.io/charts/helmforge/druid)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.