druid 1.3.7 Helm chart

Name: druid Helm chart 1.3.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 16 Oct 2026

Apache Druid distributed analytics database with coordinator, broker, historical, middlemanager, overlord, and router

Version 1.3.7 todayapp version 38.0.0 0Artifact Hub

druid 1.3.7 deploys 4 container images: library/busybox, apache/druid, library/postgres and library/zookeeper. Across them, 662 findings — 8 critical, 4 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

8,67984161488

662 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×9	1.37	0000	0
apache/druid×3	38.0.0	6252130	2,906
library/postgres	18.6-trixie	0020155	1,809
library/zookeeper	3.9.5	2289203	3,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

511 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-89158	pcre2@10.39-3ubuntu0.1	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GO-2024-2888	stdlib@go1.18.1	1.21.11
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.19.2	2.21.5
Low	GO-2026-4865	stdlib@go1.24.6	1.25.9
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-86138	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4976	stdlib@go1.24.6	1.25.10
Low	GO-2026-5039	stdlib@go1.24.6	1.25.11
Low	DEBIAN-CVE-2011-3374	apt@3.0.3	no fix listed
Low	GHSA-cqgh-8p3p-mx4m	amqp-client@5.20.0	5.36.1
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2026-75806	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30
Low	UBUNTU-CVE-2026-42014	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56407	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	GO-2026-5856	stdlib@go1.24.6	1.25.12
Low	GHSA-gm45-99xc-r7wv	lz4-java@1.11.2	1.11.4
Low	DEBIAN-CVE-2026-56403	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.19.2	2.21.4
Low	GHSA-xr57-gcx8-52hf	async-http-client@3.0.2	3.0.12
Low	GO-2025-3750	stdlib@go1.18.1	1.23.10
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2026-89157	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-89161	pcre2@10.39-3ubuntu0.1	no fix listed
Low	DEBIAN-CVE-2026-8674	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-76957	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	UBUNTU-CVE-2026-16599	wget@1.21.2-2ubuntu1.5	no fix listed
Low	GO-2026-4340	stdlib@go1.24.6	1.24.12
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.58.v20250814	12.0.12
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.40.1-6+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-3832	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-vvgp-rfg2-7rr6	jackson-databind@2.19.2	2.21.5
Low	GHSA-3g76-f9xq-8vp6	vertx-core@4.5.24	4.5.27
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.58.v20250814	no fix listed
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-56404	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56410	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56411	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.7latest	today	38.0.0	84161488	8,679
1.3.6	2 days ago	37.0.0	84192581	10,187

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/druid.svg)](https://charts.stackradar.io/charts/helmforge/druid)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.