druid Helm chart

Name: druid Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Apache Druid distributed analytics database with coordinator, broker, historical, middlemanager, overlord, and router

Latest 1.3.6 2 days agoapp version 37.0.0 0Artifact Hub

druid 1.3.6 deploys 4 container images: library/busybox, apache/druid, library/postgres and library/zookeeper. Across them, 742 findings — 6 critical, 5 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

8,54165132598

742 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×9	1.37	0000	0
apache/druid×3	37.0.0	6271190	3,812
library/postgres	18.6-trixie	0019159	1,626
library/zookeeper	3.9.5	0342249	3,103

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

570 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.6	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u13	no fix listed
Low	USN-8688-1	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-58qw-p7qm-5rvh	jetty-xml@9.4.43.v20210629	9.4.52.v20230823
Low	DEBIAN-CVE-2011-4116	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	GHSA-p47f-322f-whfh	logback-core@1.3.15	1.5.33
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u8	2.74.6-2+deb12u9
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.8-0ubuntu2	1:3.8-0ubuntu2.1
Low	DEBIAN-CVE-2026-22007	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-34268	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	UBUNTU-CVE-2026-6368	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15
Low	GHSA-qqpg-mvqg-649v	logback-core@1.3.15	1.5.25
None	GHSA-5xwg-cfvj-gff5	amqp-client@5.20.0	5.33.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.6latest	2 days ago	37.0.0	65132598	8,541

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/druid.svg)](https://charts.stackradar.io/charts/helmforge/druid)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.