drill 1.3.6 Helm chart

Name: drill Helm chart 1.3.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wearefrank

Scored 14 Sept 2026

Helm Charts for deploying Apache Drill Clusters on Kubernetes

Version 1.3.6 11 months agoapp version 1.21.1 0Artifact Hub

drill 1.3.6 deploys 3 container images: bitnamilegacy/zookeeper, library/busybox and apache/drill. Across them, 604 findings — 8 critical, 29 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 8.5.46, with no fix listed.

Radar Score

9,397829146421

604 findings over 3 of 3 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/zookeeper	3.9.0-debian-11-r11	0233266	3,050
library/busybox	latest	0000	0
apache/drill	1.21.1	827113155	6,347

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

530 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.46	8.5.51
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.33	2.0
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.4.0	2.7.9.2
Critical	GHSA-2c59-37c4-qrx5	parquet-avro@1.12.3	1.15.1
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.4.0	2.6.7.1
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-4w82-r329-3q67	jackson-databind@2.4.0	2.6.7.4
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.46	8.5.55
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.4.0	2.6.7.5
High	GHSA-q93h-jc49-78gg	jackson-databind@2.4.0	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.4.0	2.7.9.7
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.46	8.5.94
High	GHSA-vjv5-gp2w-65vm	jetty-webapp@9.4.41.v20210516	9.4.43
High	GHSA-645p-88qh-w398	jackson-databind@2.4.0	2.6.7.3
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.46	8.5.55
High	GHSA-9gph-22xh-8x98	jackson-databind@2.4.0	2.6.7.5
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.4.0	2.6.7.3
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.4.0	2.6.7.3
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.46	8.5.99
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.4.0	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.4.0	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.4.0	2.7.9.5
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.4.0	2.6.7.4
High	GHSA-h592-38cm-4ggp	jackson-databind@2.4.0	2.6.7.3
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.46	8.5.63
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.4.0	2.7.9.6
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.4.0	2.9.10.8
High	DLA-4104-1KEV	freetype@2.10.4+dfsg-1+deb11u1	2.10.4+dfsg-1+deb11u2
High	DLA-4323-1KEV	git@1:2.30.2-1	1:2.30.2-1+deb11u5
High	DSA-5514-1KEV	glibc@2.31-13+deb11u3	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7	247.3-7+deb11u6
Medium	DSA-5586-1	openssh@1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3
Medium	GO-2024-2687	stdlib@go1.19.12	1.21.9
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.4.0	2.6.7.5
Medium	DSA-5673-1	glibc@2.31-13+deb11u3	2.31-13+deb11u9
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.4.0	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.4.0	2.6.7.4
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.3.0	5.4.0
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.4.0	2.7.9.4
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.4.0	2.6.7.3
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.4.0	2.9.10.8
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.4.0	2.6.7.3
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.6latest	11 months ago	1.21.1	829146421	9,397

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wearefrank/drill.svg)](https://charts.stackradar.io/charts/wearefrank/drill)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.