drill Helm chart

Name: drill Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wearefrank

Scored 15 Sept 2026

Helm Charts for deploying Apache Drill Clusters on Kubernetes

Latest 1.3.6 11 months agoapp version 1.21.1 0Artifact Hub

drill 1.3.6 deploys 3 container images: bitnamilegacy/zookeeper, library/busybox and apache/drill. Across them, 604 findings — 8 critical, 29 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 8.5.46, with no fix listed.

Radar Score

9,399829150417

604 findings over 3 of 3 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/zookeeper	3.9.0-debian-11-r11	0237262	3,052
library/busybox	latest	0000	0
apache/drill	1.21.1	827113155	6,347

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

530 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-java-2023-22036	java@11.0.20-8-3	11.0.20
Low	BIT-java-2024-21138	java@11.0.20-8-3	1.8.0
Low	BIT-java-2024-21138	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-21933	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-21933	Java@11.0.20-8	1.8.0
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.73.Final	4.1.136.Final
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	GO-2023-2041	stdlib@go1.19.12	1.20.8
Low	BIT-java-2026-46968	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-46968	java@11.0.20-8-3	1.8.0
Low	GO-2023-2043	stdlib@go1.19.12	1.20.8
Low	BIT-java-2024-21217	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21217	java@11.0.20-8-3	1.8.0
Low	GO-2023-2186	stdlib@go1.19.12	1.20.11
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u5
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.14.1	2.18.8
Low	GO-2024-3105	stdlib@go1.19.12	1.22.7
Low	BIT-java-2024-21144	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21144	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-62574	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-62574	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21131	java@11.0.20-8-3	1.8.0
Low	BIT-java-2024-21131	Java@11.0.20-8	1.8.0
Low	GO-2026-4981	stdlib@go1.19.12	1.25.10
Low	GO-2025-3563	stdlib@go1.19.12	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.14.1	2.18.9
Low	BIT-java-2024-21208	java@11.0.20-8-3	1.8.0
Low	BIT-java-2024-21208	Java@11.0.20-8	1.8.0
Low	DLA-4455-1	python3.9@3.9.2-1	3.9.2-1+deb11u5
Low	GO-2026-4977	stdlib@go1.19.12	1.25.10
Low	GO-2024-2610	stdlib@go1.19.12	1.21.8
Low	DLA-4259-1	systemd@247.3-7	247.3-7+deb11u7
Low	GO-2026-4986	stdlib@go1.19.12	1.25.10
Low	GO-2026-4918	stdlib@go1.19.12	1.25.10
Low	GO-2026-4337	stdlib@go1.19.12	1.24.13
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.41.v20210516	12.0.12
Low	GHSA-c476-j253-5rgq	hive-exec@3.1.3	4.0.1
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14
Low	GO-2026-4601	stdlib@go1.19.12	1.25.8
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u6
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.44.v20210927	no fix listed
Low	BIT-java-2024-21012	java@11.0.20-8-3	11.0.23
Low	BIT-java-2024-21012	Java@11.0.20-8	11.0.23
Low	BIT-java-2025-30754	java@11.0.20-8-3	1.8.0
Low	BIT-java-2025-30754	Java@11.0.20-8	1.8.0
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.73.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.73.Final	4.1.133.Final
Low	BIT-java-2026-22021	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-22021	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-47021	java@11.0.20-8-3	1.8.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.6latest	11 months ago	1.21.1	829150417	9,399

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wearefrank/drill.svg)](https://charts.stackradar.io/charts/wearefrank/drill)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.