druid Helm chart
wiremindVerified publisherScored 14 Sept 2026
Apache Druid is a high performance real-time analytics database.
Latest 1.22.1 1 year agoapp version 29.0.1 4Artifact Hub
druid 1.22.1 deploys 3 container images: bitnami/postgresql, apache/druid and curlimages/curl. Across the 2 measured, 452 findings — 12 critical, 21 high — 1 on CISA KEV. The highest contribution is GHSA-3c7p-vv5r-cmr5 in solr-solrj 7.7.1, fixed in 8.6.3.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 14.4.0-debian-11-r4 | — | unmeasured |
| apache/ | 29.0.1 | 1219135266 | 7,601 |
| curlimages/ | 8.5.0 | 02611 | 329 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
452 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-0395 | glibc | 2.36-9+deb12u10 |
| Low | DEBIAN-CVE-2023-4039 | gcc-12 | 12.2.0-14+deb12u1 |
| Low | DSA-5678-1 | glibc | 2.36-9+deb12u7 |
| Low | GHSA-4q2v-9p7v-3v22 | reactor-netty-http | 1.2.8 |
| Low | DEBIAN-CVE-2024-28085 | util-linux | 2.38.1-5+deb12u1 |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.1.135.Final |
| Low | DSA-5738-1 | openjdk-17 | 17.0.12+7-2~deb12u1 |
| Low | DEBIAN-CVE-2026-60147 | openjdk-17 | 17.0.20+8-1~deb12u1 |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | DSA-5794-1 | openjdk-17 | 17.0.13+11-2~deb12u1 |
| Low | DEBIAN-CVE-2026-22695 | libpng1.6 | 1.6.39-2+deb12u2 |
| Low | ALPINE-CVE-2023-42364 | busybox | 1.36.1-r19 |
| Low | GHSA-hjcp-jmpx-g3qm | httpclient5 | 5.6.3 |
| Low | ALPINE-CVE-2023-42363 | busybox | 1.36.1-r17 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DSA-5972-1 | openjdk-17 | 17.0.16+8-1~deb12u1 |
| Low | GHSA-337m-mw94-2v6g | commons-configuration2 | 2.15.0 |
| Low | DEBIAN-CVE-2024-21011 | openjdk-17 | 17.0.11+9-1~deb12u1 |
| Low | ALPINE-CVE-2023-42366 | busybox | 1.36.1-r16 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | DSA-6189-1 | libpng1.6 | 1.6.39-2+deb12u4 |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | ALPINE-CVE-2023-42365 | busybox | 1.36.1-r19 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | DEBIAN-CVE-2024-21068 | openjdk-17 | 17.0.11+9-1~deb12u1 |
| Low | DEBIAN-CVE-2026-22693 | harfbuzz | no fix listed |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-30691 | openjdk-17 | 17.0.15+6-1~deb12u1 |
| Low | DEBIAN-CVE-2024-21138 | openjdk-17 | 17.0.12+7-2~deb12u1 |
| Low | DEBIAN-CVE-2026-21933 | openjdk-17 | 17.0.18+8-1~deb12u1 |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | DEBIAN-CVE-2026-22801 | libpng1.6 | 1.6.39-2+deb12u2 |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2026-46968 | openjdk-17 | 17.0.20+8-1~deb12u1 |
| Low | DEBIAN-CVE-2025-4373 | glib2.0 | 2.74.6-2+deb12u7 |
| Low | DEBIAN-CVE-2024-21217 | openjdk-17 | 17.0.13+11-2~deb12u1 |
| Low | DSA-6110-1 | openjdk-17 | 17.0.18+8-1~deb12u1 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | DEBIAN-CVE-2024-21131 | openjdk-17 | 17.0.12+7-2~deb12u1 |
| Low | DSA-5913-1 | openjdk-17 | 17.0.15+6-1~deb12u1 |
| Low | DEBIAN-CVE-2026-1489 | glib2.0 | 2.74.6-2+deb12u9 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | DEBIAN-CVE-2024-21208 | openjdk-17 | 17.0.13+11-2~deb12u1 |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-4438 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/wiremind/druid)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.