apache/druid:29.0.1 container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/druid

apache/druid:29.0.1 resolved to 0cef139b6bf1, scanned 15 Sept 2026: 433 findings, 12 critical, 1 on KEV; deployed by 1 chart, among them druid.

Radar Score

7,6061219137264

433 findings on digest 0cef139b6bf1 · scanned 15 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
29.0.1resolves to	0cef139b6bf1	1 chart	9 days ago	1219137264	7,606

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

433 distinct on this digest

Findings for digest 0cef139b6bf1 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+b1	no fix listed
Low	DEBIAN-CVE-2026-22021	openjdk-17@17.0.10+7-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-47021	openjdk-17@17.0.10+7-1~deb12u1	17.0.20+8-1~deb12u1
Low	GHSA-xw5c-jc7x-gf75	pac4j-core@4.5.7	5.7.10
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.100.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+b1	no fix listed
Low	DEBIAN-CVE-2025-64505	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-50593	graphite2@1.3.14-1	1.3.14-1+deb12u1
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.100.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-46917	openjdk-17@17.0.10+7-1~deb12u1	17.0.20+8-1~deb12u1
Low	DEBIAN-CVE-2026-47027	openjdk-17@17.0.10+7-1~deb12u1	17.0.20+8-1~deb12u1
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+b1	no fix listed
Low	DEBIAN-CVE-2026-22013	openjdk-17@17.0.10+7-1~deb12u1	17.0.19+10-1~deb12u2
Low	GHSA-p72w-r6fv-6g5h	druid-pac4j@29.0.1	30.0.1
Low	DSA-6038-1	openjdk-17@17.0.10+7-1~deb12u1	17.0.17+10-1~deb12u1
Low	DEBIAN-CVE-2026-70907	openjdk-17@17.0.10+7-1~deb12u1	17.0.20.1+1-1~deb12u1
Low	GHSA-7g45-4rm6-3mm3	guava@30.1.1-jre	32.0.0-android
Low	DEBIAN-CVE-2024-21210	openjdk-17@17.0.10+7-1~deb12u1	17.0.13+11-2~deb12u1
Low	DEBIAN-CVE-2026-56412	expat@2.5.0-1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2024-21094	openjdk-17@17.0.10+7-1~deb12u1	17.0.11+9-1~deb12u1
Low	DEBIAN-CVE-2026-50219	expat@2.5.0-1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56409	expat@2.5.0-1	2.5.0-1+deb12u3
Low	GHSA-r978-9m6m-6gm6	zookeeper@3.8.3	3.8.4
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1	no fix listed
Low	GHSA-5mg8-w23w-74h3	guava@30.1.1-jre	32.0.0-android
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.100.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-56132	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2026-15588	glib2.0@2.74.6-2	no fix listed
Low	DEBIAN-CVE-2025-8058	glibc@2.36-9+deb12u4	2.36-9+deb12u13
Low	DEBIAN-CVE-2025-64506	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-32778	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1	no fix listed
Low	DSA-6076-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.12.7	2.13.0
Low	DEBIAN-CVE-2026-13595	util-linux@2.38.1-5+b1	no fix listed
Low	DEBIAN-CVE-2026-21925	openjdk-17@17.0.10+7-1~deb12u1	17.0.18+8-1~deb12u1
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.40.v20210413	9.4.47
Low	GHSA-5m9f-rphj-c435	amqp-client@5.20.0	5.33.0
Low	DEBIAN-CVE-2025-28162	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2025-28164	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2025-3360	glib2.0@2.74.6-2	2.74.6-2+deb12u6
Low	DEBIAN-CVE-2026-1484	glib2.0@2.74.6-2	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1	2.5.0-1+deb12u3
Low	GHSA-m452-q8c9-rg2f	async-http-client@2.5.3	2.16.0
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-0988	glib2.0@2.74.6-2	2.74.6-2+deb12u9

Used by

1 chart

Chart	Version	Tag	Containers
druidwiremindVerified publisher	1.22.1	29.0.1	5

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.