apache/druid:38.0.0 container image

Docker Hub

Scanned 16 Oct 2026

Deployed by 1 of 18,137 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/druid

apache/druid:38.0.0 resolved to 4156a8ca87b8, scanned 16 Oct 2026: 191 findings, 6 critical; deployed by 1 chart, among them druid.

Radar Score

2,9066252130

191 findings on digest 4156a8ca87b8 · scanned 16 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
38.0.0resolves to	4156a8ca87b8	1 chart	today	6252130	2,906

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

191 distinct on this digest

Findings for digest 4156a8ca87b8 as scanned on 16 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-8wv5-x4w7-5gww	libthrift@0.9.3	0.24.0
Medium	GHSA-q6g2-g7f3-rr83	jettison@1.3.1	1.5.4
Medium	GHSA-5mcr-gq6c-3hq2	netty@3.10.6.Final	no fix listed
Medium	DEBIAN-CVE-2025-29070	lcms2@2.14-2	no fix listed
Medium	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.9.0	3.30.14
Medium	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.9.0	3.30.14
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u13	no fix listed
Medium	GHSA-hf6x-8p5f-cgmf	httpcore5@5.3.6	5.4.3
Medium	GHSA-v3jc-474w-2wm6	httpcore5-h2@5.3.6	5.4.3
Medium	GHSA-jh4v-gfqj-7rhx	amqp-client@5.20.0	5.34.0
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.84	1.85
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.9.3	0.23.0
Low	DEBIAN-CVE-2026-77214	expat@2.5.0-1+deb12u2	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.2	2.18.8
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GHSA-7grg-jcf7-rpmx	async-http-client@3.0.2	3.0.12
Low	DEBIAN-CVE-2026-93990	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.2.2	2.14.0
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.19.2	2.21.6
Low	GHSA-6g32-pxv4-2wfj	amqp-client@5.20.0	5.33.0
Low	GHSA-p6pp-m3f8-5c89	jackson-core@2.19.2	2.21.7
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GHSA-r2xf-8xr9-62gw	jline-builtins@3.9.0	3.30.15
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.13.2	2.18.11
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.26.0	2.26.1
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.40	10.0.2
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.19.2	2.21.7
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.19.2	2.21.7
Low	GHSA-c2rv-hwqm-wjpg	calcite-core@1.37.0	1.42.0
Low	GHSA-fmxf-pm6p-7xgm	async-http-client@3.0.2	3.0.10
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk18on@1.84	1.85
Low	GHSA-x8v2-478q-2hvg	async-http-client@3.0.2	3.0.14
Low	DEBIAN-CVE-2026-95619	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-33636	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	GHSA-jmqq-x5g9-9p2w	async-http-client@3.0.2	3.0.13
Low	GHSA-rqf5-2wxv-rjf4	async-http-client@3.0.2	3.0.13
Low	DEBIAN-CVE-2026-41254	lcms2@2.14-2	2.14-2+deb12u1
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-cmxv-58fp-fm3g	async-http-client@3.0.2	3.0.9
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-72hv-8253-57qq	jackson-core@2.19.2	2.21.1
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
druidhelmforgeVerified publisher	1.3.7	38.0.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.