apache/druid:38.0.0 container image

Docker Hub

Scanned 16 Oct 2026

Deployed by 1 of 18,137 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/druid

apache/druid:38.0.0 resolved to 4156a8ca87b8, scanned 16 Oct 2026: 191 findings, 6 critical; deployed by 1 chart, among them druid.

Radar Score

2,9066252130

191 findings on digest 4156a8ca87b8 · scanned 16 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
38.0.0resolves to	4156a8ca87b8	1 chart	today	6252130	2,906

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

191 distinct on this digest

Findings for digest 4156a8ca87b8 as scanned on 16 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-7g45-4rm6-3mm3	guava@14.0.1	32.0.0-android
Low	DEBIAN-CVE-2026-56405	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56408	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	GHSA-5m9f-rphj-c435	amqp-client@5.20.0	5.33.0
Low	DEBIAN-CVE-2026-19542	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-50219	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56412	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-56132	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1+deb12u2	no fix listed
Low	GHSA-5mg8-w23w-74h3	guava@14.0.1	32.0.0-android
Low	DEBIAN-CVE-2026-56409	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	GHSA-mcr4-qmvw-px4g	lz4-java@1.11.2	1.11.4
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-86805	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-h6w7-qmcm-q6xr	amqp-client@5.20.0	5.35.0
Low	DEBIAN-CVE-2026-32778	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-95512	freetype@2.12.1+dfsg-5+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.18.6	2.18.9
Low	DEBIAN-CVE-2025-28162	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-28164	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-13595	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-m452-q8c9-rg2f	async-http-client@3.0.2	3.0.11
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	GHSA-5q95-hrpc-m3w3	jline-reader@3.9.0	3.30.15
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-343h-94h5-c4wr	lz4-java@1.11.2	1.11.4
Low	DEBIAN-CVE-2026-18374	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-46675	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u6
Low	DEBIAN-CVE-2026-97399	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-34757	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u5
Low	GHSA-mfj3-87qq-382v	async-http-client@3.0.2	3.0.12
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-95818	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u13	no fix listed
None	GHSA-5xwg-cfvj-gff5	amqp-client@5.20.0	5.33.0

Used by

1 chart

Chart	Version	Tag	Containers
druidhelmforgeVerified publisher	1.3.7	38.0.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.