apache/kafka:3.9.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/kafka

apache/kafka:3.9.0 resolved to fbc7d7c428e3, scanned 14 Sept 2026: 112 findings, 1 critical; deployed by 1 chart, among them enav.

Radar Score

1,518123376

112 findings on digest fbc7d7c428e3 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.9.0resolves to	fbc7d7c428e3	1 chart	8 days ago	123376	1,518

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

112 distinct on this digest

Findings for digest fbc7d7c428e3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2025-6965	sqlite@3.45.3-r1	3.45.3-r3
High	ALPINE-CVE-2025-15467	openssl@3.3.2-r1	3.3.6-r0
High	GHSA-vgq5-3255-v292	kafka-clients@3.9.0	3.9.1
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	ALPINE-CVE-2026-42010	gnutls@3.8.5-r0	3.8.13-r0
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.111.Final	4.1.118.Final
Medium	GHSA-crhr-qqj8-rpxc	zookeeper@3.8.4	3.8.6
Medium	ALPINE-CVE-2025-32988	gnutls@3.8.5-r0	3.8.12-r0
Medium	GHSA-76qp-h5mr-frr4	kafka_2.13@3.9.0	3.9.1
Medium	ALPINE-CVE-2025-9230	openssl@3.3.2-r1	3.3.5-r0
Medium	ALPINE-CVE-2024-12797	openssl@3.3.2-r1	3.3.3-r0
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	ALPINE-CVE-2025-9231	openssl@3.3.2-r1	3.3.5-r0
Medium	ALPINE-CVE-2026-33845	gnutls@3.8.5-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-42009	gnutls@3.8.5-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-1584	gnutls@3.8.5-r0	3.8.12-r0
Medium	ALPINE-CVE-2025-59375	expat@2.6.3-r0	2.7.2-r0
Medium	ALPINE-CVE-2024-8176	expat@2.6.3-r0	2.7.0-r0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.111.Final	4.1.135.Final
Medium	ALPINE-CVE-2026-33846	gnutls@3.8.5-r0	3.8.13-r0
Medium	GHSA-355h-qmc2-wpwf	jetty-http@9.4.56.v20240826	9.4.60
Medium	ALPINE-CVE-2026-25646	libpng@1.6.44-r0	1.6.55-r0
Medium	ALPINE-CVE-2025-13151	libtasn1@4.19.0-r2	4.21.0-r0
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.16.2	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.16.2	2.18.8
Medium	ALPINE-CVE-2026-33416	libpng@1.6.44-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.3.2-r1	3.3.7-r0
Medium	ALPINE-CVE-2025-32990	gnutls@3.8.5-r0	3.8.12-r0
Medium	ALPINE-CVE-2025-9232	openssl@3.3.2-r1	3.3.5-r0
Medium	ALPINE-CVE-2026-5260	gnutls@3.8.5-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.3.2-r1	3.3.7-r0
Medium	ALPINE-CVE-2025-69421	openssl@3.3.2-r1	3.3.6-r0
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.111.Final	4.1.135.Final
Medium	ALPINE-CVE-2026-28387	openssl@3.3.2-r1	3.3.7-r0
Medium	ALPINE-CVE-2026-28389	openssl@3.3.2-r1	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.2-r1	3.3.7-r0
Low	ALPINE-CVE-2025-69420	openssl@3.3.2-r1	3.3.6-r0
Low	ALPINE-CVE-2026-33636	libpng@1.6.44-r0	1.6.56-r0
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.56.v20240826	9.4.63
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.9.0	3.9.2
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.5.1	3.6.1
Low	GHSA-7xrh-hqfc-g7qr	zookeeper@3.8.4	3.8.6
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.25.1	3.30.14
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.25.1	3.30.14
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.111.Final	4.1.137.Final
Low	ALPINE-CVE-2026-42013	gnutls@3.8.5-r0	3.8.13-r0
Low	ALPINE-CVE-2026-3833	gnutls@3.8.5-r0	3.8.13-r0
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r1	3.3.7-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r1	3.3.6-r0
Low	ALPINE-CVE-2025-29087	sqlite@3.45.3-r1	3.45.3-r2

Used by

1 chart

Chart	Version	Tag	Containers
enavenav-service-architectureVerified publisher	0.0.7	3.9.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.