bitnamilegacy/kafka:3.4.0-debian-11-r6 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/kafka

bitnamilegacy/kafka:3.4.0-debian-11-r6 resolved to ac64829e45b3, scanned 14 Sept 2026: 292 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them clearml-serving.

Radar Score

3,2240534253

292 findings on digest ac64829e45b3 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.4.0-debian-11-r6resolves to	ac64829e45b3	1 chart	8 days ago	0534253	3,224

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

253 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ac64829e45b3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	BIT-java-2025-50106	java@11.0.18-10-2	1.8.0
Low	BIT-java-2025-21587	java@11.0.18-10-2	1.8.0
Low	BIT-java-2025-50059	java@11.0.18-10-2	11.0.28
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.48.v20220622	9.4.63
Low	BIT-java-2023-21967	java@11.0.18-10-2	1.8.0
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.4	1.1.10.1
Low	BIT-java-2026-22016	java@11.0.18-10-2	1.8.0
Low	BIT-java-2023-21954	java@11.0.18-10-2	1.8.0
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.4.0	3.9.2
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.3.0	3.6.1
Low	BIT-java-2023-21835	java@11.0.18-10-2	11.0.18
Low	BIT-java-2025-53066	java@11.0.18-10-2	1.8.0
Low	GHSA-7g24-qg88-p43q	jose4j@0.7.9	0.9.3
Low	BIT-java-2026-34282	java@11.0.18-10-2	1.8.0
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.4.2	2.14.0
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.21.0	3.30.14
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.21.0	3.30.14
Low	GO-2023-2102	stdlib@go1.19.6	1.20.10
Low	GHSA-6qvw-249j-h44c	jose4j@0.7.9	0.9.4
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.78.Final	4.1.137.Final
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	BIT-java-2024-20926	java@11.0.18-10-2	1.8.0
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.48.v20220622	9.4.56
Low	BIT-java-2023-22081	java@11.0.18-10-2	1.8.0
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.78.Final	4.1.125.Final
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.48.v20220622	9.4.57.v20241219
Low	BIT-java-2026-47057	java@11.0.18-10-2	1.8.0
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.78.Final	4.1.133.Final
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.78.Final	4.1.135.Final
Low	BIT-java-2026-21932	java@11.0.18-10-2	1.8.0
Low	BIT-java-2024-20921	java@11.0.18-10-2	1.8.0
Low	GO-2023-2185	stdlib@go1.19.6	1.20.11
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.78.Final	4.1.136.Final
Low	BIT-java-2024-20919	java@11.0.18-10-2	1.8.0
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.48.v20220622	9.4.52
Low	GO-2022-0537	stdlib@go1.18.2	1.17.13
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	BIT-java-2026-41254	java@11.0.18-10-2	1.8.0
Low	BIT-java-2026-47058	java@11.0.18-10-2	1.8.0
Low	GO-2023-1703	stdlib@go1.19.6	1.19.8
Low	GO-2022-0521	stdlib@go1.18.2	1.17.12
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GO-2022-0477	stdlib@go1.18.2	1.17.11
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.48.v20220622	9.4.54
Low	GO-2026-4341	stdlib@go1.19.6	1.24.12
Low	GO-2022-0533	stdlib@go1.18.2	1.17.11

Used by

1 chart

Chart	Version	Tag	Containers
clearml-servingallegroaiVerified publisher	1.6.2	3.4.0-debian-11-r6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.