bitnamilegacy/kafka:3.5.0-debian-11-r0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/kafka

bitnamilegacy/kafka:3.5.0-debian-11-r0 resolved to 8657bb93a581, scanned 14 Sept 2026: 244 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them thingsboard-cluster.

Radar Score

2,7460533206

244 findings on digest 8657bb93a581 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.5.0-debian-11-r0resolves to	8657bb93a581	1 chart	8 days ago	0533206	2,746

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

206 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8657bb93a581 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	BIT-java-2025-50106	java@17.0.7-7-2	1.8.0
Low	BIT-java-2025-21587	java@17.0.7-7-2	1.8.0
Low	BIT-java-2025-50059	java@17.0.7-7-2	11.0.28
Low	BIT-java-2024-20932	java@17.0.7-7-2	17.0.10
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.51.v20230217	9.4.63
Low	BIT-java-2023-21967	java@17.0.7-7-2	1.8.0
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.10.0	1.1.10.1
Low	BIT-java-2026-22016	java@17.0.7-7-2	1.8.0
Low	BIT-java-2023-21954	java@17.0.7-7-2	1.8.0
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.5.0	3.9.2
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.3.0	3.6.1
Low	BIT-java-2025-53066	java@17.0.7-7-2	1.8.0
Low	BIT-java-2026-34282	java@17.0.7-7-2	1.8.0
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.5	2.14.0
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.22.0	3.30.14
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.22.0	3.30.14
Low	GO-2023-2102	stdlib@go1.20.5	1.20.10
Low	GHSA-6qvw-249j-h44c	jose4j@0.9.3	0.9.4
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.92.Final	4.1.137.Final
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.51.v20230217	9.4.56
Low	BIT-java-2023-22081	java@17.0.7-7-2	1.8.0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.92.Final	4.1.125.Final
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.51.v20230217	9.4.57.v20241219
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.92.Final	4.1.133.Final
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.92.Final	4.1.135.Final
Low	BIT-java-2026-21932	java@17.0.7-7-2	1.8.0
Low	BIT-java-2024-20921	java@17.0.7-7-2	1.8.0
Low	GO-2023-2185	stdlib@go1.20.5	1.20.11
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.92.Final	4.1.136.Final
Low	BIT-java-2024-20919	java@17.0.7-7-2	1.8.0
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.51.v20230217	9.4.52
Low	BIT-java-2026-41254	java@17.0.7-7-2	1.8.0
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.51.v20230217	9.4.54
Low	GO-2026-4341	stdlib@go1.20.5	1.24.12
Low	GO-2024-2887	stdlib@go1.20.5	1.21.11
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	BIT-kafka-2024-56128	kafka@3.5.0-0	3.8.1
Low	BIT-kafka-2024-56128	Apache Kafka@3.5.0	3.8.1
Low	GHSA-p7c9-8xx8-h74f	kafka_2.12@3.5.0	3.7.2
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.92.Final	4.1.137.Final
Low	BIT-java-2025-21502	java@17.0.7-7-2	1.8.0
Low	GHSA-3677-xxcr-wjqv	jose4j@0.9.3	0.9.6
Low	BIT-java-2025-30698	java@17.0.7-7-2	1.8.0
Low	BIT-java-2026-47063	java@17.0.7-7-2	1.8.0
Low	DSA-5587-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u11
Low	BIT-java-2024-21140	java@17.0.7-7-2	1.8.0
Low	BIT-java-2024-21235	java@17.0.7-7-2	1.8.0
Low	BIT-java-2025-53057	java@17.0.7-7-2	1.8.0
Low	GO-2023-1987	stdlib@go1.20.5	1.19.12

Used by

1 chart

Chart	Version	Tag	Containers
thingsboard-clusterthingsboard-cluster-bettaVerified publisher	0.2.26	3.5.0-debian-11-r0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.