bitnamilegacy/zookeeper:3.9.0-debian-11-r11 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/zookeeper
bitnamilegacy/zookeeper:3.9.0-debian-11-r11 resolved to 10ed1ea3c8d1, scanned 14 Sept 2026: 301 findings, 0 critical, 2 on KEV; deployed by 2 charts, among them thingsboard-cluster and drill.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
301 distinct on this digest
Findings for digest 10ed1ea3c8d1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | DSA-5514-1KEV | glibc | 2.31-13+deb11u7 |
| High | DSA-5570-1KEV | nghttp2 | 1.43.0-1+deb11u1 |
| Medium | DLA-3859-1 | systemd | 247.3-7+deb11u6 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | DSA-5673-1 | glibc | 2.31-13+deb11u9 |
| Medium | DLA-3898-1 | nghttp2 | 1.43.0-1+deb11u2 |
| Medium | DSA-5523-1 | curl | 7.74.0-1.3+deb11u10 |
| Medium | DLA-3942-1 | openssl | 1.1.1n-0+deb11u6 |
| Medium | DLA-3942-2 | openssl | 1.1.1w-0+deb11u2 |
| Medium | BIT-zookeeper-2023-44981 | Apache ZooKeeper | 3.7.2 |
| Medium | GHSA-7286-pgfv-vxvh | zookeeper | 3.9.1 |
| Medium | GHSA-4g8c-wm8x-jfhw | netty-handler | 4.1.118.Final |
| Medium | GHSA-crhr-qqj8-rpxc | zookeeper | 3.9.5 |
| Medium | BIT-java-2023-25193 | java | 11.0.20 |
| Medium | BIT-java-2023-25193 | Java | 11.0.20 |
| Medium | BIT-zookeeper-2024-51504 | Apache ZooKeeper | 3.9.3 |
| Medium | GHSA-g93m-8x6h-g5gv | zookeeper | 3.9.3 |
| Medium | BIT-java-2025-30749 | Java | 1.8.0 |
| Medium | BIT-java-2025-30749 | java | 1.8.0 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | BIT-zookeeper-2026-24308 | Apache ZooKeeper | 3.8.6 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | BIT-java-2024-21147 | java | 1.8.0 |
| Medium | BIT-java-2024-21147 | Java | 1.8.0 |
| Medium | GHSA-55g7-9cwv-5qfv | snappy-java | 1.1.10.4 |
| Medium | BIT-java-2024-20918 | java | 1.8.0 |
| Medium | BIT-java-2024-20918 | Java | 1.8.0 |
| Medium | BIT-java-2024-20952 | Java | 1.8.0 |
| Medium | BIT-java-2024-20952 | java | 1.8.0 |
| Medium | BIT-java-2026-21945 | java | 1.8.0 |
| Medium | BIT-java-2026-21945 | Java | 1.8.0 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Low | BIT-java-2025-50106 | Java | 1.8.0 |
| Low | BIT-java-2025-50106 | java | 1.8.0 |
| Low | BIT-java-2025-21587 | Java | 1.8.0 |
| Low | BIT-java-2025-21587 | java | 1.8.0 |
| Low | BIT-java-2025-50059 | Java | 11.0.28 |
| Low | BIT-java-2025-50059 | java | 11.0.28 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-2fvj-hgj9-j2gr | jetty-security | 9.4.63 |
| Low | BIT-java-2026-22016 | java | 1.8.0 |
| Low | BIT-java-2026-22016 | Java | 1.8.0 |
| Low | BIT-java-2025-53066 | Java | 1.8.0 |
| Low | BIT-java-2025-53066 | java | 1.8.0 |
| Low | BIT-java-2026-34282 | java | 1.8.0 |
| Low | BIT-java-2026-34282 | Java | 1.8.0 |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 3.9.0-debian-11-r11 | 1 |
| drillwearefrank | 1.3.6 | 3.9.0-debian-11-r11 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.