bitnamilegacy/zookeeper:3.9.0-debian-11-r11 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/zookeeper
bitnamilegacy/zookeeper:3.9.0-debian-11-r11 resolved to 10ed1ea3c8d1, scanned 14 Sept 2026: 301 findings, 0 critical, 2 on KEV; deployed by 2 charts, among them thingsboard-cluster and drill.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 10ed1ea3c8d1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | BIT-java-2025-50106 | Java | 1.8.0 |
| Low | BIT-java-2025-50106 | java | 1.8.0 |
| Low | BIT-java-2025-21587 | java | 1.8.0 |
| Low | BIT-java-2025-21587 | Java | 1.8.0 |
| Low | BIT-java-2025-50059 | java | 11.0.28 |
| Low | BIT-java-2025-50059 | Java | 11.0.28 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-2fvj-hgj9-j2gr | jetty-security | 9.4.63 |
| Low | BIT-java-2026-22016 | Java | 1.8.0 |
| Low | BIT-java-2026-22016 | java | 1.8.0 |
| Low | BIT-java-2025-53066 | java | 1.8.0 |
| Low | BIT-java-2025-53066 | Java | 1.8.0 |
| Low | BIT-java-2026-34282 | Java | 1.8.0 |
| Low | BIT-java-2026-34282 | java | 1.8.0 |
| Low | BIT-zookeeper-2026-24281 | Apache ZooKeeper | 3.8.6 |
| Low | GHSA-7xrh-hqfc-g7qr | zookeeper | 3.9.5 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | BIT-java-2024-20926 | java | 1.8.0 |
| Low | BIT-java-2024-20926 | Java | 1.8.0 |
| Low | GHSA-g8m5-722r-8whq | jetty-server | 9.4.56 |
| Low | BIT-java-2023-22081 | Java | 1.8.0 |
| Low | BIT-java-2023-22081 | java | 1.8.0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-q4rv-gq96-w7c5 | jetty-server | 9.4.57.v20241219 |
| Low | BIT-java-2026-47057 | java | 1.8.0 |
| Low | BIT-java-2026-47057 | Java | 1.8.0 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | BIT-java-2026-21932 | Java | 1.8.0 |
| Low | BIT-java-2026-21932 | java | 1.8.0 |
| Low | BIT-java-2024-20921 | Java | 1.8.0 |
| Low | BIT-java-2024-20921 | java | 1.8.0 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | DLA-3878-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u5 |
| Low | BIT-java-2024-20919 | Java | 1.8.0 |
| Low | BIT-java-2024-20919 | java | 1.8.0 |
| Low | GHSA-hmr7-m48g-48f6 | jetty-http | 9.4.52 |
| Low | BIT-java-2026-41254 | java | 1.8.0 |
| Low | BIT-java-2026-41254 | Java | 1.8.0 |
| Low | BIT-java-2026-47058 | Java | 1.8.0 |
| Low | BIT-java-2026-47058 | java | 1.8.0 |
| Low | DLA-4251-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u8 |
| Low | DSA-5650-1 | util-linux | 2.36.1-8+deb11u2 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | DSA-5726-1 | krb5 | 1.18.3-6+deb11u5 |
| Low | BIT-java-2025-30761 | java | 1.8.0 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 3.9.0-debian-11-r11 | 1 |
| drillwearefrank | 1.3.6 | 3.9.0-debian-11-r11 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.