druidpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2019-17571 | Critical | log4j | 1.2.17 | ||
CVE-2024-47561 | Critical | avro | 1.11.3 | ||
CVE-2019-20444 | Critical | netty | 3.10.5.Final | ||
CVE-2021-44521 | Critical | cassandra-all | 1.0.8 | ||
CVE-2022-23307 | Critical | log4j | 1.2.17 | ||
CVE-2019-20444 | Critical | netty | 3.10.6.Final | ||
CVE-2022-23305 | Critical | log4j | 1.2.17 | ||
CVE-2020-13949 | High | libthrift | 0.13.0 | ||
CVE-2026-43869 | High | libthrift | 0.9.3-1 | ||
CVE-2021-37136 | High | netty | 3.10.6.Final | ||
CVE-2026-54513 | High | jackson-databind | 2.13.2.2 | ||
GHSA-r7wm-3cxj-wff9 | High | jackson-core | 2.13.2 | ||
CVE-2020-13949 | High | libthrift | 0.9.3-1 | ||
CVE-2026-43869 | High | libthrift | 0.13.0 | ||
CVE-2026-55833 | High | netty-codec-http | 4.1.135.Final | ||
CVE-2024-7254 | High | protobuf-java | 3.7.1 | ||
CVE-2021-22569 | High | protobuf-java | 3.7.1 | ||
CVE-2019-16869 | High | netty | 3.10.5.Final | ||
CVE-2022-3510 | High | protobuf-java | 3.7.1 | ||
CVE-2024-47554 | High | commons-io | 2.4 | ||
CVE-2026-2332 | High | jetty-http | 9.4.51.v20230217 | ||
CVE-2025-52999 | High | jackson-core | 2.13.2 | ||
CVE-2026-55831 | High | netty-codec-http | 4.1.135.Final | ||
CVE-2021-4104 | High | log4j | 1.2.17 | ||
CVE-2021-37137 | High | netty | 3.10.5.Final | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2026-56745 | High | netty-codec-http | 4.1.135.Final | ||
CVE-2026-54291 | High | postgresql | 42.7.11 | ||
CVE-2026-54513 | High | jackson-databind | 2.19.2 | ||
CVE-2024-47554 | High | commons-io | 2.8.0 | ||
CVE-2024-25638 | High | dnsjava | 2.1.7 | ||
CVE-2026-10050 | High | jetty-security | 12.0.33 | ||
CVE-2026-59901 | High | netty-codec | 4.1.135.Final | ||
CVE-2021-37136 | High | netty | 3.10.5.Final | ||
CVE-2021-22569 | High | protobuf-java | 3.7.1 | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2026-54512 | High | jackson-databind | 2.19.2 | ||
CVE-2026-55831 | High | netty-codec-http | 4.1.135.Final | ||
CVE-2026-56745 | High | netty-codec-http | 4.1.135.Final | ||
CVE-2026-10050 | High | jetty-ee8-security | 12.0.33 | ||
CVE-2019-0205 | High | libthrift | 0.9.3-1 | ||
CVE-2024-7254 | High | protobuf-java | 3.7.1 | ||
CVE-2025-23015 | High | cassandra-all | 1.0.8 | ||
CVE-2019-16869 | High | netty | 3.10.6.Final | ||
CVE-2022-3510 | High | protobuf-java | 3.7.1 | ||
CVE-2022-23302 | High | log4j | 1.2.17 | ||
CVE-2026-59901 | High | netty-codec | 4.1.135.Final | ||
CVE-2021-37137 | High | netty | 3.10.6.Final | ||
CVE-2026-55833 | High | netty-codec-http | 4.1.135.Final | ||
GHSA-r7wm-3cxj-wff9 | High | jackson-core | 2.19.2 | ||
CVE-2023-26464 | High | log4j | 1.2.17 | ||
CVE-2026-54512 | High | jackson-databind | 2.13.2.2 | ||
GHSA-r7wm-3cxj-wff9 | High | jackson-core | 2.18.6 | ||
CVE-2026-10051 | Medium | jetty-server | 12.0.33 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.19.2 | ||
GHSA-mhm7-754m-9p8w | Medium | jackson-databind | 2.21.4 | ||
CVE-2026-59921 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2018-11798 | Medium | libthrift | 0.9.3-1 | ||
CVE-2021-29425 | Medium | commons-io | 2.4 | ||
CVE-2025-48924 | Medium | commons-lang | 2.5 | ||
CVE-2019-20445 | Medium | netty | 3.10.5.Final | ||
CVE-2026-59889 | Medium | jackson-databind | 2.21.4 | ||
CVE-2026-59921 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2022-3171 | Medium | protobuf-java | 3.7.1 | ||
CVE-2026-8384 | Medium | jetty-util | 12.0.33 | ||
GHSA-72hv-8253-57qq | Medium | jackson-core | 2.19.2 | ||
CVE-2026-56746 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2026-59888 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-59898 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2026-50193 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-59889 | Medium | jackson-databind | 2.18.8 | ||
CVE-2026-59899 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2020-13956 | Medium | httpclient | 4.5.2 | ||
CVE-2018-10237 | Medium | guava | 14.0.1 | ||
CVE-2026-56746 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2026-54515 | Medium | jackson-databind | 2.18.8 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.13.2.2 | ||
GHSA-72hv-8253-57qq | Medium | jackson-core | 2.13.2 | ||
CVE-2026-59898 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2019-20445 | Medium | netty | 3.10.6.Final | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-59900 | Medium | netty-codec-http2 | 4.1.135.Final | ||
CVE-2026-59900 | Medium | netty-codec-http2 | 4.1.135.Final | ||
CVE-2022-3171 | Medium | protobuf-java | 3.7.1 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.21.4 | ||
CVE-2026-6790 | Medium | jetty-server | 12.0.33 | ||
CVE-2026-59899 | Medium | netty-codec-http | 4.1.135.Final | ||
CVE-2026-54515 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-46718 | Medium | calcite-core | 1.37.0 | ||
GHSA-mhm7-754m-9p8w | Medium | jackson-databind | 2.18.8 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.51.v20230217 | ||
CVE-2020-8908 | Low | guava | 14.0.1 | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.