druidpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2019-17571 | Critical | log4j | 1.2.17 | ||
CVE-2021-44521 | Critical | cassandra-all | 1.0.8 | ||
CVE-2019-20444 | Critical | netty | 3.10.6.Final | ||
CVE-2024-47561 | Critical | avro | 1.11.3 | ||
CVE-2026-107282 | Critical | async-http-client | 3.0.12 | ||
CVE-2022-23307 | Critical | log4j | 1.2.17 | ||
CVE-2022-23305 | Critical | log4j | 1.2.17 | ||
CVE-2019-20444 | Critical | netty | 3.10.5.Final | ||
CVE-2020-13949 | High | libthrift | 0.9.3-1 | ||
CVE-2026-43869 | High | libthrift | 0.9.3-1 | ||
CVE-2026-89425 | High | jackson-core | 2.13.2 | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2026-89425 | High | jackson-core | 2.22.2 | ||
CVE-2026-54513 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-89425 | High | jackson-core | 2.18.6 | ||
CVE-2026-107230 | High | async-http-client | 3.0.12 | ||
CVE-2026-68497 | High | jackson-databind | 2.18.6 | ||
CVE-2026-91776 | High | jackson-databind | 2.18.6 | ||
CVE-2021-37136 | High | netty | 3.10.5.Final | ||
CVE-2022-3510 | High | protobuf-java | 3.7.1 | ||
CVE-2026-91777 | High | jackson-databind | 2.18.6 | ||
CVE-2019-16869 | High | netty | 3.10.6.Final | ||
CVE-2026-43871 | High | libthrift | 0.9.3-1 | ||
CVE-2022-23302 | High | log4j | 1.2.17 | ||
CVE-2021-37137 | High | netty | 3.10.6.Final | ||
CVE-2026-54512 | High | jackson-databind | 2.18.6 | ||
CVE-2021-4104 | High | log4j | 1.2.17 | ||
CVE-2026-54512 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-68494 | High | jackson-core | 2.13.2 | ||
CVE-2026-91777 | High | jackson-databind | 2.22.2 | ||
CVE-2020-13949 | High | libthrift | 0.13.0 | ||
CVE-2024-47554 | High | commons-io | 2.8.0 | ||
CVE-2026-43869 | High | libthrift | 0.13.0 | ||
CVE-2026-68494 | High | jackson-core | 2.18.6 | ||
CVE-2026-91777 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-107231 | High | async-http-client | 3.0.12 | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2024-47554 | High | commons-io | 2.4 | ||
CVE-2026-2332 | High | jetty-http | 9.4.51.v20230217 | ||
CVE-2019-16869 | High | netty | 3.10.5.Final | ||
CVE-2026-54513 | High | jackson-databind | 2.18.6 | ||
CVE-2025-23015 | High | cassandra-all | 1.0.8 | ||
CVE-2026-43871 | High | libthrift | 0.13.0 | ||
CVE-2026-89407 | High | jackson-core | 2.22.2 | ||
CVE-2025-52999 | High | jackson-core | 2.13.2 | ||
CVE-2019-0205 | High | libthrift | 0.9.3-1 | ||
CVE-2021-37136 | High | netty | 3.10.6.Final | ||
CVE-2023-26464 | High | log4j | 1.2.17 | ||
CVE-2021-22569 | High | protobuf-java | 3.7.1 | ||
CVE-2026-91776 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-2332 | High | jetty-http | 9.4.58.v20250814 | ||
CVE-2024-25638 | High | dnsjava | 2.1.7 | ||
CVE-2021-37137 | High | netty | 3.10.5.Final | ||
CVE-2024-7254 | High | protobuf-java | 3.7.1 | ||
CVE-2026-89407 | High | jackson-core | 2.18.6 | ||
CVE-2026-91776 | High | jackson-databind | 2.22.2 | ||
CVE-2026-107227 | High | async-http-client | 3.0.12 | ||
CVE-2022-3171 | Medium | protobuf-java | 3.7.1 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.18.6 | ||
CVE-2019-20445 | Medium | netty | 3.10.6.Final | ||
CVE-2026-54515 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.18.6 | ||
CVE-2020-13956 | Medium | httpclient | 4.5.2 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-50193 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-107280 | Medium | async-http-client | 3.0.12 | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-107226 | Medium | async-http-client | 3.0.12 | ||
CVE-2019-20445 | Medium | netty | 3.10.5.Final | ||
CVE-2026-96674 | Medium | alsa-lib | 1.2.16.1-r3 | ||
CVE-2026-46718 | Medium | calcite-core | 1.37.0 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2021-29425 | Medium | commons-io | 2.4 | ||
CVE-2026-96675 | Medium | alsa-lib | 1.2.16.1-r3 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-107228 | Medium | async-http-client | 3.0.12 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-90781 | Medium | alsa-lib | 1.2.16.1-r3 | ||
CVE-2018-11798 | Medium | libthrift | 0.9.3-1 | ||
CVE-2018-10237 | Medium | guava | 14.0.1 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-106121 | Medium | amqp-client | 5.36.0 | ||
CVE-2025-48924 | Medium | commons-lang | 2.5 | ||
CVE-2020-8908 | Low | guava | 14.0.1 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.51.v20230217 | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.