DirectorySecurity AdvisoriesPricing
Sign in
Directory
druid logo

druid

packaged by Chainguard

Last changed
Request a free trial

Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.

Tags
Overview
Comparison
Provenance
Specifications
SBOM
Vulnerabilities
Advisories

Expand
CVE ID
Severity
Package
Version
Last detected
CVE-2022-23305
Critical
log4j
1.2.17
CVE-2022-23307
Critical
log4j
1.2.17
CVE-2024-47561
Critical
avro
1.11.3
CVE-2021-44521
Critical
cassandra-all
1.0.8
CVE-2019-20444
Critical
netty
3.10.5.Final
CVE-2019-20444
Critical
netty
3.10.6.Final
CVE-2019-17571
Critical
log4j
1.2.17
CVE-2024-7254
High
protobuf-java
3.7.1
CVE-2021-37136
High
netty
3.10.6.Final
CVE-2024-47554
High
commons-io
2.4
CVE-2026-54512
High
jackson-databind
2.19.2
CVE-2026-43869
High
libthrift
0.9.3-1
CVE-2026-75516
High
amqp-client
5.33.1
GHSA-r7wm-3cxj-wff9
High
jackson-core
2.13.2
CVE-2026-54512
High
jackson-databind
2.13.2.2
GHSA-r7wm-3cxj-wff9
High
jackson-core
2.19.2
CVE-2021-37137
High
netty
3.10.5.Final
CVE-2023-26464
High
log4j
1.2.17
CVE-2024-25638
High
dnsjava
2.1.7
CVE-2021-37137
High
netty
3.10.6.Final
CVE-2022-41404
High
ini4j
0.5.4
CVE-2025-52999
High
jackson-core
2.13.2
CVE-2022-3510
High
protobuf-java
3.7.1
CVE-2019-0205
High
libthrift
0.9.3-1
CVE-2021-22569
High
protobuf-java
3.7.1
CVE-2022-3510
High
protobuf-java
3.7.1
CVE-2026-43869
High
libthrift
0.13.0
CVE-2021-4104
High
log4j
1.2.17
CVE-2021-37136
High
netty
3.10.5.Final
CVE-2021-22569
High
protobuf-java
3.7.1
CVE-2026-85721
High
async-http-client
3.0.11
CVE-2019-16869
High
netty
3.10.5.Final
CVE-2026-2332
High
jetty-http
9.4.51.v20230217
CVE-2026-43871
High
libthrift
0.9.3-1
CVE-2020-13949
High
libthrift
0.9.3-1
CVE-2022-41404
High
ini4j
0.5.4
CVE-2025-23015
High
cassandra-all
1.0.8
CVE-2022-23302
High
log4j
1.2.17
CVE-2019-16869
High
netty
3.10.6.Final
CVE-2026-54513
High
jackson-databind
2.19.2
CVE-2026-43871
High
libthrift
0.13.0
CVE-2020-13949
High
libthrift
0.13.0
CVE-2024-7254
High
protobuf-java
3.7.1
CVE-2024-47554
High
commons-io
2.8.0
CVE-2026-54513
High
jackson-databind
2.13.2.2
CVE-2026-54515
Medium
jackson-databind
2.13.2.2
CVE-2018-11798
Medium
libthrift
0.9.3-1
CVE-2022-3171
Medium
protobuf-java
3.7.1
CVE-2026-54515
Medium
jackson-databind
2.19.2
CVE-2026-46718
Medium
calcite-core
1.37.0
CVE-2019-20445
Medium
netty
3.10.5.Final
CVE-2019-20445
Medium
netty
3.10.6.Final
CVE-2026-59888
Medium
jackson-databind
2.19.2
CVE-2020-13956
Medium
httpclient
4.5.2
CVE-2021-29425
Medium
commons-io
2.4
CVE-2026-85720
Medium
async-http-client
3.0.11
CVE-2026-54514
Medium
jackson-databind
2.19.2
CVE-2026-85717
Medium
async-http-client
3.0.11
CVE-2025-48924
Medium
commons-lang
2.6
CVE-2026-50193
Medium
jackson-databind
2.13.2.2
CVE-2026-54514
Medium
jackson-databind
2.13.2.2
CVE-2018-10237
Medium
guava
14.0.1
CVE-2025-48924
Medium
commons-lang
2.5
CVE-2022-3171
Medium
protobuf-java
3.7.1
CVE-2020-8908
Low
guava
30.1.1-jre
CVE-2026-85716
Low
async-http-client
3.0.11
CVE-2025-11143
Low
jetty-http
9.4.51.v20230217
CVE-2020-8908
Low
guava
14.0.1
CVE-2020-8908
Low
guava
30.1.1-jre
Last updated:

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0SOC 2Golden ImagesCVE RemediationPublic SectorStartups

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogOpen Source LeadershipPartnersNewsroomCareersLegal
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.