druidpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-107282 | Critical | async-http-client | 3.0.12 | ||
CVE-2024-47561 | Critical | avro | 1.11.3 | ||
CVE-2022-23305 | Critical | log4j | 1.2.17 | ||
CVE-2021-44521 | Critical | cassandra-all | 1.0.8 | ||
CVE-2019-20444 | Critical | netty | 3.10.6.Final | ||
CVE-2022-23307 | Critical | log4j | 1.2.17 | ||
CVE-2019-20444 | Critical | netty | 3.10.5.Final | ||
CVE-2019-17571 | Critical | log4j | 1.2.17 | ||
CVE-2019-1010022 | Critical | glibc-2.44 | 2.44-r7 | ||
CVE-2026-56740 | High | jline-remote-telnet | 3.9.0 | ||
CVE-2026-91777 | High | jackson-databind | 2.19.2 | ||
CVE-2022-23302 | High | log4j | 1.2.17 | ||
CVE-2026-54513 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-89425 | High | jackson-core | 2.18.6 | ||
CVE-2021-37137 | High | netty | 3.10.5.Final | ||
CVE-2025-23015 | High | cassandra-all | 1.0.8 | ||
CVE-2026-43871 | High | libthrift | 0.9.3-1 | ||
CVE-2026-91776 | High | jackson-databind | 2.19.2 | ||
CVE-2020-13949 | High | libthrift | 0.9.3-1 | ||
CVE-2019-16869 | High | netty | 3.10.5.Final | ||
CVE-2023-26464 | High | log4j | 1.2.17 | ||
CVE-2026-54513 | High | jackson-databind | 2.18.6 | ||
CVE-2026-68497 | High | jackson-databind | 2.18.6 | ||
CVE-2021-22569 | High | protobuf-java | 3.7.1 | ||
CVE-2019-1010023 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2024-47554 | High | commons-io | 2.8.0 | ||
CVE-2026-77422 | High | jline-builtins | 3.9.0 | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2026-89407 | High | jackson-core | 2.21.5 | ||
CVE-2026-43869 | High | libthrift | 0.9.3-1 | ||
CVE-2026-89407 | High | jackson-core | 2.18.8 | ||
CVE-2026-68494 | High | jackson-core | 2.13.2 | ||
CVE-2026-91777 | High | jackson-databind | 2.18.6 | ||
CVE-2022-41404 | High | ini4j | 0.5.4 | ||
CVE-2026-107230 | High | async-http-client | 3.0.12 | ||
CVE-2025-52999 | High | jackson-core | 2.13.2 | ||
CVE-2026-91776 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-2332 | High | jetty-http | 9.4.51.v20230217 | ||
CVE-2026-91777 | High | jackson-databind | 2.21.5 | ||
CVE-2021-37136 | High | netty | 3.10.6.Final | ||
CVE-2026-91777 | High | jackson-databind | 2.18.10 | ||
CVE-2026-54512 | High | jackson-databind | 2.19.2 | ||
CVE-2026-89407 | High | jackson-core | 2.19.2 | ||
CVE-2026-68494 | High | jackson-core | 2.18.6 | ||
CVE-2026-0861 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2024-7254 | High | protobuf-java | 3.7.1 | ||
CVE-2026-54512 | High | jackson-databind | 2.13.2.2 | ||
CVE-2022-3510 | High | protobuf-java | 3.7.1 | ||
CVE-2026-68497 | High | jackson-databind | 2.21.5 | ||
CVE-2026-89407 | High | jackson-core | 2.18.6 | ||
CVE-2026-68494 | High | jackson-core | 2.19.2 | ||
CVE-2026-38753 | High | busybox | 1.38.0-r2 | ||
CVE-2026-38755 | High | busybox | 1.38.0-r2 | ||
CVE-2021-4104 | High | log4j | 1.2.17 | ||
CVE-2019-0205 | High | libthrift | 0.9.3-1 | ||
CVE-2026-43871 | High | libthrift | 0.13.0 | ||
CVE-2026-107227 | High | async-http-client | 3.0.12 | ||
CVE-2026-107231 | High | async-http-client | 3.0.12 | ||
CVE-2020-13949 | High | libthrift | 0.13.0 | ||
CVE-2026-89425 | High | jackson-core | 2.13.2 | ||
CVE-2021-37136 | High | netty | 3.10.5.Final | ||
CVE-2024-47554 | High | commons-io | 2.4 | ||
CVE-2026-54512 | High | jackson-databind | 2.18.6 | ||
CVE-2024-25638 | High | dnsjava | 2.1.7 | ||
CVE-2026-56741 | High | jline-remote-telnet | 3.9.0 | ||
CVE-2026-38754 | High | busybox | 1.38.0-r2 | ||
CVE-2026-43869 | High | libthrift | 0.13.0 | ||
CVE-2026-91776 | High | jackson-databind | 2.21.5 | ||
CVE-2026-89425 | High | jackson-core | 2.21.5 | ||
CVE-2026-91776 | High | jackson-databind | 2.18.10 | ||
CVE-2026-106451 | High | lz4-java | 1.11.1 | ||
CVE-2026-89425 | High | jackson-core | 2.18.8 | ||
CVE-2021-37137 | High | netty | 3.10.6.Final | ||
CVE-2026-54513 | High | jackson-databind | 2.19.2 | ||
CVE-2026-68497 | High | jackson-databind | 2.19.2 | ||
CVE-2019-16869 | High | netty | 3.10.6.Final | ||
CVE-2026-2332 | High | jetty-http | 9.4.58.v20250814 | ||
CVE-2026-89425 | High | jackson-core | 2.19.2 | ||
CVE-2026-91776 | High | jackson-databind | 2.18.6 | ||
CVE-2026-19499 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2026-106451 | High | lz4-java | 1.11.1 | ||
CVE-2026-91777 | High | jackson-databind | 2.13.2.2 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.18.6 | ||
CVE-2019-1010024 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2025-48924 | Medium | commons-lang | 2.5 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-106453 | Medium | lz4-java | 1.11.1 | ||
CVE-2026-96674 | Medium | alsa-lib | 1.2.16.1-r2 | ||
CVE-2026-86805 | Medium | glibc-2.44 | 2.44-r7 | ||
GHSA-mhm7-754m-9p8w | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-77421 | Medium | jline-builtins | 3.9.0 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-18374 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.19.2 | ||
CVE-2018-11798 | Medium | libthrift | 0.9.3-1 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-107280 | Medium | async-http-client | 3.0.12 | ||
CVE-2026-46718 | Medium | calcite-core | 1.37.0 | ||
CVE-2026-90781 | Medium | alsa-lib | 1.2.16.1-r2 | ||
CVE-2026-106123 | Medium | amqp-client | 5.34.0 | ||
CVE-2026-50193 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-106121 | Medium | amqp-client | 5.34.0 | ||
CVE-2019-1010025 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-19542 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-80489 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.19.2 | ||
CVE-2018-10237 | Medium | guava | 14.0.1 | ||
CVE-2022-3171 | Medium | protobuf-java | 3.7.1 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.19.2 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.21.5 | ||
CVE-2026-77117 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-106453 | Medium | lz4-java | 1.11.1 | ||
CVE-2021-29425 | Medium | commons-io | 2.4 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.21.5 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.18.6 | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-106450 | Medium | lz4-java | 1.11.1 | ||
CVE-2020-13956 | Medium | httpclient | 4.5.2 | ||
CVE-2026-107228 | Medium | async-http-client | 3.0.12 | ||
CVE-2010-4756 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-18401 | Medium | jackson-core | 2.19.2 | ||
CVE-2026-106452 | Medium | lz4-java | 1.11.1 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.13.2.2 | ||
CVE-2026-8674 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-106122 | Medium | amqp-client | 5.34.0 | ||
CVE-2026-59889 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-96675 | Medium | alsa-lib | 1.2.16.1-r2 | ||
CVE-2026-107226 | Medium | async-http-client | 3.0.12 | ||
CVE-2026-106450 | Medium | lz4-java | 1.11.1 | ||
CVE-2026-45205 | Medium | commons-configuration2 | 2.10.1 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.18.6 | ||
CVE-2026-89092 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-106452 | Medium | lz4-java | 1.11.1 | ||
CVE-2026-77420 | Medium | jline-reader | 3.9.0 | ||
CVE-2020-8908 | Low | guava | 14.0.1 | ||
CVE-2026-95818 | Low | glibc-2.44 | 2.44-r7 | ||
CVE-2026-106449 | Low | lz4-java | 1.11.1 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.51.v20230217 | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre | ||
CVE-2026-106449 | Low | lz4-java | 1.11.1 | ||
CVE-2026-97399 | Low | glibc-2.44 | 2.44-r7 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.