dhi.io/druid
Apache Druid 37.x (fips, dev)
37.0-debian-fips-dev, 37.0-debian13-fips-dev, 37.0-fips-dev, 37.0.0-debian-fips-dev, 37.0.0-debian13-fips-dev, 37.0.0-fips-dev
sha256:00b779a5752eba20a2058a0e9df7143a54c489ad0f3c8028f168582d4a4d69b2
Manifest digest:sha256:0c4bc3f0cc3eef28f4cf35f717abca9b18c4777696ed3976fd67c4c44d1040e7
Size
1.10 GB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
| CVE | Severity | Package | Fix version | EPSS % | Last detected | Status |
|---|---|---|---|---|---|---|
| CVE-2023-25613 | 9.8c | pkg:maven/org.apache.kerby/[email protected] | 2.0.3 | 0.73354% | 3 years ago | Under investigation |
| CVE-2022-46337 | 9.8c | pkg:maven/org.apache.derby/[email protected] | 10.14.3 | 0.72015% | 3 months ago | Under investigation |
| CVE-2026-107282 | 9.4c | pkg:maven/org.asynchttpclient/[email protected] | 3.0.13 | 0.07791% | 2 days ago | - |
| CVE-2024-47561 | 9.3c | pkg:maven/org.apache.avro/[email protected] | 1.11.4 | 0.88022% | 1 year ago | Under investigation |
| CVE-2025-48734 | 8.8h | pkg:maven/commons-beanutils/[email protected] | 1.11.0 | 0.78177% | 11 months ago | Under investigation |
| CVE-2026-68494 | 8.7h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.38212% | 8 days ago | - |
| CVE-2025-52999 | 8.7h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.15.0 | 0.54335% | 1 year ago | Under investigation |
| CVE-2024-47554 | 8.7h | pkg:maven/commons-io/[email protected] | 2.14.0 | 0.69912% | 2 years ago | Under investigation |
| CVE-2026-107231 | 8.7h | pkg:maven/org.asynchttpclient/[email protected] | 3.0.13 | 0.13506% | 2 days ago | - |
| CVE-2023-52428 | 8.7h | pkg:maven/com.nimbusds/[email protected] | 9.37.2 | 0.5578% | 2 years ago | Under investigation |
| CVE-2025-52999 | 8.7h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.15.0 | 0.54335% | 1 year ago | Under investigation |
| CVE-2026-68494 | 8.7h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.38212% | 8 days ago | - |
| CVE-2024-47554 | 8.7h | pkg:maven/commons-io/[email protected] | 2.14.0 | 0.69912% | 2 years ago | Under investigation |
| CVE-2024-7254 | 8.7h | pkg:maven/com.google.protobuf/[email protected] | 3.25.5 | 0.8593% | 1 year ago | Under investigation |
| CVE-2022-42004 | 8.2h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.12.7.1 | 0.88556% | 5 months ago | Under investigation |
| CVE-2025-55163 | 8.2h | pkg:maven/io.grpc/[email protected] | 1.175.0 | 0.6471% | 11 months ago | Under investigation |
| CVE-2022-42004 | 8.2h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.13.4 | 0.88556% | 5 months ago | Under investigation |
| CVE-2026-54512 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.617% | 3 months ago | Under investigation |
| CVE-2026-54513 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.67961% | 29 days ago | Under investigation |
| CVE-2026-54513 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.67961% | 29 days ago | Under investigation |
| CVE-2026-54512 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.617% | 3 months ago | Under investigation |
| CVE-2026-54513 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.67961% | 29 days ago | Under investigation |
| CVE-2026-54512 | 8.1h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.617% | 3 months ago | Under investigation |
| CVE-2026-89425 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.40389% | 9 days ago | - |
| CVE-2022-42003 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.12.7.1 | 0.88556% | 2 years ago | Under investigation |
| CVE-2026-91776 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2026-91777 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2026-89425 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.3 | 0.40389% | 9 days ago | - |
| CVE-2026-89407 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.3 | 0.44076% | 9 days ago | - |
| CVE-2026-91776 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.21.7 | 0.37176% | 10 days ago | - |
| CVE-2026-91777 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.21.7 | 0.37176% | 10 days ago | - |
| CVE-2026-107227 | 7.5h | pkg:maven/org.asynchttpclient/[email protected] | 3.0.14 | 0.35442% | 2 days ago | - |
| CVE-2026-89425 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.21.7 | 0.40389% | 9 days ago | - |
| CVE-2026-89407 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.21.7 | 0.44076% | 9 days ago | - |
| CVE-2026-91776 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2026-91777 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2019-16869 | 7.5h | pkg:maven/io.netty/[email protected] | - | 0.94867% | 3 months ago | - |
| CVE-2026-77422 | 7.5h | pkg:maven/org.jline/[email protected] | 3.30.15 | 0.40671% | 17 days ago | - |
| CVE-2022-42003 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.13.4.2 | 0.88556% | 2 years ago | Under investigation |
| CVE-2026-91777 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2026-91776 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.37176% | 10 days ago | - |
| CVE-2026-91777 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.3 | 0.37176% | 10 days ago | - |
| CVE-2026-91776 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.3 | 0.37176% | 10 days ago | - |
| CVE-2026-68497 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.2 | 0.46085% | 12 days ago | - |
| CVE-2021-31684 | 7.5h | pkg:maven/net.minidev/[email protected] | 1.3.3 | 0.82637% | 2 years ago | Under investigation |
| CVE-2023-1370 | 7.5h | pkg:maven/net.minidev/[email protected] | 2.4.9 | 0.65164% | 2 months ago | Under investigation |
| CVE-2023-39410 | 7.5h | pkg:maven/org.apache.avro/[email protected] | 1.11.3 | 0.82163% | 1 year ago | Under investigation |
| CVE-2026-89425 | 7.5h | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.11 | 0.40389% | 9 days ago | - |
| CVE-2019-16869 | 7.5h | pkg:maven/io.netty/[email protected] | - | 0.94867% | 3 months ago | - |
| CVE-2022-3510 | 7.5h | pkg:maven/com.google.protobuf/[email protected] | 3.16.3 | 0.52263% | 1 year ago | Under investigation |
| CVE-2022-3509 | 7.5h | pkg:maven/com.google.protobuf/[email protected] | 3.16.3 | 0.60254% | 1 year ago | Under investigation |
| CVE-2021-22569 | 7.5h | pkg:maven/com.google.protobuf/[email protected] | 3.16.1 | 0.76089% | 4 years ago | Under investigation |
| CVE-2026-2332 | 7.4h | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.60 | 0.69697% | 2 months ago | Under investigation |
| CVE-2026-107230 | 7.4h | pkg:maven/org.asynchttpclient/[email protected] | 3.0.14 | 0.07728% | 2 days ago | - |
| CVE-2026-2332 | 7.4h | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.60 | 0.69697% | 2 months ago | Under investigation |
| CVE-2026-106451 | 7.3h | pkg:maven/at.yawk.lz4/[email protected] | 1.11.4 | 0.00225% | 3 days ago | - |
| CVE-2026-40458 | 7h | pkg:maven/org.pac4j/[email protected] | 5.7.10 | 0.07317% | 6 months ago | Under investigation |
| CVE-2024-25638 | 7h | pkg:maven/dnsjava/[email protected] | 3.6.0 | 0.31198% | 2 years ago | Under investigation |
| CVE-2024-29133 | 6.9m | pkg:maven/org.apache.commons/[email protected] | 2.10.1 | 0.76884% | 2 years ago | Under investigation |
| CVE-2026-6860 | 6.9m | pkg:maven/io.vertx/[email protected] | 4.5.27 | 0.22047% | 4 months ago | Under investigation |
| CVE-2026-107280 | 6.9m | pkg:maven/org.asynchttpclient/[email protected] | 3.0.13 | 0.16315% | 2 days ago | - |
| CVE-2024-29133 | 6.9m | pkg:maven/org.apache.commons/[email protected] | 2.10.1 | 0.76884% | 2 years ago | Under investigation |
| CVE-2026-107228 | 6.8m | pkg:maven/org.asynchttpclient/[email protected] | 3.0.14 | 0.2094% | 2 days ago | - |
| CVE-2026-107226 | 6.8m | pkg:maven/org.asynchttpclient/[email protected] | 3.0.14 | - | 2 days ago | - |
| CVE-2024-26308 | 6.7m | pkg:maven/org.apache.commons/[email protected] | 1.26.0 | 0.584% | 2 years ago | Under investigation |
| CVE-2024-29131 | 6.5m | pkg:maven/org.apache.commons/[email protected] | 2.10.1 | 0.80701% | 2 years ago | Under investigation |
| CVE-2025-48924 | 6.5m | pkg:maven/org.apache.commons/[email protected] | 3.18.0 | 0.83915% | 11 months ago | Under investigation |
| CVE-2022-40152 | 6.5m | pkg:maven/com.fasterxml.woodstox/[email protected] | 5.4.0 | 0.9721% | 1 year ago | Under investigation |
| CVE-2025-48924 | 6.5m | pkg:maven/commons-lang/[email protected] | - | 0.83915% | 11 months ago | Under investigation |
| CVE-2021-37533 | 6.5m | pkg:maven/commons-net/[email protected] | 3.9.0 | 0.81402% | 4 years ago | Under investigation |
| CVE-2026-77421 | 6.5m | pkg:maven/org.jline/[email protected] | 3.30.15 | 0.35685% | 17 days ago | - |
| CVE-2024-29131 | 6.5m | pkg:maven/org.apache.commons/[email protected] | 2.10.1 | 0.80701% | 2 years ago | Under investigation |
| CVE-2025-48924 | 6.5m | pkg:maven/commons-lang/[email protected] | - | 0.83915% | 11 months ago | Under investigation |
| CVE-2026-46718 | 6.5m | pkg:maven/org.apache.calcite/[email protected] | 1.42.0 | 0.51272% | 3 months ago | Under investigation |
| CVE-2026-50193 | 6.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.14.0 | 0.4796% | 3 months ago | Under investigation |
| CVE-2024-6763 | 6.3m | pkg:maven/org.eclipse.jetty/[email protected] | 12.0.12 | 0.60566% | 2 years ago | Under investigation |
| CVE-2026-50193 | 6.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.14.0 | 0.4796% | 3 months ago | Under investigation |
| CVE-2024-6763 | 6.3m | pkg:maven/org.eclipse.jetty/[email protected] | 12.0.12 | 0.60566% | 2 years ago | Under investigation |
| CVE-2026-50193 | 6.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.14.0 | 0.4796% | 3 months ago | Under investigation |
| CVE-2025-22227 | 6.1m | pkg:maven/io.projectreactor.netty/[email protected] | 1.2.8 | 0.29649% | 1 year ago | Under investigation |
| CVE-2026-106122 | 6m | pkg:maven/com.rabbitmq/[email protected] | 5.36.0 | 0.33118% | 3 days ago | - |
| CVE-2018-10237 | 5.9m | pkg:maven/com.google.guava/[email protected] | 24.1.1-android | 0.9214% | 3 years ago | Under investigation |
| CVE-2024-25710 | 5.9m | pkg:maven/org.apache.commons/[email protected] | 1.26.0 | 0.36394% | 11 months ago | Under investigation |
| CVE-2025-53864 | 5.8m | pkg:maven/com.nimbusds/[email protected] | 10.0.2 | 0.58888% | 1 year ago | Under investigation |
| CVE-2025-53864 | 5.8m | pkg:maven/com.nimbusds/[email protected] | 10.0.2 | 0.58888% | 1 year ago | Under investigation |
| CVE-2025-53864 | 5.8m | pkg:maven/com.nimbusds/[email protected] | 10.0.2 | 0.58888% | 1 year ago | Under investigation |
| CVE-2025-53864 | 5.8m | pkg:maven/com.nimbusds/[email protected] | 10.0.2 | 0.58888% | 1 year ago | Under investigation |
| CVE-2026-106123 | 5.7m | pkg:maven/com.rabbitmq/[email protected] | 5.35.0 | 0.03124% | 3 days ago | - |
| CVE-2022-3171 | 5.7m | pkg:maven/com.google.protobuf/[email protected] | 3.16.3 | 0.69149% | 4 years ago | Under investigation |
| CVE-2026-83557 | 5.6m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.52423% | 12 days ago | - |
| CVE-2026-83557 | 5.6m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.52423% | 12 days ago | - |
| CVE-2026-83557 | 5.6m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.52423% | 12 days ago | - |
| CVE-2026-83557 | 5.6m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.2 | 0.52423% | 12 days ago | - |
| CVE-2026-77420 | 5.5m | pkg:maven/org.jline/[email protected] | 3.30.15 | 0.01851% | 17 days ago | - |
| CVE-2023-50570 | 5.5m | pkg:maven/com.github.seancfoley/[email protected] | - | 0.18469% | 3 years ago | Under investigation |
| CVE-2023-2976 | 5.5m | pkg:maven/com.google.guava/[email protected] | 32.0.0-android | 0.14746% | 11 months ago | Under investigation |
| CVE-2023-2976 | 5.5m | pkg:maven/com.google.guava/[email protected] | 32.0.0-android | 0.14746% | 11 months ago | Under investigation |
| CVE-2021-22570 | 5.5m | pkg:maven/com.google.protobuf/[email protected] | 3.15.0 | 0.85274% | 1 year ago | Under investigation |
| CVE-2026-54514 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.28613% | 3 months ago | Under investigation |
| CVE-2026-54515 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.36513% | 3 months ago | Under investigation |
| CVE-2026-77310 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.22223% | 12 days ago | - |
| CVE-2026-19032 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.42998% | 12 days ago | - |
| CVE-2023-26049 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.51.v20230217, 10.0.14, 11.0.14 | 0.6961% | 3 years ago | Under investigation |
| CVE-2023-40167 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.69152% | 3 years ago | Under investigation |
| CVE-2023-40167 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.69152% | 3 years ago | Under investigation |
| CVE-2023-40167 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52 | 0.69152% | 3 years ago | Under investigation |
| CVE-2020-13956 | 5.3m | pkg:maven/org.apache.httpcomponents/[email protected] | 4.5.13 | 0.95168% | 5 years ago | Under investigation |
| CVE-2026-54514 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.28613% | 3 months ago | Under investigation |
| CVE-2026-54515 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.36513% | 3 months ago | Under investigation |
| CVE-2026-77310 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.22223% | 12 days ago | - |
| CVE-2026-19032 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.42998% | 12 days ago | - |
| CVE-2026-45205 | 5.3m | pkg:maven/org.apache.commons/[email protected] | 2.15.0 | 0.55988% | 5 months ago | Under investigation |
| CVE-2023-26049 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.1 | 0.6961% | 3 years ago | Under investigation |
| CVE-2026-45205 | 5.3m | pkg:maven/org.apache.commons/[email protected] | 2.15.0 | 0.55988% | 5 months ago | Under investigation |
| CVE-2026-54515 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.36513% | 3 months ago | Under investigation |
| CVE-2026-54514 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.8 | 0.28613% | 3 months ago | Under investigation |
| CVE-2026-19032 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.10 | 0.42998% | 12 days ago | - |
| CVE-2026-77310 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.18.9 | 0.22223% | 12 days ago | - |
| CVE-2026-19032 | 5.3m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.22.2 | 0.42998% | 12 days ago | - |
| CVE-2026-106452 | 5.3m | pkg:maven/at.yawk.lz4/[email protected] | 1.11.2 | 0.29025% | 3 days ago | - |
| CVE-2026-106450 | 5.3m | pkg:maven/at.yawk.lz4/[email protected] | 1.11.4 | 0.29024% | 3 days ago | - |
| CVE-2026-106453 | 5.3m | pkg:maven/at.yawk.lz4/[email protected] | 1.11.2 | 0.29024% | 3 days ago | - |
| CVE-2026-106121 | 4.9m | pkg:maven/com.rabbitmq/[email protected] | 5.36.1 | 0.40447% | 3 days ago | - |
| CVE-2021-29425 | 4.8m | pkg:maven/commons-io/[email protected] | 2.7 | 0.95672% | 3 years ago | Under investigation |
| CVE-2023-41900 | 4.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.59143% | 2 years ago | Under investigation |
| CVE-2023-41900 | 4.3m | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.59143% | 2 years ago | Under investigation |
| CVE-2025-49128 | 4m | pkg:maven/com.fasterxml.jackson.core/[email protected] | 2.13.0 | 0.31417% | 1 year ago | Under investigation |
| GHSA-58qw-p7qm-5rvh | 3.9l | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823 | - | 8 months ago | Under investigation |
| GHSA-58qw-p7qm-5rvh | 3.9l | pkg:maven/org.eclipse.jetty/[email protected] | 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823 | - | 2 years ago | Under investigation |
| CVE-2025-11143 | 3.7l | pkg:maven/org.eclipse.jetty/[email protected] | - | 0.04762% | 7 months ago | Under investigation |
| CVE-2025-11143 | 3.7l | pkg:maven/org.eclipse.jetty/[email protected] | - | 0.04762% | 7 months ago | Under investigation |
| CVE-2026-106449 | 3.7l | pkg:maven/at.yawk.lz4/[email protected] | 1.11.4 | 0.25267% | 3 days ago | - |
| CVE-2023-36479 | 3.5l | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.66252% | 2 years ago | Under investigation |
| CVE-2023-36479 | 3.5l | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.52.v20230823, 10.0.16, 11.0.16 | 0.66252% | 2 years ago | Under investigation |
| CVE-2020-8908 | 3.3l | pkg:maven/com.google.guava/[email protected] | 32.0.0-android | 0.59234% | 8 months ago | Under investigation |
| CVE-2020-8908 | 3.3l | pkg:maven/com.google.guava/[email protected] | 32.0.0-android | 0.59234% | 8 months ago | Under investigation |
| CVE-2022-2047 | 2.7l | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.47 | 0.70106% | 4 years ago | Under investigation |
| CVE-2024-23454 | 2l | pkg:maven/org.apache.hadoop/[email protected] | 3.4.0 | 0.32944% | 1 year ago | Under investigation |
| CVE-2024-2236 | N/Al | pkg:deb/debian/[email protected]%2Bdeb13u1%2Bdhi1?os_distro=trixie&os_name=debian&os_version=13 | - | 0.65038% | 20 days ago | Under investigation |
| CVE-2012-2663 | N/Al | pkg:deb/debian/[email protected]%2Bdhi2?os_distro=trixie&os_name=debian&os_version=13 | - | 0.85709% | 20 days ago | - |