Hello, were trying to adopt druid in my org but security team is blocking us from installing since image scans are returning the following CVE's in latest images (and older versions are even worse)

LOW       7
  MEDIUM    51
  HIGH      44
  CRITICAL  9

see attached CVE report did anyone face this issue? has a security report I can share that has some explanations / suppression lists

You may follow this to get your answers: https://druid.apache.org/docs/latest/operations/security-overview/#vulnerability-handling

Thanks @Bibek Sahoo, I dont see any part in this page that addressed my message above 😞

I believe the normal process is to report this to security@apache.org,

its already reported, just not handled