The community docker-compose references clickhouse/clickhouse-server:24.8-alpine,
which is end-of-life and has not been rebuilt since February 2025. This leaves
self-hosted deployments exposed to 25 unpatched CVEs in the base image, including
1 critical and 8 high severity findings.
The current ClickHouse LTS is 25.8. Upgrading requires handling a breaking change
in output_format_json_quote_64bit_integers (changed default in 25.8) which
currently causes Hive to break when querying integer fields.
Would love to see this addressed — either by pinning a newer ClickHouse version
with the appropriate config or query parameter to maintain compatibility.
The community docker-compose references
clickhouse/clickhouse-server:24.8-alpine,which is end-of-life and has not been rebuilt since February 2025. This leaves
self-hosted deployments exposed to 25 unpatched CVEs in the base image, including
1 critical and 8 high severity findings.
The current ClickHouse LTS is 25.8. Upgrading requires handling a breaking change
in
output_format_json_quote_64bit_integers(changed default in 25.8) whichcurrently causes Hive to break when querying integer fields.
Would love to see this addressed — either by pinning a newer ClickHouse version
with the appropriate config or query parameter to maintain compatibility.