StackRadar

alloy-operator 0.9.2 Helm chart

grafana

Scored 23 Oct 2026

Grafana Alloy Operator, providing innovative ways for creating instances of Grafana Alloy.

Version 0.9.2 yesterdayapp version 1.14.2 4Artifact Hub

alloy-operator 0.9.2 deploys 1 container image: ghcr.io/grafana/alloy-operator. Across them, 87 findings — 0 critical, 0 high. The highest contribution is RHSA-2026:67165 in openssl 1:3.5.5-4.el9_8, fixed in 1:3.5.8-1.el9_8.

Radar Score

93000978

87 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/grafana/alloy-operator1.14.200978930

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

78 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2026:52674libarchive@3.5.3-9.el9_70:3.5.3-11.el9_8
LowRHSA-2026:55440glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.9
LowRHSA-2026:55439curl@7.76.1-40.el90:7.76.1-40.el9_8.5
LowRHSA-2026:71585libxml2@2.9.13-14.el9_8.10:2.9.13-14.el9_8.5
LowRHSA-2026:69126curl@7.76.1-40.el90:7.76.1-40.el9_8.7
LowGO-2026-6603golang.org/x/net@v0.56.00.60.0
LowGO-2026-6603stdlib@go1.26.41.26.9
LowGO-2026-5972stdlib@go1.26.41.25.13
LowGO-2026-6088stdlib@go1.26.41.25.13
LowGO-2026-6089stdlib@go1.26.41.25.13
LowGO-2026-6090stdlib@go1.26.41.25.13
LowGO-2026-6611stdlib@go1.26.41.26.9
LowGO-2026-6611golang.org/x/net@v0.56.00.60.0
LowGO-2026-6218stdlib@go1.26.41.25.13
LowGO-2026-5942stdlib@go1.26.41.26.6
LowRHSA-2026:42089glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.2
LowRHSA-2026:81532pcre2@10.40-6.el90:10.40-7.el9_8
LowGO-2026-6355golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-5064github.com/containerd/containerd@v1.7.33no fix listed
LowGO-2026-5970golang.org/x/text@v0.38.00.39.0
LowRHSA-2026:80511curl@7.76.1-40.el90:7.76.1-40.el9_8.8
LowGO-2026-6303golang.org/x/crypto@v0.53.00.55.0
LowGO-2026-6354golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-6617golang.org/x/net@v0.56.00.60.0
LowGO-2026-6617stdlib@go1.26.41.26.9
LowGO-2026-6608stdlib@go1.26.41.26.9
LowGHSA-8xwf-rjm4-xvhvoras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-6607stdlib@go1.26.41.26.9
LowGHSA-jxpm-75mh-9fp7oras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-6609stdlib@go1.26.41.26.9
LowRHSA-2026:77396openssl@1:3.5.5-4.el9_81:3.5.8-2.el9_8
LowGHSA-259r-337f-4rfwgithub.com/klauspost/compress@v1.18.41.18.7
LowGO-2026-6629golang.org/x/text@v0.38.00.41.0
LowRHSA-2026:58936sqlite@3.34.1-10.el9_80:3.34.1-11.el9_8
LowRHSA-2026:42952glibc@2.34-270.el9_80:2.34-274.el9_8
LowGO-2026-6613stdlib@go1.26.41.26.9
LowGO-2026-6605stdlib@go1.26.41.26.9
LowGO-2026-6610golang.org/x/net@v0.56.00.60.0
LowGO-2026-6610stdlib@go1.26.41.26.9
LowRHSA-2026:39315libsolv@0.7.24-5.el9_80:0.7.24-6.el9_8
LowGHSA-fxhp-mv3v-67qporas.land/oras-go/v2@v2.6.02.6.2
LowGHSA-pg57-6jwg-q645github.com/containerd/containerd@v1.7.331.7.36
LowGO-2026-4970stdlib@go1.26.41.25.12
LowRHSA-2026:64800glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.10
LowGO-2026-5622github.com/containerd/containerd@v1.7.33no fix listed
LowRHSA-2026:33226glibc@2.34-270.el9_80:2.34-272.el9_8
LowRHSA-2026:50147libgcrypt@1.10.0-11.el90:1.10.0-13.el9_8
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.80.01.83.1
LowRHSA-2026:79281glibc@2.34-270.el9_80:2.34-283.el9_8
LowRHSA-2026:61247libxml2@2.9.13-14.el9_8.10:2.9.13-14.el9_8.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.9.2latestyesterday1.14.200978930
0.8.016 days ago1.13.000978930
0.7.11 month ago1.12.100853637

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/grafana/alloy-operator.svg)](https://charts.stackradar.io/charts/grafana/alloy-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 23 Oct 2026 · scanned 23 Oct 2026 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.