StackRadar

grafana-agent Helm chart

grafana

Scored 21 Oct 2026

Grafana Agent

Latest 0.44.2 1 year agoapp version v0.44.2 19Artifact Hub

grafana-agent 0.44.2 deploys 2 container images: grafana/agent and ghcr.io/jimmidyson/configmap-reload. Across them, 447 findings — 2 critical, 0 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.13-0ubuntu3.4, fixed in 3.0.13-0ubuntu3.7.

Radar Score

4,9392068377

447 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
grafana/agentv0.44.210523033,800
ghcr.io/jimmidyson/configmap-reloadv0.12.01016741,139

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

379 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2026-5115github.com/grafana/loki@v1.6.2-0.20240510183741-cef4c2826b4bno fix listed
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.50.27no fix listed
LowGHSA-2464-8j7c-4cjmgithub.com/go-viper/mapstructure/v2@v2.0.0-alpha.12.4.0
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v25.0.6+incompatibleno fix listed
LowUBUNTU-CVE-2026-41989libgcrypt20@1.10.3-2build11.10.3-2ubuntu0.1
LowUBUNTU-CVE-2026-75806openssl@3.0.13-0ubuntu3.43.0.13-0ubuntu3.16
LowUBUNTU-CVE-2026-42014gnutls28@3.8.3-1.1ubuntu3.23.8.3-1.1ubuntu3.6
LowGO-2026-5856stdlib@go1.22.111.25.12
LowUBUNTU-CVE-2026-54369acl@2.3.2-1build1.1no fix listed
LowGHSA-389r-gv7p-r3rpgithub.com/go-git/go-git/v5@v5.13.15.19.0
LowUBUNTU-CVE-2026-40225systemd@255.4-1ubuntu8.4255.4-1ubuntu8.14
LowGO-2025-3750stdlib@go1.22.111.23.10
LowUBUNTU-CVE-2025-5702glibc@2.39-0ubuntu8.32.39-0ubuntu8.5
LowUBUNTU-CVE-2026-13595util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-78409util-linux@2.39.3-9ubuntu6.2no fix listed
LowUBUNTU-CVE-2026-4438glibc@2.39-0ubuntu8.32.39-0ubuntu8.8
LowGHSA-crhj-59gh-8x96github.com/go-git/go-git/v5@v5.13.15.19.1
LowUBUNTU-CVE-2026-89157pcre2@10.42-4ubuntu2no fix listed
LowUBUNTU-CVE-2026-89161pcre2@10.42-4ubuntu2no fix listed
LowGO-2026-5027golang.org/x/net@v0.33.00.55.0
LowGO-2026-5029golang.org/x/net@v0.33.00.55.0
LowGO-2026-5030golang.org/x/net@v0.33.00.55.0
LowGO-2026-4340stdlib@go1.22.111.24.12
LowUSN-8193-1libcap2@1:2.66-5ubuntu21:2.66-5ubuntu2.4
LowUBUNTU-CVE-2026-53614util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-15534perl@5.38.2-3.2build25.38.2-3.2ubuntu0.6
LowUBUNTU-CVE-2026-3832gnutls28@3.8.3-1.1ubuntu3.23.8.3-1.1ubuntu3.6
LowUBUNTU-CVE-2026-8674glibc@2.39-0ubuntu8.3no fix listed
LowGO-2026-6599stdlib@go1.22.111.26.9
LowGO-2026-6600stdlib@go1.22.111.26.9
LowUBUNTU-CVE-2026-53613util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUSN-7760-1glibc@2.39-0ubuntu8.32.39-0ubuntu8.6
LowUBUNTU-CVE-2024-13176openssl@3.0.13-0ubuntu3.43.0.13-0ubuntu3.5
LowUSN-7287-1libcap2@1:2.66-5ubuntu21:2.66-5ubuntu2.2
LowUBUNTU-CVE-2026-35189openssl@3.0.13-0ubuntu3.43.0.13-0ubuntu3.16
LowUBUNTU-CVE-2026-19542glibc@2.39-0ubuntu8.32.39-0ubuntu8.9
LowUBUNTU-CVE-2026-53612util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v25.0.6+incompatibleno fix listed
LowUBUNTU-CVE-2026-13757p11-kit@0.25.3-4ubuntu2.10.25.3-4ubuntu2.2
LowGHSA-qxp5-gwg8-xv66golang.org/x/net@v0.33.00.36.0
LowGO-2025-3503stdlib@go1.22.111.23.7
LowUBUNTU-CVE-2026-88648gnutls28@3.8.3-1.1ubuntu3.2no fix listed
LowUBUNTU-CVE-2026-75805openssl@3.0.13-0ubuntu3.43.0.13-0ubuntu3.16
LowGHSA-w67g-5rqw-f597github.com/gorilla/websocket@v1.5.01.5.3
LowUBUNTU-CVE-2026-5419gnutls28@3.8.3-1.1ubuntu3.23.8.3-1.1ubuntu3.6
LowGO-2026-4869stdlib@go1.22.111.25.9
LowUSN-8685-1bzip2@1.0.8-5.1build0.11.0.8-5.1ubuntu0.1
LowUSN-8119-1systemd@255.4-1ubuntu8.4255.4-1ubuntu8.14
LowGHSA-w8rr-5gcm-pp58go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.24.01.43.0
LowGHSA-w8rr-5gcm-pp58go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.24.01.43.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.44.2latest1 year agov0.44.220683774,939

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/grafana/grafana-agent.svg)](https://charts.stackradar.io/charts/grafana/grafana-agent)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.