loki 7.3.0 Helm chart

Name: loki Helm chart 7.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 18 Oct 2026

Helm chart for Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Version 7.3.0 2 months agoapp version 3.6.12 333Artifact Hub

loki 7.3.0 deploys 6 container images: grafana/loki-canary, nginxinc/nginx-unprivileged, grafana/loki, kiwigrid/k8s-sidecar and 2 more. Across them, 447 findings — 2 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

5,45220102343

447 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
grafana/loki-canary	3.6.12	00740	530
nginxinc/nginx-unprivileged	1.29-alpine	002379	1,225
grafana/loki×3	3.6.11	001768	984
kiwigrid/k8s-sidecar	2.5.0	102159	1,007
library/memcached×2	1.6.39-alpine	101830	702
prom/memcached-exporter×2	v0.15.4	001669	1,027

The chart’s default values do not render: it requires settings only an operator can give. Rendered with the fewest values it accepts, shown below for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

loki:
  useTestSchema: true
  storage:
    bucketNames:
      chunks: chunks
      ruler: ruler
      admin: admin

Low findings

201 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5030	golang.org/x/net@v0.52.0	0.55.0
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.6.3	2.7.0
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	GHSA-w34q-cm8f-9c5x	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0	0.21.0
Low	GO-2026-4340	stdlib@go1.25.3	1.24.12
Low	ALPINE-CVE-2026-53614	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6599	stdlib@go1.26.4	1.26.9
Low	GO-2026-6600	stdlib@go1.26.4	1.26.9
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-53613	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-53612	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	GO-2026-4869	stdlib@go1.25.3	1.25.9
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-jp4c-xjxw-mgf9	pip@25.3	26.1
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	GHSA-58qw-9mgm-455v	pip@25.3	26.1
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r19	1.37.0-r20
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.42.0	0.44.0
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r0	10.48-r0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@25.3	26.0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r19	1.37.0-r20
Low	GO-2026-4602	stdlib@go1.25.3	1.25.8
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.3.0latest	2 months ago	3.6.12	20102343	5,452

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/loki.svg)](https://charts.stackradar.io/charts/grafana/loki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.