loki 7.5.0 Helm chart

Name: loki Helm chart 7.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Not scored yet

Helm chart for Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Version 7.5.0 todayapp version 3.6.16 333Artifact Hub

loki 7.5.0 deploys 6 container images: grafana/loki-canary, nginxinc/nginx-unprivileged, grafana/loki, kiwigrid/k8s-sidecar and 2 more. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 6 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
grafana/loki-canary	3.6.16	—	not yet scanned
nginxinc/nginx-unprivileged	1.29-alpine	002284	1,261
grafana/loki×3	3.6.11	001770	1,000
kiwigrid/k8s-sidecar	2.5.0	102160	1,015
library/memcached×2	1.6.39-alpine	101830	702
prom/memcached-exporter×2	v0.15.4	001671	1,043

The chart’s default values do not render: it requires settings only an operator can give. Rendered with the fewest values it accepts, shown below for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

loki:
  useTestSchema: true
  storage:
    bucketNames:
      chunks: chunks
      ruler: ruler
      admin: admin

Vulnerabilities

263 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2025-15467	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	GO-2026-4341	stdlib@go1.25.3	1.24.12
Medium	ALPINE-CVE-2026-34182	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	GO-2026-4337	stdlib@go1.25.3	1.24.13
Medium	ALPINE-CVE-2026-63076	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	GO-2026-5026	golang.org/x/net@v0.52.0	0.55.0
Medium	GO-2026-5026	stdlib@go1.26.2	1.25.13
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.49.0	0.52.0
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GO-2026-6612	golang.org/x/net@v0.52.0	0.60.0
Medium	GO-2026-6612	stdlib@go1.26.2	1.26.9
Medium	ALPINE-CVE-2026-66046	expat@2.7.5-r0	2.8.4-r0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GO-2026-6604	stdlib@go1.26.2	1.26.9
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.5.4	3.5.33
Medium	ALPINE-CVE-2026-34183	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.80.0	1.82.2
Medium	ALPINE-CVE-2026-3805	curl@8.17.0-r1	8.19.0-r0
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.6.2	0.6.3
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	GHSA-58pv-8j8x-9vj2	jaraco-context@5.3.0	6.1.0
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.80.0	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	GHSA-mf9v-mfxr-j63j	urllib3@2.6.3	2.7.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	GO-2026-4601	stdlib@go1.25.3	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.5.0latest	today	3.6.16	—	—
7.3.0	2 months ago	3.6.12	20101357	5,567

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/loki.svg)](https://charts.stackradar.io/charts/grafana/loki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.