loki 7.5.0 Helm chart

Name: loki Helm chart 7.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 24 Oct 2026

Helm chart for Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Version 7.5.0 yesterdayapp version 3.6.16 333Artifact Hub

loki 7.5.0 deploys 6 container images: grafana/loki-canary, nginxinc/nginx-unprivileged, grafana/loki, kiwigrid/k8s-sidecar and 2 more. Across them, 455 findings — 2 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

5,53720100353

455 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
grafana/loki-canary	3.6.16	00636	465
nginxinc/nginx-unprivileged	1.29-alpine	002384	1,276
grafana/loki×3	3.6.11	001770	1,016
kiwigrid/k8s-sidecar	2.5.0	102161	1,018
library/memcached×2	1.6.39-alpine	101830	704
prom/memcached-exporter×2	v0.15.4	001572	1,058

The chart’s default values do not render: it requires settings only an operator can give. Rendered with the fewest values it accepts, shown below for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

loki:
  useTestSchema: true
  storage:
    bucketNames:
      chunks: chunks
      ruler: ruler
      admin: admin

Low findings

211 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-hjf4-fphr-2h65	go.opentelemetry.io/otel/sdk/log@v0.19.0	0.21.0
Low	GHSA-gh4c-6fx4-qh6g	urllib3@2.6.3	2.8.0
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-103111	pcre2@10.47-r0	10.49-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	GHSA-8988-9cw3-xx77	urllib3@2.6.3	2.8.0
Low	GO-2026-4980	stdlib@go1.26.2	1.25.10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.42.0	0.45.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-4440	golang.org/x/net@v0.44.0	0.45.0
Low	GO-2026-4441	golang.org/x/net@v0.44.0	0.45.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.42.0	0.45.0
Low	PYSEC-2026-3721	pip@25.3	26.2
Low	GO-2026-4603	stdlib@go1.25.3	1.25.8
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	GO-2025-4175	stdlib@go1.25.3	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.49.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.3	1.25.9
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	GO-2026-4982	stdlib@go1.26.2	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.52.0	0.55.0
Low	GHSA-6q48-6c7w-9gw2	certifi@2026.1.4	2026.10.19
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.49.0	0.52.0
Low	ALPINE-CVE-2026-78410	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89160	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-102633	expat@2.7.5-r0	2.9.0-r0
Low	GHSA-hj66-6f7g-4r5v	oauthlib@3.3.1	4.0.0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.80.0	1.82.1
Low	GHSA-65pc-fj4g-8rjx	idna@3.11	3.15
Low	ALPINE-CVE-2026-89158	pcre2@10.47-r0	10.48-r0
Low	GO-2026-4865	stdlib@go1.25.3	1.25.9
Low	GO-2026-4976	stdlib@go1.26.2	1.25.10
Low	GO-2026-5039	stdlib@go1.26.2	1.25.11
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.0.0-20260827173540-b87159fa8cd7	3.6.4
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	ALPINE-CVE-2026-89156	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-89161	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.5.0latest	yesterday	3.6.16	20100353	5,537
7.3.0	2 months ago	3.6.12	20101359	5,618

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/loki.svg)](https://charts.stackradar.io/charts/grafana/loki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.