loki 7.5.0 Helm chart

Name: loki Helm chart 7.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Not scored yet

Helm chart for Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Version 7.5.0 todayapp version 3.6.16 333Artifact Hub

loki 7.5.0 deploys 6 container images: grafana/loki-canary, nginxinc/nginx-unprivileged, grafana/loki, kiwigrid/k8s-sidecar and 2 more. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 6 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
grafana/loki-canary	3.6.16	—	not yet scanned
nginxinc/nginx-unprivileged	1.29-alpine	002284	1,261
grafana/loki×3	3.6.11	001770	1,000
kiwigrid/k8s-sidecar	2.5.0	102160	1,017
library/memcached×2	1.6.39-alpine	101830	704
prom/memcached-exporter×2	v0.15.4	001671	1,043

The chart’s default values do not render: it requires settings only an operator can give. Rendered with the fewest values it accepts, shown below for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

loki:
  useTestSchema: true
  storage:
    bucketNames:
      chunks: chunks
      ruler: ruler
      admin: admin

Vulnerabilities

263 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	GO-2026-6355	golang.org/x/crypto@v0.42.0	0.56.0
Low	GO-2026-4342	stdlib@go1.25.3	1.24.12
Low	ALPINE-CVE-2026-82209	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-5970	golang.org/x/text@v0.29.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.17.0-r1	8.22.0-r0
Low	GO-2025-4155	stdlib@go1.25.3	1.24.11
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.42.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.42.0	0.56.0
Low	GO-2026-6617	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6617	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-6608	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6607	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6609	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.18.5	1.18.7
Low	GO-2026-4946	stdlib@go1.25.3	1.25.9
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.311.2-0.20260410083055-07c6232d159b	0.311.3
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6629	golang.org/x/text@v0.29.0	0.41.0
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.42.0	0.52.0
Low	GO-2026-6613	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-76642	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6605	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	GO-2026-6610	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6610	stdlib@go1.25.3	1.26.9
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.44.0	0.55.0
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.45.1	0.46.2
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-xpv3-w29h-x7cv	oauthlib@3.3.1	4.0.0
Low	ALPINE-CVE-2026-42767	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.5.0latest	today	3.6.16	—	—
7.3.0	2 months ago	3.6.12	20101357	5,567

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/loki.svg)](https://charts.stackradar.io/charts/grafana/loki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.