StackRadar

loki Helm chart

grafana

Scored 18 Oct 2026

Helm chart for Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Latest 7.3.0 2 months agoapp version 3.6.12 333Artifact Hub

loki 7.3.0 deploys 6 container images: grafana/loki-canary, nginxinc/nginx-unprivileged, grafana/loki, kiwigrid/k8s-sidecar and 2 more. Across them, 447 findings — 2 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

5,45220102343

447 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
grafana/loki-canary3.6.1200740530
nginxinc/nginx-unprivileged1.29-alpine0023791,225
grafana/loki×33.6.11001768984
kiwigrid/k8s-sidecar2.5.01021591,007
library/memcached×21.6.39-alpine101830702
prom/memcached-exporter×2v0.15.40016691,027

The chart’s default values do not render: it requires settings only an operator can give. Rendered with the fewest values it accepts, shown below for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

loki:
  useTestSchema: true
  storage:
    bucketNames:
      chunks: chunks
      ruler: ruler
      admin: admin

Low findings

201 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/sdk@v1.43.01.45.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
7.3.0latest2 months ago3.6.12201023435,452

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/grafana/loki.svg)](https://charts.stackradar.io/charts/grafana/loki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Oct 2026 · scanned 19 Oct 2026 · advisories as of 19 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.