mimir-distributed Helm chart

Name: mimir-distributed Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 18 Oct 2026

Grafana Mimir

Latest 6.2.1 12 days agoapp version 3.2.1 76Artifact Hub

mimir-distributed 6.2.1 deploys 5 container images: pgsty/silo, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 257 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.1-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion ^1.32.0-0; rendered for Kubernetes 1.32.0.

Radar Score

3,1541066190

257 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
pgsty/silo×4	RELEASE.2026-09-03T13-18-01Z	001328	513
grafana/rollout-operator	v0.38.1	00631	421
grafana/mimir×14	3.2.1	00322	255
nginxinc/nginx-unprivileged	1.29-alpine	002379	1,225
apache/kafka-native	4.1.0	102132	763

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

190 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6607	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6609	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-2673	openssl@3.5.1-r0	3.5.6-r0
Low	GO-2026-6613	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6605	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	GO-2026-6610	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6610	stdlib@go1.26.5	1.26.9
Low	GHSA-w6r9-248c-frg8	github.com/rabbitmq/amqp091-go@v1.10.0	1.14.0
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-8458	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-hjf4-fphr-2h65	go.opentelemetry.io/otel/sdk/log@v0.19.0	0.21.0
Low	ALPINE-CVE-2025-66199	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-78408	util-linux@2.41.4-r0	2.41.6-r1
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	ALPINE-CVE-2026-22796	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.0	1.83.1
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-4896	github.com/minio/minio@v0.0.0-20260903125440-9b11dc9469e6	no fix listed
Low	ALPINE-CVE-2026-78410	util-linux@2.41.4-r0	2.41.6-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89160	pcre2@10.47-r0	10.48-r0
Low	RHSA-2026:79281	glibc@2.34-275.el9_8	0:2.34-283.el9_8
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-102633	expat@2.7.5-r0	2.9.0-r0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.82.0	1.82.1
Low	GHSA-465g-fh3v-9jw4	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	ALPINE-CVE-2026-89156	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-40930	libpng@1.6.57-r0	1.6.58-r1
Low	GO-2026-5757	github.com/minio/minio@v0.0.0-20260903125440-9b11dc9469e6	no fix listed
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.2.1latest	12 days ago	3.2.1	1066190	3,154
6.2.0	1 month ago	3.2.0	1057172	2,831

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/mimir-distributed.svg)](https://charts.stackradar.io/charts/grafana/mimir-distributed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.