mimir-distributed Helm chart

Name: mimir-distributed Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 18 Oct 2026

Grafana Mimir

Latest 6.2.1 12 days agoapp version 3.2.1 76Artifact Hub

mimir-distributed 6.2.1 deploys 5 container images: pgsty/silo, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 257 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.1-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion ^1.32.0-0; rendered for Kubernetes 1.32.0.

Radar Score

3,1541066190

257 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
pgsty/silo×4	RELEASE.2026-09-03T13-18-01Z	001328	513
grafana/rollout-operator	v0.38.1	00631	421
grafana/mimir×14	3.2.1	00322	255
nginxinc/nginx-unprivileged	1.29-alpine	002379	1,225
apache/kafka-native	4.1.0	102132	763

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

190 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-w34q-cm8f-9c5x	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0	0.21.0
Low	ALPINE-CVE-2026-53614	util-linux@2.41.4-r0	2.41.6-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6599	stdlib@go1.26.5	1.26.9
Low	GO-2026-6600	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-53613	util-linux@2.41.4-r0	2.41.6-r0
Low	GHSA-27gv-rfvv-22mv	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-53612	util-linux@2.41.4-r0	2.41.6-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2025-15469	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-22795	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2025-68160	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	RHSA-2026:66403	coreutils@8.32-41.el9_8	0:8.32-41.el9_8.1
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2025-69418	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r18	1.37.0-r20
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r18	1.37.0-r20
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.2.1latest	12 days ago	3.2.1	1066190	3,154
6.2.0	1 month ago	3.2.0	1057172	2,831

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/mimir-distributed.svg)](https://charts.stackradar.io/charts/grafana/mimir-distributed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.