mimir-openshift-experimental Helm chart

Name: mimir-openshift-experimental Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 14 Sept 2026

Grafana Mimir on OpenShift Experiment

Latest 2.1.0 4 years agoapp version 2.0.0 0Artifact Hub

mimir-openshift-experimental 2.1.0 deploys 4 container images: minio/minio, grafana/mimir, nginxinc/nginx-unprivileged and minio/mc. Across them, 1,095 findings — 11 critical, 60 high — 11 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0. Chart.yaml declares kubeVersion ^1.10.0-0; rendered for Kubernetes 1.10.0.

Radar Score

17,7591160306712

1,095 findings over 4 of 4 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2021-02-14T04-01-33Z	520122281	6,915
grafana/mimir×9	2.0.0	01030163	2,598
nginxinc/nginx-unprivileged	1.19-alpine	19389	1,614
minio/mc×2	RELEASE.2021-02-14T04-28-06Z	521116259	6,632

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

169 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-wg47-6jq2-q2hh	github.com/minio/minio@v0.0.0-20210213070509-a94a9c37faf5	0.0.0-20250403145552-8c70975283f9
Medium	RHSA-2021:4451	nettle@3.4.1-2.el8	0:3.4.1-7.el8
Medium	RHSA-2021:4451	gnutls@3.6.14-7.el8_3	0:3.6.16-4.el8
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1l-r7	1.1.1t-r2
Medium	RHSA-2022:5317	libxml2@2.9.7-8.el8	0:2.9.7-13.el8_6.1
Medium	ALPINE-CVE-2022-32208	curl@7.76.1-r0	7.79.1-r2
Medium	RHSA-2021:1609	p11-kit@0.23.14-5.el8_0	0:0.23.22-1.el8
Medium	RHSA-2021:2717	systemd@239-41.el8_3.1	0:239-45.el8_4.2
Medium	RHEA-2021:1580	libarchive@3.3.2-9.el8	0:3.3.3-1.el8
Medium	ALPINE-CVE-2022-27406	freetype@2.10.4-r1	2.10.4-r3
Medium	RHSA-2022:5809	pcre2@10.32-2.el8	0:10.32-3.el8_6
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.0.0-20201216223049-8b5274cf687f
Medium	RHSA-2023:7877	openssl@1:1.1.1g-12.el8_3	1:1.1.1k-12.el8_9
Medium	ALPINE-CVE-2022-27775	curl@7.76.1-r0	7.79.1-r1
Medium	RHSA-2022:6206	systemd@239-41.el8_3.1	0:239-58.el8_6.4
Medium	GHSA-62mh-w5cv-p88c	github.com/nats-io/jwt@v1.1.0	1.2.3-0.20210314221642-a826c77dc9d2
Medium	RHSA-2021:1679	bash@4.4.19-12.el8	0:4.4.19-14.el8
Medium	ALPINE-CVE-2022-27782	curl@7.76.1-r0	7.79.1-r2
Medium	ALPINE-CVE-2022-27405	freetype@2.10.4-r1	2.10.4-r3
Medium	ALPINE-CVE-2021-22922	curl@7.76.1-r0	7.78.0-r0
Medium	RHSA-2022:6878	expat@2.2.5-4.el8	0:2.2.5-8.el8_6.3
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.26.0	1.79.3
Medium	RHBA-2022:2065	libtirpc@1.1.4-4.el8	0:1.1.4-6.el8
Medium	ALPINE-CVE-2022-27781	curl@7.76.1-r0	7.79.1-r2
Medium	ALPINE-CVE-2021-42380	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2022-22576	curl@7.76.1-r0	7.79.1-r1
Medium	RHSA-2024:7848	openssl@1:1.1.1g-12.el8_3	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-8.el8	0:2.9.7-21.el8_10.1
Medium	ALPINE-CVE-2022-2309	libxml2@2.9.10-r6	2.9.14-r1
Medium	RHSA-2022:7089	libksba@1.3.5-7.el8	0:1.3.5-8.el8_6
Medium	ALPINE-CVE-2022-27776	curl@7.76.1-r0	7.79.1-r1
Medium	RHSA-2021:1597	libxml2@2.9.7-8.el8	0:2.9.7-9.el8
Medium	ALPINE-CVE-2021-42379	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42381	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42385	busybox@1.32.1-r6	1.32.1-r7
Medium	RHSA-2023:0103	expat@2.2.5-4.el8	0:2.2.5-10.el8_7.1
Medium	ALPINE-CVE-2022-29824	libxml2@2.9.10-r6	2.9.14-r0
Medium	ALPINE-CVE-2021-42378	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42382	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42384	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42386	busybox@1.32.1-r6	1.32.1-r7
Medium	GHSA-ppj4-34rq-v8j9	github.com/tidwall/gjson@v1.6.7	1.9.3
Medium	RHSA-2021:4409	libgcrypt@1.8.5-4.el8	0:1.8.5-6.el8
Medium	RHSA-2023:0625	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1l-r7	1.1.1u-r2
Medium	RHSA-2024:1601	curl@7.61.1-14.el8_3.1	0:7.61.1-33.el8_9.5
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	RHSA-2021:4382	json-c@0.13.1-0.2.el8	0:0.13.1-2.el8
Medium	RHSA-2021:1206	gnutls@3.6.14-7.el8_3	0:3.6.14-8.el8_3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.0latest	4 years ago	2.0.0	1160306712	17,759

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/mimir-openshift-experimental.svg)](https://charts.stackradar.io/charts/grafana/mimir-openshift-experimental)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.