StackRadar

logging-stack 0.1.0 Helm chart

helm-charts-alexis-carbillet

Scored 14 Sept 2026

Logging stack including Loki, fluent-bit, and Grafana dashboards

Version 0.1.0 11 months agodeploys tag 3.0.4 0Artifact Hub

logging-stack 0.1.0 deploys 9 container images: cr.fluentbit.io/fluent/fluent-bit, grafana/loki-canary, fluent/fluent-bit, library/busybox and 4 more. Across the 8 measured, 1,044 findings1 critical, 35 high 6 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.

Radar Score

12,650135170834

1,044 findings over 8 of 9 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
cr.fluentbit.io/fluent/fluent-bit3.0.4unmeasured
grafana/loki-canary2.6.107281612,307
fluent/fluent-bit2.101428401
library/busybox1.31.100000
grafana/grafana11.1.003241531,877
grafana/agent-operatorv0.25.104311852,492
nginxinc/nginx-unprivileged1.19-alpine193891,614
grafana/loki2.8.204171311,595
grafana/loki×22.6.107281672,364

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

269 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGO-2023-2382stdlib@go1.17.91.20.12
LowGO-2022-1143stdlib@go1.17.91.18.9
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.24.00.52.0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.24.00.45.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.24.00.52.0
LowGO-2024-2599stdlib@go1.17.91.21.8
LowGO-2022-1038stdlib@go1.17.91.18.7
LowGO-2024-3106stdlib@go1.22.41.22.7
LowALPINE-CVE-2024-2004curl@8.5.0-r08.7.1-r0
LowALPINE-CVE-2023-42364busybox@1.36.1-r151.36.1-r19
LowALPINE-CVE-2023-42363busybox@1.36.1-r151.36.1-r17
LowGO-2023-1570stdlib@go1.17.91.19.6
LowDLA-4061-1libtasn1-6@4.16.0-2+deb11u14.16.0-2+deb11u2
LowGO-2022-0531stdlib@go1.17.91.17.11
LowGO-2024-2600stdlib@go1.17.91.21.8
LowALPINE-CVE-2023-42366busybox@1.36.1-r151.36.1-r16
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.64.01.82.1
LowALPINE-CVE-2021-42375busybox@1.32.1-r61.32.1-r7
LowGO-2024-2609stdlib@go1.17.91.21.8
LowGO-2024-3107stdlib@go1.22.41.22.7
LowGO-2023-1751stdlib@go1.17.91.19.9
LowGO-2023-1753stdlib@go1.17.91.19.9
LowALPINE-CVE-2023-42365busybox@1.36.1-r151.36.1-r19
LowGHSA-ffqx-q65f-36jfgithub.com/grafana/tempo@v1.5.1-0.20230524121406-1dc1bfe7085b2.10.3
LowGHSA-cp6g-7hqx-qxhpgo.mongodb.org/mongo-driver@v1.14.01.17.7
LowALPINE-CVE-2024-6874curl@8.5.0-r08.9.0-r0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.24.00.52.0
LowGO-2023-2041stdlib@go1.17.91.20.8
LowGHSA-vffh-x6r8-xx99github.com/prometheus/prometheus@v0.52.00.311.2-0.20260410083055-07c6232d159b
LowGO-2023-2043stdlib@go1.17.91.20.8
LowGO-2022-0515stdlib@go1.17.91.17.12
LowGO-2023-2186stdlib@go1.17.91.20.11
LowDLA-4490-1openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u5
LowGO-2024-3333golang.org/x/net@v0.26.00.33.0
LowGHSA-9h8m-3fm2-qjrqgo.opentelemetry.io/otel/sdk@v1.26.01.40.0
LowGHSA-jpcw-4wr7-c3vqgithub.com/getkin/kin-openapi@v0.122.00.144.0
LowALPINE-CVE-2024-11053curl@8.5.0-r08.11.1-r0
LowGO-2024-3105stdlib@go1.22.41.22.7
LowGO-2022-1095stdlib@go1.17.91.18.8
LowGO-2023-1621stdlib@go1.17.91.19.7
LowGO-2026-4981stdlib@go1.22.41.25.10
LowGO-2025-3563stdlib@go1.22.41.23.8
LowGO-2026-4977stdlib@go1.22.41.25.10
LowGO-2024-2610stdlib@go1.17.91.21.8
LowDLA-4259-1systemd@247.3-7247.3-7+deb11u7
LowGO-2026-4986stdlib@go1.22.41.25.10
LowGO-2026-4918golang.org/x/net@v0.26.00.53.0
LowGO-2026-4918stdlib@go1.22.41.25.10
LowGO-2026-4337stdlib@go1.22.41.24.13
LowDLA-4273-1postgresql-13@13.11-0+deb11u113.22-0+deb11u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest11 months ago3.0.413517083412,650

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-charts-alexis-carbillet/logging-stack.svg)](https://charts.stackradar.io/charts/helm-charts-alexis-carbillet/logging-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.