graylog 3.0.36 Helm chart

Name: graylog Helm chart 3.0.36: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kong-z

Scored 7 Oct 2026

Graylog is the centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data.

Version 3.0.36 yesterdayapp version 7.2.0-rc.2-1 29Artifact Hub

graylog 3.0.36 deploys 5 container images: quay.io/mongodb/mongodb-kubernetes-operator, library/busybox, opensearchproject/opensearch, library/alpine and 1 more. Across them, 262 findings — 0 critical, 1 high. The highest contribution is RHSA-2025:12010 in sqlite 3.26.0-19.el8_9, fixed in 0:3.26.0-20.el8_10.

Radar Score

3,0060140220

262 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/mongodb/mongodb-kubernetes-operator	0.13.0	0117103	1,474
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.19.6	001256	845
library/alpine	latest	0010	15
graylog/graylog	7.2.0-rc.2-1	001061	672

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

219 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.24.2	1.25.10
Low	GO-2026-4986	stdlib@go1.24.2	1.25.10
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.7	1.6.8
Low	GO-2026-4918	stdlib@go1.24.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.39.0	0.53.0
Low	GHSA-9pwp-9qqc-pr26	bc-fips@2.1.2	2.1.3
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.84	1.85
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk15to18@1.79	1.85
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.130.Final	4.1.135.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.135.Final	4.1.136.Final
Low	RHSA-2026:26354	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.5
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.130.Final	4.1.132.Final
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.5	no fix listed
Low	RHSA-2025:18286	libssh@0.9.6-14.el8	0:0.9.6-15.el8_10
Low	GHSA-v6w3-qrh8-qccc	bc-fips@2.1.2	2.1.3
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GO-2025-4009	stdlib@go1.24.2	1.24.8
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	GO-2025-4006	stdlib@go1.24.2	1.24.8
Low	RHSA-2026:0337	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-14.el8_10
Low	RHSA-2026:71641	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.9
Low	GO-2026-5942	golang.org/x/net@v0.39.0	0.56.0
Low	UBUNTU-CVE-2026-82560	perl@5.38.2-3.2ubuntu0.6	no fix listed
Low	GO-2026-4870	stdlib@go1.24.2	1.25.9
Low	GO-2026-4971	stdlib@go1.24.2	1.25.10
Low	GO-2026-4947	stdlib@go1.24.2	1.25.9
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.5	no fix listed
Low	RHSA-2026:3042	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-15.el8_6
Low	GO-2026-5037	stdlib@go1.24.2	1.25.11
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.18.8	2.18.10
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	RHSA-2025:13203	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.3
Low	RHSA-2026:36728	libtasn1@4.13-4.el8_7	0:4.13-6.el8_10
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed
Low	GO-2026-5972	stdlib@go1.24.2	1.25.13
Low	GO-2026-6088	stdlib@go1.24.2	1.25.13
Low	GO-2026-6089	stdlib@go1.24.2	1.25.13
Low	GO-2026-6090	stdlib@go1.24.2	1.25.13
Low	GO-2026-5038	stdlib@go1.24.2	1.25.11
Low	GHSA-6g32-pxv4-2wfj	amqp-client@5.32.0	5.33.0
Low	GO-2026-6218	stdlib@go1.24.2	1.25.13
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-p6pp-m3f8-5c89	jackson-core@2.18.8	2.18.11
Low	RHSA-2026:2389	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu1.1+Fips2
Low	RHSA-2026:15953	glib2@2.56.4-165.el8_10	0:2.56.4-169.el8_10
Low	GHSA-65r4-943x-97jj	jsoup@1.23.1	1.23.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.0.36latest	yesterday	7.2.0-rc.2-1	0140220	3,006
3.0.35	7 days ago	7.2.0-rc.1-1	0140228	3,095
3.0.34	14 days ago	7.2.0-beta.4-1	0142229	3,177
3.0.33	21 days ago	7.2.0-beta.3-1	0146249	3,402
3.0.32	27 days ago	7.2.0-beta.2-1	0144231	3,097
3.0.31	28 days ago	7.2.0-beta.1-1	0131208	2,542
3.0.30	1 month ago	7.2.0-beta.1-1	0131208	2,542

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kong-z/graylog.svg)](https://charts.stackradar.io/charts/kong-z/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.