graylog 3.0.36 Helm chart

Name: graylog Helm chart 3.0.36: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kong-z

Scored 7 Oct 2026

Graylog is the centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data.

Version 3.0.36 yesterdayapp version 7.2.0-rc.2-1 29Artifact Hub

graylog 3.0.36 deploys 5 container images: quay.io/mongodb/mongodb-kubernetes-operator, library/busybox, opensearchproject/opensearch, library/alpine and 1 more. Across them, 262 findings — 0 critical, 1 high. The highest contribution is RHSA-2025:12010 in sqlite 3.26.0-19.el8_9, fixed in 0:3.26.0-20.el8_10.

Radar Score

3,0060140220

262 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/mongodb/mongodb-kubernetes-operator	0.13.0	0117103	1,474
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.19.6	001256	845
library/alpine	latest	0010	15
graylog/graylog	7.2.0-rc.2-1	001061	672

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

219 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	RHSA-2025:14135	libarchive@3.3.3-5.el8	0:3.3.3-6.el8_10
Low	GO-2025-3751	stdlib@go1.24.2	1.23.10
Low	GHSA-r2xf-8xr9-62gw	jline-builtins@3.27.1	3.30.15
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.135.Final	4.1.137.Final
Low	RHSA-2025:23383	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.9
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.18.8	2.18.11
Low	GO-2026-4342	stdlib@go1.24.2	1.24.12
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.130.Final	4.1.133.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	RHSA-2025:8686	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.22
Low	RHSA-2025:12450	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.2
Low	GO-2026-5970	golang.org/x/text@v0.24.0	0.39.0
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	RHSA-2026:62218	libssh@0.9.6-14.el8	0:0.9.6-17.el8_10
Low	GO-2025-4155	stdlib@go1.24.2	1.24.11
Low	RHSA-2025:4051	gnutls@3.6.16-8.el8_9.3	0:3.6.16-8.el8_10.3
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.18.8	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.18.8	2.18.11
Low	GO-2025-4014	stdlib@go1.24.2	1.24.8
Low	GHSA-qp49-qgx5-5m26	bc-fips@2.1.2	2.1.3
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk18on@1.84	1.85
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk15to18@1.79	1.85
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk15to18@1.79	1.84
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15to18@1.79	1.84
Low	GO-2025-4007	stdlib@go1.24.2	1.24.9
Low	UBUNTU-CVE-2026-93990	expat@2.6.1-2ubuntu0.6	no fix listed
Low	GHSA-98j2-6v39-78w8	bc-fips@2.1.2	2.1.3
Low	RHSA-2025:4049	libtasn1@4.13-4.el8_7	0:4.13-5.el8_10
Low	RHSA-2026:57462	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.13
Low	RHSA-2026:16799	krb5@1.18.2-31.el8_10	0:1.18.2-34.el8_10
Low	GO-2025-4013	stdlib@go1.24.2	1.24.8
Low	GO-2025-3749	stdlib@go1.24.2	1.24.4
Low	GO-2025-3956	stdlib@go1.24.2	1.23.12
Low	GO-2026-4946	stdlib@go1.24.2	1.25.9
Low	RHSA-2026:0991	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10
Low	RHSA-2026:58938	sqlite@3.26.0-19.el8_9	0:3.26.0-21.el8_10
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	RHSA-2026:42733	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.40
Low	GHSA-574f-3g2m-x479	bcprov-jdk15to18@1.79	no fix listed
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.130.Final	4.1.135.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	RHSA-2026:4772	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.31
Low	GHSA-xx22-p4ch-683r	lz4-java@1.10.1	1.11.1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.39.0	0.55.0
Low	GO-2025-3849	stdlib@go1.24.2	1.23.12
Low	GHSA-gx83-3vf8-gh7j	jackson-databind@2.18.8	2.18.10
Low	RHSA-2026:36730	libsolv@0.7.20-6.el8	0:0.7.20-7.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.0.36latest	yesterday	7.2.0-rc.2-1	0140220	3,006
3.0.35	8 days ago	7.2.0-rc.1-1	0140228	3,095
3.0.34	14 days ago	7.2.0-beta.4-1	0142229	3,177
3.0.33	22 days ago	7.2.0-beta.3-1	0146249	3,402
3.0.32	27 days ago	7.2.0-beta.2-1	0144231	3,097
3.0.31	28 days ago	7.2.0-beta.1-1	0131208	2,542
3.0.30	1 month ago	7.2.0-beta.1-1	0131208	2,542

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kong-z/graylog.svg)](https://charts.stackradar.io/charts/kong-z/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.