graylog 3.0.37 Helm chart

Name: graylog Helm chart 3.0.37: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kong-z

Scored 14 Oct 2026

Graylog is the centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data.

Version 3.0.37 yesterdayapp version 7.2.0 29Artifact Hub

graylog 3.0.37 deploys 5 container images: quay.io/mongodb/mongodb-kubernetes-operator, library/busybox, opensearchproject/opensearch, library/alpine and 1 more. Across them, 292 findings — 0 critical, 1 high. The highest contribution is RHSA-2025:12010 in sqlite 3.26.0-19.el8_9, fixed in 0:3.26.0-20.el8_10.

Radar Score

3,3350141249

292 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/mongodb/mongodb-kubernetes-operator	0.13.0	0118121	1,687
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.19.6	001261	882
library/alpine	latest	0001	13
graylog/graylog	7.2.0	001166	753

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

291 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-r2xf-8xr9-62gw	jline-builtins@3.27.1	3.30.15
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.135.Final	4.1.137.Final
Low	RHSA-2025:23383	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.9
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.18.8	2.18.11
Low	GO-2026-4342	stdlib@go1.24.2	1.24.12
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.130.Final	4.1.133.Final
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	RHSA-2025:8686	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.22
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	GO-2026-5970	golang.org/x/text@v0.24.0	0.39.0
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	RHSA-2026:62218	libssh@0.9.6-14.el8	0:0.9.6-17.el8_10
Low	GO-2025-4155	stdlib@go1.24.2	1.24.11
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	RHSA-2025:4051	gnutls@3.6.16-8.el8_9.3	0:3.6.16-8.el8_10.3
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.18.8	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.18.8	2.18.11
Low	GO-2025-4014	stdlib@go1.24.2	1.24.8
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk18on@1.84	1.85
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk15to18@1.79	1.85
Low	GHSA-qp49-qgx5-5m26	bc-fips@2.1.2	2.1.3
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk15to18@1.79	1.84
Low	UBUNTU-CVE-2026-95210	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15to18@1.79	1.84
Low	GO-2025-4007	stdlib@go1.24.2	1.24.9
Low	GO-2026-6608	stdlib@go1.24.2	1.26.9
Low	UBUNTU-CVE-2026-93990	expat@2.6.1-2ubuntu0.6	no fix listed
Low	GHSA-98j2-6v39-78w8	bc-fips@2.1.2	2.1.3
Low	GO-2026-6607	stdlib@go1.24.2	1.26.9
Low	RHSA-2025:4049	libtasn1@4.13-4.el8_7	0:4.13-5.el8_10
Low	RHSA-2026:57462	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.13
Low	RHSA-2026:16799	krb5@1.18.2-31.el8_10	0:1.18.2-34.el8_10
Low	GO-2025-4013	stdlib@go1.24.2	1.24.8
Low	GO-2026-6609	stdlib@go1.24.2	1.26.9
Low	UBUNTU-CVE-2026-88647	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	GO-2025-3749	stdlib@go1.24.2	1.24.4
Low	GO-2025-3956	stdlib@go1.24.2	1.23.12
Low	GO-2026-4946	stdlib@go1.24.2	1.25.9
Low	RHSA-2026:0991	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed
Low	RHSA-2026:58938	sqlite@3.26.0-19.el8_9	0:3.26.0-21.el8_10
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	RHSA-2026:42733	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.40
Low	GHSA-574f-3g2m-x479	bcprov-jdk15to18@1.79	no fix listed
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	GO-2026-6613	stdlib@go1.24.2	1.26.9
Low	GO-2025-3849	stdlib@go1.24.2	1.23.12
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.130.Final	4.1.135.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.0.37latest	yesterday	7.2.0	0141249	3,335
3.0.36	8 days ago	7.2.0-rc.2-1	0141247	3,298
3.0.35	15 days ago	7.2.0-rc.1-1	0140252	3,343
3.0.34	22 days ago	7.2.0-beta.4-1	0142253	3,425
3.0.33	29 days ago	7.2.0-beta.3-1	0147272	3,652
3.0.32	1 month ago	7.2.0-beta.2-1	0145249	3,310
3.0.31	1 month ago	7.2.0-beta.1-1	0132226	2,755
3.0.30	1 month ago	7.2.0-beta.1-1	0132226	2,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kong-z/graylog.svg)](https://charts.stackradar.io/charts/kong-z/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.