graylog 3.0.37 Helm chart

Name: graylog Helm chart 3.0.37: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kong-z

Scored 14 Oct 2026

Graylog is the centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data.

Version 3.0.37 yesterdayapp version 7.2.0 29Artifact Hub

graylog 3.0.37 deploys 5 container images: quay.io/mongodb/mongodb-kubernetes-operator, library/busybox, opensearchproject/opensearch, library/alpine and 1 more. Across them, 292 findings — 0 critical, 1 high. The highest contribution is RHSA-2025:12010 in sqlite 3.26.0-19.el8_9, fixed in 0:3.26.0-20.el8_10.

Radar Score

3,3350141249

292 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/mongodb/mongodb-kubernetes-operator	0.13.0	0118121	1,687
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.19.6	001261	882
library/alpine	latest	0001	13
graylog/graylog	7.2.0	001166	753

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

291 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-102633	expat@2.6.1-2ubuntu0.6	no fix listed
Low	RHSA-2025:8411	krb5@1.18.2-31.el8_10	0:1.18.2-32.el8_10
Low	GO-2026-6091	stdlib@go1.24.2	1.25.13
Low	GO-2025-4008	stdlib@go1.24.2	1.24.8
Low	GO-2025-4010	stdlib@go1.24.2	1.24.8
Low	GHSA-hjcp-jmpx-g3qm	httpclient5@5.4.3	5.6.3
Low	UBUNTU-CVE-2026-89158	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.135.Final	4.1.137.Final
Low	RHSA-2025:8958	libxml2@2.9.7-19.el8_10	0:2.9.7-20.el8_10
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.18.8	2.18.9
Low	GO-2026-4865	stdlib@go1.24.2	1.25.9
Low	RHSA-2025:21977	libssh@0.9.6-14.el8	0:0.9.6-16.el8_10
Low	GO-2026-4976	stdlib@go1.24.2	1.25.10
Low	GO-2026-5039	stdlib@go1.24.2	1.25.11
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.130.Final	4.1.135.Final
Low	RHSA-2025:3828	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.16
Low	GHSA-cqgh-8p3p-mx4m	amqp-client@5.32.0	5.36.1
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-5856	stdlib@go1.24.2	1.25.12
Low	GHSA-4v53-57pg-c464	lz4-java@1.10.1	1.11.2
Low	GHSA-6cx8-rjf8-pr8g	lz4-java@1.10.1	1.11.2
Low	GHSA-gm45-99xc-r7wv	lz4-java@1.10.1	1.11.4
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.14.1	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-3.el8	0:2.4.0-1.el8_10
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-94283	libx11@2:1.8.7-1build1	no fix listed
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GO-2025-3750	stdlib@go1.24.2	1.23.10
Low	UBUNTU-CVE-2026-89157	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-89161	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.39-0ubuntu8.9	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.39.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.39.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.39.0	0.55.0
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-16599	wget@1.21.4-1ubuntu4.5	no fix listed
Low	GO-2026-4340	stdlib@go1.24.2	1.24.12
Low	GHSA-vvgp-rfg2-7rr6	jackson-databind@2.18.8	2.18.9
Low	RHSA-2026:76777	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.43
Low	RHSA-2026:1852	util-linux@2.32.1-46.el8	0:2.32.1-48.el8_10
Low	UBUNTU-CVE-2026-3832	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	RHSA-2026:13285	libcap@2.48-6.el8_9	0:2.48-6.el8_10.1
Low	GHSA-5m9f-rphj-c435	amqp-client@5.32.0	5.33.0
Low	RHSA-2026:55804	nghttp2@1.33.0-6.el8_10.1	0:1.33.0-6.el8_10.3
Low	RHSA-2026:11349	libxml2@2.9.7-19.el8_10	0:2.9.7-21.el8_10.4
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	GHSA-mcr4-qmvw-px4g	lz4-java@1.10.1	1.11.4
Low	UBUNTU-CVE-2026-5419	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-86805	glibc@2.39-0ubuntu8.9	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.0.37latest	yesterday	7.2.0	0141249	3,335
3.0.36	8 days ago	7.2.0-rc.2-1	0141247	3,298
3.0.35	15 days ago	7.2.0-rc.1-1	0140252	3,343
3.0.34	22 days ago	7.2.0-beta.4-1	0142253	3,425
3.0.33	29 days ago	7.2.0-beta.3-1	0147272	3,652
3.0.32	1 month ago	7.2.0-beta.2-1	0145249	3,310
3.0.31	1 month ago	7.2.0-beta.1-1	0132226	2,755
3.0.30	1 month ago	7.2.0-beta.1-1	0132226	2,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kong-z/graylog.svg)](https://charts.stackradar.io/charts/kong-z/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.