graylog 3.0.38 Helm chart

Name: graylog Helm chart 3.0.38: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kong-z

Scored 21 Oct 2026

Graylog is the centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data.

Version 3.0.38 yesterdayapp version 7.2.1 29Artifact Hub

graylog 3.0.38 deploys 5 container images: quay.io/mongodb/mongodb-kubernetes-operator, library/busybox, opensearchproject/opensearch, library/alpine and 1 more. Across them, 298 findings — 0 critical, 1 high. The highest contribution is RHSA-2025:12010 in sqlite 3.26.0-19.el8_9, fixed in 0:3.26.0-20.el8_10.

Radar Score

3,3960141255

298 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/mongodb/mongodb-kubernetes-operator	0.13.0	0118126	1,749
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.19.6	001261	882
library/alpine	latest	0001	13
graylog/graylog	7.2.1	001167	752

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

297 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.130.Final	4.1.135.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GO-2026-6605	stdlib@go1.24.2	1.26.9
Low	GHSA-xx22-p4ch-683r	lz4-java@1.10.1	1.11.1
Low	GO-2026-6610	stdlib@go1.24.2	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.39.0	0.60.0
Low	RHSA-2026:4772	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.31
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.39.0	0.55.0
Low	GHSA-gx83-3vf8-gh7j	jackson-databind@2.14.1	2.18.10
Low	RHSA-2026:36730	libsolv@0.7.20-6.el8	0:0.7.20-7.el8_10
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.135.Final	4.1.137.Final
Low	UBUNTU-CVE-2026-88647	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	GHSA-ph9c-7hw9-vhhw	jline-builtins@3.27.1	3.30.15
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.3	no fix listed
Low	UBUNTU-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-5ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-107778	krb5@1.20.1-6ubuntu2.10	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.17.1	2.18.8
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GO-2026-4970	stdlib@go1.24.2	1.25.12
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.14.1	2.18.9
Low	GHSA-7822-rcf6-97fx	amqp-client@5.32.0	5.36.0
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	RHSA-2026:5585	gnutls@3.6.16-8.el8_9.3	0:3.6.16-8.el8_10.5
Low	RHSA-2026:66451	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10
Low	RHSA-2026:20587	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.37
Low	GO-2025-4012	stdlib@go1.24.2	1.24.8
Low	UBUNTU-CVE-2026-103111	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-95210	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	RHSA-2026:33126	glibc@2.28-251.el8_10.13	0:2.28-251.el8_10.38
Low	GO-2026-4980	stdlib@go1.24.2	1.25.10
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-95209	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	GO-2026-4440	golang.org/x/net@v0.39.0	0.45.0
Low	GO-2025-4011	stdlib@go1.24.2	1.24.8
Low	GO-2025-4015	stdlib@go1.24.2	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.39.0	0.45.0
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.130.Final	4.1.133.Final
Low	GHSA-wjgm-6hv5-3cvf	jackson-databind@2.14.1	2.18.10
Low	GO-2026-4603	stdlib@go1.24.2	1.25.8
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.130.Final	4.1.135.Final
Low	GO-2025-4175	stdlib@go1.24.2	1.24.11
Low	GO-2026-4864	stdlib@go1.24.2	1.25.9
Low	GO-2026-4982	stdlib@go1.24.2	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.39.0	0.55.0
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.130.Final	4.1.135.Final
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.6	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.0.38latest	yesterday	7.2.1	0141255	3,396
3.0.37	7 days ago	7.2.0	0141268	3,443
3.0.36	15 days ago	7.2.0-rc.2-1	0141252	3,360
3.0.35	22 days ago	7.2.0-rc.1-1	0140257	3,405
3.0.34	28 days ago	7.2.0-beta.4-1	0142258	3,487
3.0.33	1 month ago	7.2.0-beta.3-1	0147277	3,714
3.0.32	1 month ago	7.2.0-beta.2-1	0145254	3,372
3.0.31	1 month ago	7.2.0-beta.1-1	0132231	2,817
3.0.30	1 month ago	7.2.0-beta.1-1	0132231	2,817

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kong-z/graylog.svg)](https://charts.stackradar.io/charts/kong-z/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.