StackRadar

mimir Helm chart

skyloud-helm-chartsVerified publisher

Scored 14 Sept 2026

Grafana Mimir

Latest 5.5.1 1 year agodeploys tag RELEASE.2023-09-30T07-02-29Z 0Artifact Hub

mimir 5.5.1 deploys 5 container images: quay.io/minio/minio, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 816 findings10 critical, 28 high 8 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-225.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion ^1.20.0-0; rendered for Kubernetes 1.20.0.

Radar Score

10,6511028139639

816 findings over 5 of 5 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
quay.io/minio/minioRELEASE.2023-09-30T07-02-29Z511522184,064
grafana/rollout-operatorv0.14.0039931,038
grafana/mimir×14r292-5f0187202141191,319
nginxinc/nginx-unprivileged1.25-alpine021820674
quay.io/minio/mc×3RELEASE.2023-09-29T16-41-22Z510461893,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

337 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalRHSA-2024:2722glibc@2.28-225.el80:2.28-236.el8_9.13
CriticalRHSA-2024:3312glibc@2.28-225.el80:2.28-225.el8_8.11
CriticalRHSA-2023:5455KEVglibc@2.28-225.el80:2.28-225.el8_8.6
CriticalRHSA-2023:5837KEVnghttp2@1.33.0-3.el8_2.10:1.33.0-5.el8_8
CriticalRHSA-2025:12010sqlite@3.26.0-18.el8_80:3.26.0-20.el8_10
HighALPINE-CVE-2024-6119openssl@3.1.4-r53.1.7-r0
HighGHSA-xx8w-mq23-29g4github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a0.0.0-20240131185645-0ae4915a9391
HighALPINE-CVE-2024-2398curl@8.5.0-r08.7.1-r0
HighRHSA-2025:1301KEVgcc@8.5.0-18.el80:8.5.0-23.el8_10
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.13.00.17.0
HighRHSA-2024:0625libssh@0.9.6-10.el8_80:0.9.6-13.el8_8
HighRHSA-2024:5654curl@7.61.1-30.el8_8.30:7.61.1-34.el8_10.2
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.15.00.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.21.00.23.0
HighRHSA-2024:3701nghttp2@1.33.0-3.el8_2.10:1.33.0-5.el8_8.1
HighALPINE-CVE-2024-2511openssl@3.1.4-r53.1.4-r6
HighRHSA-2024:8792krb5@1.18.2-25.el8_80:1.18.2-26.el8_8.3
HighRHSA-2025:21776expat@2.2.5-11.el80:2.5.0-1.el8_10
HighRHSA-2025:22607expat@2.2.5-11.el80:2.2.10-1.el8_8
MediumGO-2024-2687stdlib@go1.22.11.21.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.22.00.52.0
MediumRHSA-2025:11035lz4@1.8.3-3.el8_40:1.8.3-5.el8_10
MediumALPINE-CVE-2024-7264curl@8.5.0-r08.9.1-r0
MediumRHSA-2024:0572oniguruma@6.8.2-2.el80:6.8.2-2.1.el8_8
MediumRHSA-2024:0889oniguruma@6.8.2-2.el80:6.8.2-2.1.el8_9
MediumALPINE-CVE-2024-5535openssl@3.1.4-r53.1.6-r0
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.22.00.31.0
MediumRHSA-2026:26275openssl@1:1.1.1k-9.el8_71:1.1.1k-16.el8_6
MediumALPINE-CVE-2024-6197curl@8.5.0-r08.9.0-r0
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.15.00.17.0
MediumGHSA-wg47-6jq2-q2hhgithub.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a0.0.0-20250403145552-8c70975283f9
MediumRHSA-2023:7877openssl@1:1.1.1k-9.el8_71:1.1.1k-12.el8_9
MediumALPINE-CVE-2024-45492expat@2.6.2-r02.6.3-r0
MediumALPINE-CVE-2024-4741openssl@3.1.4-r53.1.6-r0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.59.01.79.3
MediumRHSA-2024:7847openssl@1:1.1.1k-9.el8_71:1.1.1k-14.el8_6
MediumRHSA-2025:10698libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.1
MediumRHSA-2025:12239libxml2@2.9.7-16.el8_8.10:2.9.7-16.el8_8.9
MediumALPINE-CVE-2024-45491expat@2.6.2-r02.6.3-r0
MediumRHSA-2024:0154openssl@1:1.1.1k-9.el8_71:1.1.1k-12.el8_8
MediumRHSA-2024:1601curl@7.61.1-30.el8_8.30:7.61.1-33.el8_9.5
MediumRHSA-2024:1412gmp@1:6.1.2-10.el81:6.1.2-11.el8_8.1
MediumRHSA-2024:4743krb5@1.18.2-25.el8_80:1.18.2-26.el8_8.2
MediumRHSA-2024:5312krb5@1.18.2-25.el8_80:1.18.2-29.el8_10
MediumRHSA-2024:1615expat@2.2.5-11.el80:2.2.5-11.el8_9.1
MediumRHSA-2026:20611gnutls@3.6.16-6.el8_70:3.6.16-8.el8_10.6
MediumRHSA-2026:30850libtasn1@4.13-4.el8_70:4.13-4.el8_8.1
MediumRHSA-2026:30850gnutls@3.6.16-6.el8_70:3.6.16-7.el8_8.4
MediumALPINE-CVE-2024-45490expat@2.6.2-r02.6.3-r0
MediumRHSA-2024:6989expat@2.2.5-11.el80:2.2.5-15.el8_10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.5.1latest1 year agoRELEASE.2023-09-30T07-02-29Z102813963910,651

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/skyloud-helm-charts/mimir.svg)](https://charts.stackradar.io/charts/skyloud-helm-charts/mimir)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.