mimir Helm chart

Name: mimir Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

skyloud-helm-charts

Scored 14 Sept 2026

Grafana Mimir

Latest 5.5.1 1 year agodeploys tag RELEASE.2023-09-30T07-02-29Z 0Artifact Hub

mimir 5.5.1 deploys 5 container images: quay.io/minio/minio, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 816 findings — 10 critical, 28 high — 8 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-225.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion ^1.20.0-0; rendered for Kubernetes 1.20.0.

Radar Score

10,6511028139639

816 findings over 5 of 5 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/minio/minio	RELEASE.2023-09-30T07-02-29Z	51152218	4,064
grafana/rollout-operator	v0.14.0	03993	1,038
grafana/mimir×14	r292-5f01872	0214119	1,319
nginxinc/nginx-unprivileged	1.25-alpine	021820	674
quay.io/minio/mc×3	RELEASE.2023-09-29T16-41-22Z	51046189	3,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

248 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2025:4051	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_10.3
Low	RHSA-2025:8686	glibc@2.28-225.el8	0:2.28-251.el8_10.22
Low	GHSA-hj3v-m684-v259	github.com/lestrrat-go/jwx@v1.2.26	1.2.29
Low	GO-2023-2185	stdlib@go1.21.1	1.20.11
Low	GHSA-c9v3-4pv7-87pr	github.com/coredns/coredns@v1.11.1	1.14.2
Low	RHSA-2024:3203	systemd@239-74.el8_8.5	0:239-82.el8
Low	GHSA-h749-fxx7-pwpg	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	no fix listed
Low	RHSA-2025:12450	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.2
Low	ALPINE-CVE-2024-4603	openssl@3.1.4-r5	3.1.5-r0
Low	ALPINE-CVE-2024-55549	libxslt@1.1.39-r0	1.1.39-r1
Low	ALPINE-CVE-2025-24855	libxslt@1.1.39-r0	1.1.39-r1
Low	RHSA-2025:4049	libtasn1@4.13-4.el8_7	0:4.13-5.el8_10
Low	RHSA-2026:57462	curl@7.61.1-30.el8_8.3	0:7.61.1-34.el8_10.13
Low	ALPINE-CVE-2024-0853	curl@8.5.0-r0	8.6.0-r0
Low	GHSA-h8mm-c463-wjq3	github.com/coredns/coredns@v1.11.1	1.14.3
Low	GHSA-qhmp-q7xh-99rh	github.com/coredns/coredns@v1.11.1	1.14.3
Low	GHSA-mr45-rx8q-wcm9	github.com/nats-io/nkeys@v0.4.5	0.4.6
Low	RHSA-2024:3233	libssh@0.9.6-10.el8_8	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.6-10.el8_8	0:0.9.6-17.el8_10
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.6.0	no fix listed
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	RHSA-2026:0991	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10
Low	GHSA-93mf-426m-g6x9	github.com/coredns/coredns@v1.11.1	1.12.4
Low	RHSA-2024:0582	rpm@4.14.3-26.el8	0:4.14.3-28.el8_8
Low	RHSA-2024:0647	rpm@4.14.3-26.el8	0:4.14.3-28.el8_9
Low	RHSA-2025:2722	krb5@1.18.2-25.el8_8	0:1.18.2-31.el8_10
Low	GHSA-m5vv-6r4h-3vj9	github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2	1.6.0-beta.4.0.20240610221955-50774cd97099
Low	GO-2026-4341	stdlib@go1.22.1	1.24.12
Low	RHSA-2026:4772	glibc@2.28-225.el8	0:2.28-251.el8_10.31
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.3	3.0.4
Low	RHSA-2025:15103	pam@1.3.1-25.el8	0:1.3.1-26.el8_8.2
Low	RHSA-2026:16799	krb5@1.18.2-25.el8_8	0:1.18.2-34.el8_10
Low	GO-2024-2887	stdlib@go1.22.1	1.21.11
Low	ALPINE-CVE-2025-26519	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r5
Low	GHSA-6wxm-mpqj-6jpf	github.com/golang/glog@v1.2.0	1.2.4
Low	GHSA-m9w6-wp3h-vq8g	github.com/coredns/coredns@v1.11.1	1.11.2
Low	GHSA-7f9x-gw85-8grf	github.com/lestrrat-go/jwx@v1.2.26	1.2.27
Low	RHSA-2024:1784	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_9.3
Low	RHSA-2026:36730	libsolv@0.7.20-4.el8_7	0:0.7.20-7.el8_10
Low	RHSA-2026:42733	glibc@2.28-225.el8	0:2.28-251.el8_10.40
Low	RHSA-2026:5585	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_10.5
Low	GHSA-mh55-gqvf-xfwm	github.com/rs/cors@v1.10.1	1.11.0
Low	GHSA-95fr-cm4m-q5p9	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240527191746-e0fe7cc39172
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.22.0	0.52.0
Low	GO-2024-2963	stdlib@go1.22.1	1.21.12
Low	RHSA-2026:65998	gzip@1.9-13.el8_5	0:1.9-15.el8_10
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.21.0	0.55.0
Low	RHSA-2025:10618	jq@1.6-6.el8	0:1.6-11.el8_10
Low	RHSA-2025:10619	jq@1.6-6.el8	0:1.6-6.el8_8.3
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.5.1latest	1 year ago	RELEASE.2023-09-30T07-02-29Z	1028139639	10,651

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/skyloud-helm-charts/mimir.svg)](https://charts.stackradar.io/charts/skyloud-helm-charts/mimir)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.