mimir Helm chart

Name: mimir Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

skyloud-helm-charts

Scored 14 Sept 2026

Grafana Mimir

Latest 5.5.1 1 year agodeploys tag RELEASE.2023-09-30T07-02-29Z 0Artifact Hub

mimir 5.5.1 deploys 5 container images: quay.io/minio/minio, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 816 findings — 10 critical, 28 high — 8 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-225.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion ^1.20.0-0; rendered for Kubernetes 1.20.0.

Radar Score

10,6511028139639

816 findings over 5 of 5 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/minio/minio	RELEASE.2023-09-30T07-02-29Z	51152218	4,064
grafana/rollout-operator	v0.14.0	03993	1,038
grafana/mimir×14	r292-5f01872	0214119	1,319
nginxinc/nginx-unprivileged	1.25-alpine	021820	674
quay.io/minio/mc×3	RELEASE.2023-09-29T16-41-22Z	51046189	3,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

248 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:66451	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.22.0	0.45.0
Low	RHSA-2026:58938	sqlite@3.26.0-18.el8_8	0:3.26.0-21.el8_10
Low	RHSA-2026:58939	sqlite@3.26.0-18.el8_8	0:3.26.0-18.el8_8.3
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.21.0	0.38.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.59.0	1.83.1
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.4	0.7.7
Low	GO-2023-2382	stdlib@go1.21.1	1.20.12
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.22.0	0.52.0
Low	RHSA-2024:3163	pam@1.3.1-25.el8	0:1.3.1-33.el8
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.22.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.22.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.1	1.21.8
Low	GO-2024-3106	stdlib@go1.22.1	1.22.7
Low	ALPINE-CVE-2024-2004	curl@8.5.0-r0	8.7.1-r0
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	RHSA-2025:15004	krb5@1.18.2-25.el8_8	0:1.18.2-26.el8_8.5
Low	RHSA-2026:0728	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10
Low	GO-2024-2600	stdlib@go1.21.1	1.21.8
Low	GHSA-pvcr-v8j8-j5q3	github.com/lestrrat-go/jwx@v1.2.26	1.2.28
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.59.0	1.82.1
Low	GO-2024-2609	stdlib@go1.21.1	1.21.8
Low	GO-2024-3107	stdlib@go1.22.1	1.22.7
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	RHSA-2025:8958	libxml2@2.9.7-16.el8_8.1	0:2.9.7-20.el8_10
Low	GO-2024-2824	stdlib@go1.22.1	1.22.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.14.0	1.17.7
Low	RHSA-2026:33126	glibc@2.28-225.el8	0:2.28-251.el8_10.38
Low	ALPINE-CVE-2024-6874	curl@8.5.0-r0	8.9.0-r0
Low	RHSA-2026:13285	libcap@2.48-5.el8_8	0:2.48-6.el8_10.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.22.0	0.52.0
Low	RHSA-2026:64809	expat@2.2.5-11.el8	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-225.el8	0:2.28-251.el8_10.16
Low	GO-2023-2186	stdlib@go1.21.1	1.20.11
Low	RHSA-2026:50050	systemd@239-74.el8_8.5	0:239-74.el8_8.7
Low	RHSA-2026:20587	glibc@2.28-225.el8	0:2.28-251.el8_10.37
Low	GHSA-32fw-gq77-f2f2	github.com/eclipse/paho.mqtt.golang@v1.4.3	1.5.1
Low	GO-2024-3333	golang.org/x/net@v0.21.0	0.33.0
Low	RHSA-2026:43420	acl@2.2.53-1.el8	0:2.4.0-1.el8_10
Low	RHSA-2025:1517	libxml2@2.9.7-16.el8_8.1	0:2.9.7-18.el8_10.2
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	RHSA-2025:21977	libssh@0.9.6-10.el8_8	0:0.9.6-16.el8_10
Low	GO-2024-3105	stdlib@go1.22.1	1.22.7
Low	GO-2026-4981	stdlib@go1.22.1	1.25.10
Low	GO-2025-3563	stdlib@go1.22.1	1.23.8
Low	GO-2026-4977	stdlib@go1.22.1	1.25.10
Low	GO-2024-2610	stdlib@go1.21.1	1.21.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.5.1latest	1 year ago	RELEASE.2023-09-30T07-02-29Z	1028139639	10,651

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/skyloud-helm-charts/mimir.svg)](https://charts.stackradar.io/charts/skyloud-helm-charts/mimir)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.