mimir Helm chart

Name: mimir Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

skyloud-helm-charts

Scored 14 Sept 2026

Grafana Mimir

Latest 5.5.1 1 year agodeploys tag RELEASE.2023-09-30T07-02-29Z 0Artifact Hub

mimir 5.5.1 deploys 5 container images: quay.io/minio/minio, grafana/rollout-operator, grafana/mimir, nginxinc/nginx-unprivileged and 1 more. Across them, 816 findings — 10 critical, 28 high — 8 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-225.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion ^1.20.0-0; rendered for Kubernetes 1.20.0.

Radar Score

10,6511028139639

816 findings over 5 of 5 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/minio/minio	RELEASE.2023-09-30T07-02-29Z	51152218	4,064
grafana/rollout-operator	v0.14.0	03993	1,038
grafana/mimir×14	r292-5f01872	0214119	1,319
nginxinc/nginx-unprivileged	1.25-alpine	021820	674
quay.io/minio/mc×3	RELEASE.2023-09-29T16-41-22Z	51046189	3,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

70 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GO-2024-2687	stdlib@go1.22.1	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.22.0	0.52.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	ALPINE-CVE-2024-7264	curl@8.5.0-r0	8.9.1-r0
Medium	RHSA-2024:0572	oniguruma@6.8.2-2.el8	0:6.8.2-2.1.el8_8
Medium	RHSA-2024:0889	oniguruma@6.8.2-2.el8	0:6.8.2-2.1.el8_9
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r5	3.1.6-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.22.0	0.31.0
Medium	RHSA-2026:26275	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-16.el8_6
Medium	ALPINE-CVE-2024-6197	curl@8.5.0-r0	8.9.0-r0
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.15.0	0.17.0
Medium	GHSA-wg47-6jq2-q2hh	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20250403145552-8c70975283f9
Medium	RHSA-2023:7877	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-12.el8_9
Medium	ALPINE-CVE-2024-45492	expat@2.6.2-r0	2.6.3-r0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.4-r5	3.1.6-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.59.0	1.79.3
Medium	RHSA-2024:7847	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-16.el8_8.1	0:2.9.7-21.el8_10.1
Medium	RHSA-2025:12239	libxml2@2.9.7-16.el8_8.1	0:2.9.7-16.el8_8.9
Medium	ALPINE-CVE-2024-45491	expat@2.6.2-r0	2.6.3-r0
Medium	RHSA-2024:0154	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-12.el8_8
Medium	RHSA-2024:1601	curl@7.61.1-30.el8_8.3	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:1412	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8_8.1
Medium	RHSA-2024:4743	krb5@1.18.2-25.el8_8	0:1.18.2-26.el8_8.2
Medium	RHSA-2024:5312	krb5@1.18.2-25.el8_8	0:1.18.2-29.el8_10
Medium	RHSA-2024:1615	expat@2.2.5-11.el8	0:2.2.5-11.el8_9.1
Medium	RHSA-2026:20611	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_10.6
Medium	RHSA-2026:30850	libtasn1@4.13-4.el8_7	0:4.13-4.el8_8.1
Medium	RHSA-2026:30850	gnutls@3.6.16-6.el8_7	0:3.6.16-7.el8_8.4
Medium	ALPINE-CVE-2024-45490	expat@2.6.2-r0	2.6.3-r0
Medium	RHSA-2024:6989	expat@2.2.5-11.el8	0:2.2.5-15.el8_10
Medium	RHSA-2024:4264	openldap@2.4.46-18.el8	0:2.4.46-19.el8_10
Medium	RHSA-2024:0627	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_9.1
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10
Medium	ALPINE-CVE-2025-9230	openssl@3.1.4-r5	3.1.8-r1
Medium	RHSA-2025:2507	libxml2@2.9.7-16.el8_8.1	0:2.9.7-16.el8_8.7
Medium	RHSA-2025:2686	libxml2@2.9.7-16.el8_8.1	0:2.9.7-19.el8_10
Medium	GO-2026-5757	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	no fix listed
Medium	RHSA-2024:3303	libxml2@2.9.7-16.el8_8.1	0:2.9.7-16.el8_8.4
Medium	RHSA-2024:3344	glibc@2.28-225.el8	0:2.28-251.el8_10.2
Medium	ALPINE-CVE-2025-59375	expat@2.6.2-r0	2.7.2-r0
Medium	ALPINE-CVE-2024-8176	expat@2.6.2-r0	2.7.0-r0
Medium	RHSA-2025:3913	expat@2.2.5-11.el8	0:2.2.5-17.el8_10
Medium	ALPINE-CVE-2024-9681	curl@8.5.0-r0	8.11.0-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.32.0	1.33.0
Medium	RHSA-2026:8534	libarchive@3.3.3-5.el8	0:3.3.3-7.el8_10
Medium	RHSA-2026:9026	libarchive@3.3.3-5.el8	0:3.3.3-5.el8_8.2
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.22.0	0.52.0
Medium	GHSA-cvx7-x8pj-x2gw	github.com/coredns/coredns@v1.11.1	1.12.2
Medium	ALPINE-CVE-2025-0725	curl@8.5.0-r0	8.12.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.5.1latest	1 year ago	RELEASE.2023-09-30T07-02-29Z	1028139639	10,651

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/skyloud-helm-charts/mimir.svg)](https://charts.stackradar.io/charts/skyloud-helm-charts/mimir)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.