StackRadar

graylog Helm chart

t3n

Scored 14 Sept 2026

Graylog is a centralized logging solution that allows the user to aggregate and search through logs

Latest 1.0.0 7 years agoapp version 2.4.3 1Artifact Hub

graylog 1.0.0 deploys 3 container images: docker.elastic.co/elasticsearch/elasticsearch, library/mongo and graylog2/server. Across the 2 measured, 334 findings10 critical, 45 high 3 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.9.1, fixed in 2.12.2.

Radar Score

8,0631045149129

334 findings over 2 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
docker.elastic.co/elasticsearch/elasticsearch5.3.3unmeasured
library/mongo3.6.3001221398
graylog2/server2.4.3-310451371087,665

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

108 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-gqr6-r77p-c2pjgraylog2-server@2.4.36.3.12
LowDLA-1909-1freetype@2.5.2-3+deb8u22.5.2-3+deb8u4
LowGHSA-76vf-mpmx-777jgraylog2-server@2.4.36.0.14
LowDLA-1893-1cups@1.7.5-11+deb8u21.7.5-11+deb8u5
LowGHSA-6g32-pxv4-2wfjamqp-client@5.0.05.33.0
LowDLA-1684-1systemd@215-17+deb8u7215-17+deb8u10
LowDLA-2237-1cups@1.7.5-11+deb8u21.7.5-11+deb8u8
LowGHSA-mm8h-8587-p46hamqp-client@5.0.05.18.0
LowDLA-1936-1cups@1.7.5-11+deb8u21.7.5-11+deb8u6
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.6.Final4.1.137.Final
LowDLA-1496-1lcms2@2.6-3+deb8u12.6-3+deb8u2
LowGHSA-x83m-pf6f-pf9ghibernate-validator@6.0.2.Final6.2.0.Final
LowGHSA-qx7j-jv8m-fppramqp-client@5.0.05.31.0
LowDLA-2015-1nss@2:3.26-1+debu8u32:3.26-1+debu8u8
LowGHSA-fcvm-3cpj-f9qxshiro-core@1.4.02.2.0
LowDLA-2210-1apt@1.0.9.8.41.0.9.8.6
LowDLA-1762-1systemd@215-17+deb8u7215-17+deb8u12
LowDLA-1935-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u1
LowGHSA-xq3w-v528-46rvnetty-common@4.1.6.Final4.1.115.Final
LowGHSA-r7wm-3cxj-wff9jackson-core@2.8.92.18.8
LowDLA-2156-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u2
LowGHSA-389x-839f-4rhxnetty-common@4.1.6.Final4.1.118.Final
LowDLA-2221-1sqlite3@3.8.7.1-1+deb8u23.8.7.1-1+deb8u6
LowGHSA-2hjr-vmf3-xwvpelasticsearch@2.4.47.17.16
LowDLA-1405-1libgcrypt20@1.6.3-2+deb8u41.6.3-2+deb8u5
LowGHSA-hgj6-7826-r7m5jackson-databind@2.8.92.18.8
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.8.92.18.9
LowDLA-2266-1nss@2:3.26-1+debu8u32:3.26-1+debu8u11
LowGHSA-7g45-4rm6-3mm3guava@23.032.0.0-android
LowGHSA-q9q2-3ppx-mwqfgraylog2-server@2.4.36.2.0
LowDLA-2235-1dbus@1.8.22-0+deb8u11.8.22-0+deb8u3
LowDLA-1818-1dbus@1.8.22-0+deb8u11.8.22-0+deb8u2
LowGHSA-5mg8-w23w-74h3guava@23.032.0.0-android
LowDLA-1623-1tar@1.27.1-2+deb8u11.27.1-2+deb8u2
LowDLA-1931-1libgcrypt20@1.6.3-2+deb8u41.6.3-2+deb8u6
LowDLA-1846-1unzip@6.0-16+deb8u36.0-16+deb8u4
LowGHSA-g9fw-9x87-rmrjelasticsearch@2.4.46.8.13
LowDLA-1426-1cups@1.7.5-11+deb8u21.7.5-11+deb8u4
LowDLA-1726-1bash@4.3-11+deb8u14.3-11+deb8u2
LowDLA-1711-1systemd@215-17+deb8u7215-17+deb8u11
LowGHSA-wf8f-6423-gfxgjackson-core@2.8.92.13.0
LowGHSA-5v8f-xx9m-wj44elasticsearch@2.4.47.17.23
LowGHSA-5m9f-rphj-c435amqp-client@5.0.05.33.0
LowGHSA-g96c-x7rh-99r3graylog2-server@2.4.35.0.9
LowDLA-2047-1cups@1.7.5-11+deb8u21.7.5-11+deb8u7
LowGHSA-3fqm-frhg-7c85graylog2-server@2.4.35.0.9
LowDLA-1417-1ca-certificates@20141019+deb8u320141019+deb8u4
LowDLA-1563-1tzdata@2018d-0+deb8u12018g-0+deb8u1
LowDLA-1606-1gcc-4.9@4.9.2-10+deb8u14.9.2-10+deb8u2
LowDLA-1625-1tzdata@2018d-0+deb8u12018i-0+deb8u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest7 years ago2.4.310451491298,063

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/t3n/graylog.svg)](https://charts.stackradar.io/charts/t3n/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.