StackRadar

graylog Helm chart

t3n

Scored 14 Sept 2026

Graylog is a centralized logging solution that allows the user to aggregate and search through logs

Latest 1.0.0 7 years agoapp version 2.4.3 1Artifact Hub

graylog 1.0.0 deploys 3 container images: docker.elastic.co/elasticsearch/elasticsearch, library/mongo and graylog2/server. Across the 2 measured, 334 findings10 critical, 45 high 3 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.9.1, fixed in 2.12.2.

Radar Score

8,0631045149129

334 findings over 2 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
docker.elastic.co/elasticsearch/elasticsearch5.3.3unmeasured
library/mongo3.6.3001221398
graylog2/server2.4.3-310451371087,665

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

138 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-45x9-q6vj-cqgqshiro-core@1.4.01.10.0
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.8.92.8.11.5
MediumGHSA-43gc-mjxg-gvrqxstream@1.4.91.4.16
MediumGHSA-p2v9-g2qv-p635netty@3.10.6.Finalno fix listed
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.6.Final4.1.45
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.8.92.8.11.4
MediumGHSA-cxfm-5m4g-x7xpxstream@1.4.91.4.18
MediumGHSA-7hwc-46rm-65jhxstream@1.4.91.4.10
MediumGHSA-56p8-3fh9-4cvqxstream@1.4.91.4.16
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.8.92.12.6.1
MediumDLA-2082-1unzip@6.0-16+deb8u36.0-16+deb8u6
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.8.92.9.10.4
MediumGHSA-8p8g-f9vg-r7xrretrofit@2.3.02.5.0
MediumGHSA-6wf9-jmg9-vxccxstream@1.4.91.4.18
MediumGHSA-j379-9jr9-w5cqretrofit@2.3.02.5.0
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.44.5.13
MediumGHSA-h4x4-5qp2-wp46jackson-datatype-jsr310@2.8.92.9.8
MediumGHSA-xmc8-26q4-qjhxjackson-dataformat-cbor@2.8.92.11.4
MediumGHSA-6mcm-j9cj-3vc3mina-core@2.0.162.0.22
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.31.11.0
MediumDSA-4157-1openssl@1.0.1t-1+deb8u71.0.1t-1+deb8u8
MediumGHSA-rc57-9r3x-98cqdrools-core@6.5.0.Final7.60.0.Final
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.8.92.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.8.92.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.4.03.25.5
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.171.31
MediumDLA-1917-1curl@7.38.0-4+deb8u107.38.0-4+deb8u16
MediumGHSA-fj32-6v7m-57pgelasticsearch@2.4.45.6.15
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.52.7
MediumDLA-1701-1openssl@1.0.1t-1+deb8u81.0.1t-1+deb8u11
MediumDSA-4195-1wget@1.16-1+deb8u41.16-1+deb8u5
MediumGHSA-mvr2-9pj6-7w5jguava@23.024.1.1-android
MediumGHSA-f256-j965-7f32netty@3.10.6.Finalno fix listed
MediumDLA-1833-1bzip2@1.0.6-7+b31.0.6-7+deb8u1
MediumGHSA-f8cc-g7j8-xxpmxstream@1.4.91.4.20
MediumDLA-1637-1apt@1.0.9.8.41.0.9.8.5
MediumGHSA-5h29-qq92-wj7fmina-core@2.0.162.0.21
MediumGHSA-hfq9-hggm-c56qxstream@1.4.91.4.21
MediumDLA-1672-1curl@7.38.0-4+deb8u107.38.0-4+deb8u14
MediumGHSA-c28r-hw5m-5gv3aws-java-sdk-s3@1.11.1741.12.261
MediumDLA-1568-1curl@7.38.0-4+deb8u107.38.0-4+deb8u13
MediumDLA-1601-1perl@5.20.2-3+deb8u95.20.2-3+deb8u12
MediumDLA-1730-3libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u4
MediumGHSA-wx5j-54mm-rqqqnetty@3.10.6.Finalno fix listed
MediumDLA-1498-1curl@7.38.0-4+deb8u107.38.0-4+deb8u12
MediumGHSA-wrvw-hg22-4m67protobuf-java@3.4.03.16.1
MediumDSA-4172-1perl@5.20.2-3+deb8u95.20.2-3+deb8u10
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.171.32
MediumGHSA-6mjq-h674-j845netty-handler@4.1.6.Final4.1.94.Final
MediumDLA-1613-1sqlite3@3.8.7.1-1+deb8u23.8.7.1-1+deb8u3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest7 years ago2.4.310451491298,063

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/t3n/graylog.svg)](https://charts.stackradar.io/charts/t3n/graylog)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.