grafana/alloy:v1.11.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of grafana/alloy
grafana/alloy:v1.11.3 resolved to 8c7256f412fe, scanned 14 Sept 2026: 271 findings, 0 critical; deployed by 1 chart, among them grafana-sampling.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
271 distinct on this digest
Findings for digest 8c7256f412fe as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-0861 | glibc | 2.39-0ubuntu8.7 |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | 1.10.3-2ubuntu0.2 |
| Low | UBUNTU-CVE-2026-31789 | openssl | 3.0.13-0ubuntu3.9 |
| Low | UBUNTU-CVE-2025-69419 | openssl | 3.0.13-0ubuntu3.7 |
| Low | UBUNTU-CVE-2026-54874 | openssl | 3.0.13-0ubuntu3.15 |
| Low | GHSA-qw9x-cqr3-wc7r | github.com/ | 1.2.8 |
| Low | GHSA-cgrx-mc8f-2prm | github.com/ | 1.2.8 |
| Low | GHSA-cgrx-mc8f-2prm | github.com/ | 1.13.0 |
| Low | GHSA-65xw-vw82-r86x | github.com/ | 1.3.6 |
| Low | UBUNTU-CVE-2026-42766 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2025-32990 | gnutls28 | 3.8.3-1.1ubuntu3.4+Fips1 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2025-15281 | glibc | 2.39-0ubuntu8.7 |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2024-12243 | gnutls28 | 3.8.3-1.1ubuntu3.4+Fips1 |
| Low | UBUNTU-CVE-2025-32989 | gnutls28 | 3.8.3-1.1ubuntu3.4+Fips1 |
| Low | UBUNTU-CVE-2026-9538 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2025-6395 | gnutls28 | 3.8.3-1.1ubuntu3.4+Fips1 |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | GHSA-cfpf-hrx2-8rv6 | github.com/ | 1.17.7 |
| Low | UBUNTU-CVE-2026-2219 | dpkg | 1.22.6ubuntu6.6 |
| Low | UBUNTU-CVE-2026-42497 | perl | 5.38.2-3.2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-41992 | gzip | 1.12-1ubuntu3.2 |
| Low | GHSA-qw64-3x98-g7q2 | github.com/ | 5.9.0 |
| Low | UBUNTU-CVE-2026-75803 | openssl | 3.0.13-0ubuntu3.15 |
| Low | UBUNTU-CVE-2026-4046 | glibc | 2.39-0ubuntu8.8 |
| Low | UBUNTU-CVE-2026-48959 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-5928 | glibc | 2.39-0ubuntu8.8 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-4437 | glibc | 2.39-0ubuntu8.8 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-hc8v-wwc9-vgxm | github.com/ | 5.19.2 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GHSA-pxq6-2prw-chj9 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-42767 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-48962 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | GHSA-m3xc-h892-ggx6 | github.com/ | 5.9.0 |
| Low | GHSA-qgq7-7hm3-q39j | github.com/ | 5.19.2 |
| Low | GHSA-9mj6-hxhv-w67j | github.com/ | 1.7.0 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.13-0ubuntu3.15 |
| Low | GHSA-q9hv-hpm4-hj6x | github.com/ | 1.6.3 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.8.3-1.1ubuntu3.5 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.39-0ubuntu8.8 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| grafana-samplinggrafana | 1.1.7 | v1.11.3 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.