grafana/alloy:v1.20.1 container image
Docker HubScanned 9 Oct 2026
Deployed by 1 of 18,071 indexed charts (latest versions) at this tag.Docker Hub all tags of grafana/alloy
grafana/alloy:v1.20.1 resolved to 2aa2099af76c, scanned 9 Oct 2026: 78 findings, 0 critical; deployed by 1 chart, among them alloy.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
78 distinct on this digest
Findings for digest 2aa2099af76c as scanned on 9 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 9 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-102474 | dash | no fix listed |
| Low | UBUNTU-CVE-2026-89156 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6599 | stdlib | 1.26.9 |
| Low | GO-2026-6600 | stdlib | 1.26.9 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6604 | stdlib | 1.26.9 |
| Low | GO-2026-6605 | stdlib | 1.26.9 |
| Low | GO-2026-6607 | stdlib | 1.26.9 |
| Low | GO-2026-6608 | stdlib | 1.26.9 |
| Low | GO-2026-6609 | stdlib | 1.26.9 |
| Low | GO-2026-6610 | golang.org/ | 0.60.0 |
| Low | GO-2026-6610 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | GO-2026-6612 | golang.org/ | 0.60.0 |
| Low | GO-2026-6612 | stdlib | 1.26.9 |
| Low | GO-2026-6613 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | golang.org/ | 0.60.0 |
| Low | UBUNTU-CVE-2026-95818 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-105712 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-89162 | pcre2 | no fix listed |
| Low | GO-2022-0635 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2026-40228 | systemd | no fix listed |