grafana/grafana:13.1.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 4 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of grafana/grafana
grafana/grafana:13.1.0 resolved to 121a7a9ece6d, scanned 14 Sept 2026: 108 findings, 0 critical; deployed by 4 charts, among them lgtm-stack, opentelemetry-demo and dnation-kubernetes-monitoring-stack.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 121a7a9ece6d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-8926 | curl | 8.21.0-r0 |
| Low | GHSA-mh2q-q3fh-2475 | go.opentelemetry.io/ | 1.41.0 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-11352 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-11564 | curl | 8.21.0-r0 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-p4r4-xvrq-gvmc | github.com/ | 2.8.4 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |
| Low | GHSA-r277-6w6q-xmqw | github.com/ | 0.144.0 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-11586 | curl | 8.21.0-r0 |
| Low | GHSA-8wv5-x4w7-5gww | github.com/ | 0.24.0 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-9546 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-xhj3-7xw9-vr34 | github.com/ | 0.142.0 |
| Low | ALPINE-CVE-2026-33630 | c-ares | 1.34.8-r0 |
| Low | ALPINE-CVE-2026-82208 | curl | 8.22.0-r0 |
| Low | GHSA-mmfr-pmjx-hw9w | github.com/ | 0.141.0 |
| Low | ALPINE-CVE-2026-12064 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-8932 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-8286 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-8458 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-9547 | curl | 8.21.0-r0 |
| Low | GHSA-hcxc-wf8j-23hv | github.com/ | 1.18.0 |
| Low | ALPINE-CVE-2026-9080 | curl | 8.21.0-r0 |
| Low | ALPINE-CVE-2026-9545 | curl | 8.21.0-r0 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GHSA-ffqx-q65f-36jf | github.com/ | 2.10.3 |
| Low | GHSA-jpcw-4wr7-c3vq | github.com/ | 0.144.0 |
| Low | GHSA-cf98-j28v-49v6 | github.com/ | 1.18.0 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| lgtm-stacklgtm-stackVerified publisher | 0.1.3 | 13.1.0 | 1 |
| opentelemetry-demoopentelemetry-helmVerified publisher | 0.41.1, 0.41.0 | 13.1.0 | 2 |
| dnation-kubernetes-monitoring-stackdnationcloud | 4.0.2 | 13.1.0 | 1 |
| kube-prometheus-stackmesosphere | 87.16.0 | 13.1.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.