StackRadar

ghcr.io/grafana/alloy-operator:1.14.2 container image

GitHub Container Registry

Scanned 23 Oct 2026

Deployed by 1 of 18,232 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/grafana/alloy-operator

ghcr.io/grafana/alloy-operator:1.14.2 resolved to 44afd94d0784, scanned 23 Oct 2026: 87 findings, 0 critical; deployed by 1 chart, among them alloy-operator.

Radar Score

93000978

87 findings on digest 44afd94d0784 · scanned 23 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.14.2resolves to44afd94d07841 charttoday00978930

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

78 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 44afd94d0784 as scanned on 23 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 23 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowRHSA-2026:52674libarchive@3.5.3-9.el9_70:3.5.3-11.el9_8
LowRHSA-2026:55440glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.9
LowRHSA-2026:55439curl@7.76.1-40.el90:7.76.1-40.el9_8.5
LowRHSA-2026:71585libxml2@2.9.13-14.el9_8.10:2.9.13-14.el9_8.5
LowRHSA-2026:69126curl@7.76.1-40.el90:7.76.1-40.el9_8.7
LowGO-2026-6603golang.org/x/net@v0.56.00.60.0
LowGO-2026-6603stdlib@go1.26.41.26.9
LowGO-2026-5972stdlib@go1.26.41.25.13
LowGO-2026-6088stdlib@go1.26.41.25.13
LowGO-2026-6089stdlib@go1.26.41.25.13
LowGO-2026-6090stdlib@go1.26.41.25.13
LowGO-2026-6611stdlib@go1.26.41.26.9
LowGO-2026-6611golang.org/x/net@v0.56.00.60.0
LowGO-2026-6218stdlib@go1.26.41.25.13
LowGO-2026-5942stdlib@go1.26.41.26.6
LowRHSA-2026:42089glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.2
LowRHSA-2026:81532pcre2@10.40-6.el90:10.40-7.el9_8
LowGO-2026-6355golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-5064github.com/containerd/containerd@v1.7.33no fix listed
LowGO-2026-5970golang.org/x/text@v0.38.00.39.0
LowRHSA-2026:80511curl@7.76.1-40.el90:7.76.1-40.el9_8.8
LowGO-2026-6303golang.org/x/crypto@v0.53.00.55.0
LowGO-2026-6354golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-6617golang.org/x/net@v0.56.00.60.0
LowGO-2026-6617stdlib@go1.26.41.26.9
LowGO-2026-6608stdlib@go1.26.41.26.9
LowGHSA-8xwf-rjm4-xvhvoras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-6607stdlib@go1.26.41.26.9
LowGHSA-jxpm-75mh-9fp7oras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-6609stdlib@go1.26.41.26.9
LowRHSA-2026:77396openssl@1:3.5.5-4.el9_81:3.5.8-2.el9_8
LowGHSA-259r-337f-4rfwgithub.com/klauspost/compress@v1.18.41.18.7
LowGO-2026-6629golang.org/x/text@v0.38.00.41.0
LowRHSA-2026:58936sqlite@3.34.1-10.el9_80:3.34.1-11.el9_8
LowRHSA-2026:42952glibc@2.34-270.el9_80:2.34-274.el9_8
LowGO-2026-6613stdlib@go1.26.41.26.9
LowGO-2026-6605stdlib@go1.26.41.26.9
LowGO-2026-6610golang.org/x/net@v0.56.00.60.0
LowGO-2026-6610stdlib@go1.26.41.26.9
LowRHSA-2026:39315libsolv@0.7.24-5.el9_80:0.7.24-6.el9_8
LowGHSA-fxhp-mv3v-67qporas.land/oras-go/v2@v2.6.02.6.2
LowGHSA-pg57-6jwg-q645github.com/containerd/containerd@v1.7.331.7.36
LowGO-2026-4970stdlib@go1.26.41.25.12
LowRHSA-2026:64800glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.10
LowGO-2026-5622github.com/containerd/containerd@v1.7.33no fix listed
LowRHSA-2026:33226glibc@2.34-270.el9_80:2.34-272.el9_8
LowRHSA-2026:50147libgcrypt@1.10.0-11.el90:1.10.0-13.el9_8
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.80.01.83.1
LowRHSA-2026:79281glibc@2.34-270.el9_80:2.34-283.el9_8
LowRHSA-2026:61247libxml2@2.9.13-14.el9_8.10:2.9.13-14.el9_8.4

Used by

1 chart
ChartVersionTagContainers
alloy-operatorgrafana0.9.21.14.21

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 23 Oct 2026 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.