StackRadar

CVE-2021-36156

Medium

Advisory

Published 2 Sept 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
1 of 1
affected package

Path traversal in Grafana Loki

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
github.com/grafana/lokigolangv1.6.0, v1.6.2-0.20201026154740-6978ee5d7387, v1.6.2-0.20210429132126-d88f3996eaa2, v1.6.2-0.20210520072447-15d417efe103+5 more2.3.023
OSV records
GHSA-grj5-8x6q-hc9q

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/grafana/loki@v1.6.2-0.20240510183741-cef4c2826b4b
2.3.0

Open the chart page →

3,475
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/grafana/loki@v1.6.0
2.3.0

Open the chart page →

52,919
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/grafana/loki@v1.6.2-0.20231004111112-07cbef92268a
2.3.0

Open the chart page →

24,700
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
github.com/grafana/loki@v1.6.0
2.3.0

Open the chart page →

12,125
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

7,583
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/grafana/loki@v1.6.0
2.3.0

Open the chart page →

10,454
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

13,610
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

2,835
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0

Open the chart page →

2,333
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

8,608
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/grafana/loki@v1.6.2-0.20240221085104-f9d188620153
2.3.0

Open the chart page →

3,244
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/grafana/loki@v1.6.2-0.20210429132126-d88f3996eaa2
2.3.0

Open the chart page →

3,238
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

8,645
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

8,645
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0

Open the chart page →

5,161
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
github.com/grafana/loki@v1.6.0
2.3.0

Open the chart page →

3,365
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

24,319
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
github.com/grafana/loki@v1.6.2-0.20220718071907-6bd05c9a4399
2.3.0

Open the chart page →

2,175
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

11,069
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/grafana/loki@v1.6.2-0.20220718071907-6bd05c9a4399
2.3.0

Open the chart page →

19,168
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0

Open the chart page →

14,320
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

9,558
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

8,645
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0

Open the chart page →

3,731
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
github.com/grafana/loki@v1.6.0
2.3.0

Open the chart page →

9,754
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:7.5.609bb407e26ab
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0

Open the chart page →

16,506
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2021-36156.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0

Open the chart page →

18,908

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:8.2.500568d89c4f8
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0
3
governify/dashboard:lateste83a17ba5038
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0
2
grafana/grafana:8.5.042d3e6bc1865
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
2
grafana/grafana:7.3.5511bc20bfcd1
github.com/grafana/loki@v1.6.0
2.3.0
2
grafana/agent:v0.44.23364714a2f64
github.com/grafana/loki@v1.6.2-0.20240510183741-cef4c2826b4b
2.3.0
1
grafana/agent:v0.20.0825c09373d27
github.com/grafana/loki@v1.6.2-0.20210429132126-d88f3996eaa2
2.3.0
1
grafana/agent:v0.40.3f6cbec9409be
github.com/grafana/loki@v1.6.2-0.20231004111112-07cbef92268a
2.3.0
1
grafana/alloy:v1.1.1c3dac4e26471
github.com/grafana/loki@v1.6.2-0.20240221085104-f9d188620153
2.3.0
1
grafana/grafana:7.5.609bb407e26ab
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0
1
grafana/grafana:7.3.315b977f5207d
github.com/grafana/loki@v1.6.0
2.3.0
1
grafana/grafana:8.0.3696823fbc561
github.com/grafana/loki@v1.6.2-0.20210520072447-15d417efe103
2.3.0
1
grafana/grafana:7.3.46d42886b3ebe
github.com/grafana/loki@v1.6.0
2.3.0
1
grafana/grafana:7.2.1733842cca5bd
github.com/grafana/loki@v1.6.0
2.3.0
1
grafana/grafana:9.0.1a738d0744784
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
1
grafana/grafana:8.3.5cd7cb4345aa7
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
1
grafana/grafana:8.3.4cf81d2c753c8
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
1
grafana/grafana:7.4.5d322192ed2fa
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0
1
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
1
intel/multimodal-data-visualization:3.03426deb77337
github.com/grafana/loki@v1.6.2-0.20211015002020-7832783b1caa
2.3.0
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/grafana/loki@v1.6.2-0.20220718071907-6bd05c9a4399
2.3.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/grafana/loki@v1.6.2-0.20201026154740-6978ee5d7387
2.3.0
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
github.com/grafana/loki@v1.6.2-0.20220718071907-6bd05c9a4399
2.3.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.