Vulnerability Reportgrafana/mimir:3.2.3

grafana/mimir:latestgrafana/mimir:3.2.3

digestsha256:0ed56db7d7713707eff00224ddd4c3096afa6cf1cbe43a6f9391c537f1416099

Executive Summary

Last scanned: Oct 26, 2026

Threat ScoreSAFE• Verified publisher grafana with TRUSTED verdict and reputation score 100.• Image is pinned by digest, providing immutability for production deployments.• INPUT 3 reports exposed_total 0 and post_total 0 vulnerabilities.• Maximum exposed severity is 0.0 and maximum post-exploit severity is 0.0.• No exposed surface or post-exploit findings are listed in INPUT 4 or INPUT 5.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It comes from the verified grafana publisher and is pinned by digest, which supports supply-chain integrity. The provided scan stats show zero exposed vulnerabilities, zero post-exploit-only findings, and maximum severity 0.0. No CVE IDs are present in the supplied findings, so there are no specific vulnerability mitigations to apply. Continue standard monitoring and update practices.

Relevant for grafana/mimir:3.2.3

Most CVEs in Go images aren't exploitable

This image is a Go binary — most findings can be ruled out with three commands. How to prove which ones are real.

Read the article

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.