Observability
Grafana Loki: supported versions and open vulnerabilities today
Grafana Loki 3.7 and 3.6 are supported; 3.5 reached end of life on Mar 26, 2026; the latest release is 3.7.8. No high or critical advisories for Grafana Loki were published in the last 12 months (1 lower-severity); none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against endoflife.date, OSV.dev, CISA KEV and deps.dev.
- Latest release
- 3.7.8
- GitHub stars
- 29k
- Licence
- AGPL-3.0
- OpenSSF Scorecard
- 8.1 / 10
Supported versions
Security advisories
1 advisory published in the last 12 months. 2 in total since records began. Checked packages: github.com/grafana/loki/v3 and github.com/grafana/loki.
All github.com/grafana/loki/v3 advisories on OSV.devAll github.com/grafana/loki advisories on OSV.dev
Licence
Grafana Loki is AGPLv3 (relicensed in 2021)
Grafana Labs relicensed Loki from Apache 2.0 to AGPLv3 in 2021. If you modify Loki and serve it to users, you must publish your changes.
Maintenance and supply chain
OpenSSF Scorecard 8.1 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 2 issue updates found in the last 90 days.
Weakest checks
- Unsigned releases (Signed-Releases 0/10)
- No OpenSSF best-practices badge (CII-Best-Practices 0/10)
Example stacks with Grafana Loki
Docs and release notes
Check Grafana Loki in your own stack
This page checks Grafana Loki in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.