openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 yesterdayapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,355 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,694252501,098

1,355 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

556 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	CGA-24vg-ww3h-jmhg	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4977	stdlib@go1.25.8	1.25.10
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	CGA-5r6c-pjcp-hw4c	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4986	stdlib@go1.25.8	1.25.10
Low	UBUNTU-CVE-2026-29004	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	CGA-589c-vqrc-jxvg	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4918	golang.org/x/net@v0.52.0	0.53.0
Low	GO-2026-4918	stdlib@go1.25.8	1.25.10
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GO-2025-3495	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-hffm-g8v7-wrv7	github.com/caddyserver/caddy/v2@v2.10.2	2.11.1
Low	GHSA-q4r8-xm5f-56gw	github.com/smallstep/certificates@v0.28.4	0.30.0
Low	ALPINE-CVE-2026-77214	expat@2.8.5-r0	2.9.0-r0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	CGA-35mx-c7ph-5wqg	openssl@3.6.3-r1	3.6.3-r5
Low	ALPINE-CVE-2026-11352	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	UBUNTU-CVE-2024-10524	wget@1.21.2-2ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.3	no fix listed
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GO-2025-4116	golang.org/x/crypto@v0.40.0	0.43.0
Low	GO-2025-4009	stdlib@go1.25.0	1.24.8
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	CGA-5g53-5f5m-79xg	minio@0.20251015.172955-r10	0.20260330.001845-r2
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.4	3.0.5
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.1.3	4.1.4
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.7	5.0.9
Low	GO-2025-4006	stdlib@go1.25.0	1.24.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.7	5.0.8
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	ALPINE-CVE-2026-93990	expat@2.7.5-r0	2.8.5-r0
Low	CGA-rhf4-9g4m-mxgh	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.51.0	0.52.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	GO-2026-4870	stdlib@go1.25.8	1.25.9
Low	CGA-7pcv-w9wj-3723	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	CGA-8m3r-xxp7-gpqg	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.51.0	0.52.0
Low	GO-2026-4971	stdlib@go1.25.8	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.