openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 21 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 2 days agoapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,387 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,780252461,134

1,387 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00011	113
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00024	161
public.ecr.aws/p1t3u8a3/api	v1.28.5	00322	276
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00217	202
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00321	269
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00017	91
public.ecr.aws/p1t3u8a3/db	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0006	33
public.ecr.aws/p1t3u8a3/http	v1.28.0	00319	257
public.ecr.aws/p1t3u8a3/images	v1.28.0	00321	269
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00433	372
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00217	202
library/caddy	2.10.2-alpine	0145156	2,441
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0017159	1,748
library/redis	8.10.2	00564	604
alpine/git	2.52.0	0234118	1,963
ghcr.io/openreplay/minio	2025	0056155	2,584
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

568 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RUSTSEC-2026-0348	rustls@0.23.45	0.23.46
Low	RUSTSEC-2026-0349	rustls@0.23.45	0.23.46
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2024-58251	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2026-4602	stdlib@go1.25.0	1.25.8
Low	CGA-cm76-79rx-8x72	minio@0.20251015.172955-r10	0.20260717.120751-r16
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0
Low	RUSTSEC-2026-0347	rustls@0.23.45	0.23.46
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252461,129	15,737
1.0.0	2 days ago	1.28.0	252461,134	15,780

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.