openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 yesterdayapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,355 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,694252501,098

1,355 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

556 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-84782	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	CGA-7x58-6p69-599g	minio@0.20251015.172955-r10	0.20260717.120751-r13
Low	GO-2026-6355	golang.org/x/crypto@v0.51.0	0.56.0
Low	CGA-393j-mrfx-mmvp	libxslt@1.1.45-r2	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GO-2026-4342	stdlib@go1.25.0	1.24.12
Low	ALPINE-CVE-2026-82209	curl@8.19.0-r0	8.22.0-r0
Low	CGA-6ph6-75jp-484p	zlib@1.3.2-r3	1.3.2.1_rc20260601-r0
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.19.0-r0	8.22.0-r0
Low	CGA-423r-p3g2-v2wq	openssl@3.6.2-r5	3.6.3-r0
Low	CGA-9m2v-9j9g-w4mh	minio@0.20251015.172955-r10	0.20260410.215259-r0
Low	GHSA-h749-fxx7-pwpg	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Low	CGA-4p6m-5fx9-gc3f	minio@0.20251015.172955-r10	0.20260717.120751-r3
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.8	no fix listed
Low	GHSA-47m2-4cr7-mhcw	github.com/quic-go/quic-go@v0.54.0	0.54.1
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.19.0-r0	8.22.0-r0
Low	GO-2025-4155	stdlib@go1.25.0	1.24.11
Low	UBUNTU-CVE-2026-48962	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2026-42011	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-9080	curl@8.19.0-r0	8.22.0-r0
Low	GO-2026-4639	github.com/caddyserver/caddy/v2@v2.10.2	2.11.2
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	GO-2025-4014	stdlib@go1.25.0	1.24.8
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	CGA-6qfj-584c-vc54	minio@0.20251015.172955-r10	0.20260717.120751-r10
Low	GO-2026-6303	golang.org/x/crypto@v0.51.0	0.55.0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.11	7.5.18
Low	CGA-3q7c-pwvr-j53q	minio@0.20251015.172955-r10	0.20260717.120751-r13
Low	GO-2026-6354	golang.org/x/crypto@v0.51.0	0.56.0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	CGA-354m-9r4m-xqmm	minio@0.20251015.172955-r10	0.20260922.192518-r2
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6617	stdlib@go1.26.8	1.26.9
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.