openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 yesterdayapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,355 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,694252501,098

1,355 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

556 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GO-2026-6605	stdlib@go1.26.8	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	ALPINE-CVE-2026-3784	curl@8.14.1-r2	8.14.1-r4
Low	CGA-p3fp-cff9-hfhm	minio@0.20251015.172955-r10	0.20260922.192518-r2
Low	GO-2026-6610	stdlib@go1.26.8	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.2.0	10.5.1
Low	CGA-3q86-57h7-3r8v	minio@0.20251015.172955-r10	0.20260520.234452-r3
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.53.0	0.55.0
Low	RUSTSEC-2023-0071	rsa@0.9.10	no fix listed
Low	GHSA-fw7p-63qq-7hpr	filippo.io/edwards25519@v1.1.0	1.1.1
Low	GHSA-w6r9-248c-frg8	github.com/rabbitmq/amqp091-go@v1.10.0	1.14.0
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63074	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	CGA-mwr9-pcvr-249m	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	UBUNTU-CVE-2026-88829	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	GHSA-xpv3-w29h-x7cv	oauthlib@3.3.1	4.0.0
Low	UBUNTU-CVE-2016-2781	coreutils@8.32-4.1ubuntu1.4	no fix listed
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-9	no fix listed
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	ALPINE-CVE-2026-5545	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2025-14819	curl@8.14.1-r2	8.14.1-r4
Low	GO-2026-4970	stdlib@go1.25.10	1.25.12
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-8458	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2025-14524	curl@8.14.1-r2	8.14.1-r4
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.6.1	1.6.3
Low	UBUNTU-CVE-2025-14831	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	CGA-6834-prq9-6rx2	busybox@1.37.0-r60	1.38.0-r0
Low	UBUNTU-CVE-2026-38754	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	GO-2026-5777	github.com/go-chi/chi/v5@v5.2.2	5.3.0
Low	GHSA-jxxr-4gwj-5jf2	brace-expansion@5.0.4	5.0.6
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.2.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.11	7.5.18
Low	GHSA-gh4c-6fx4-qh6g	urllib3@2.7.0	2.8.0
Low	DEBIAN-CVE-2026-95209	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GO-2025-4012	stdlib@go1.25.0	1.24.8
Low	ALPINE-CVE-2026-103111	pcre2@10.48-r0	10.49-r0
Low	UBUNTU-CVE-2026-103111	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-90954	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.2.0	10.7.1
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	yesterday	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.