openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 2 days agoapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,355 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,694252501,098

1,355 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

556 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GHSA-8988-9cw3-xx77	urllib3@2.7.0	2.8.0
Low	CGA-6xxp-522c-cw36	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4980	stdlib@go1.25.8	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.34.0-3ubuntu1.8	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	CGA-4m52-xq38-74fx	busybox@1.37.0-r60	1.38.0-r0
Low	CGA-qgph-x37w-3c5g	busybox@1.37.0-r60	1.38.0-r1
Low	UBUNTU-CVE-2026-38752	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-38755	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	UBUNTU-CVE-2026-102010	gcc-12@12.3.0-1ubuntu1~22.04.3	no fix listed
Low	UBUNTU-CVE-2025-60876	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	GO-2026-4440	golang.org/x/net@v0.42.0	0.45.0
Low	GHSA-3wwx-pv8p-q78v	undici@6.27.0	6.28.1
Low	ALPINE-CVE-2026-88806	libx11@1.8.13-r0	1.8.14-r0
Low	DEBIAN-CVE-2026-67693	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.40.0	0.45.0
Low	GO-2025-4011	stdlib@go1.25.0	1.24.8
Low	GO-2025-4015	stdlib@go1.25.0	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.42.0	0.45.0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.4	7.1.6
Low	CGA-5f25-83x6-g6g7	minio@0.20251015.172955-r10	0.20260330.001845-r3
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	GHSA-69x3-g4r3-p962	github.com/slackhq/nebula@v1.9.5	1.10.3
Low	GHSA-52v5-jr5w-gjxr	sigstore@4.1.0	4.1.1
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.2.2	5.3.0
Low	PYSEC-2026-4183	pyjwt@2.14.0	2.15.0
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4603	stdlib@go1.25.0	1.25.8
Low	ALPINE-CVE-2026-3783	curl@8.14.1-r2	8.14.1-r4
Low	GO-2025-4175	stdlib@go1.25.0	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	DEBIAN-CVE-2026-95184	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	CGA-4j3c-3r24-cxjx	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.51.0	0.52.0
Low	CGA-57vw-6576-rc46	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.51.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.8	1.25.9
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.40.0	0.45.0
Low	CGA-4xrm-f3rh-9x9c	minio@0.20251015.172955-r10	0.20260520.234452-r3
Low	CGA-cv7r-xh94-7h54	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4982	stdlib@go1.25.8	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.53.0	0.55.0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	2 days ago	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.