openreplay 1.0.0 Helm chart

Name: openreplay Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.0.0 yesterdayapp version 1.28.0 0Artifact Hub

openreplay 1.0.0 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,355 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,694252501,098

1,355 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.4	1235127	1,967
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

140 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.51.0	0.52.0
Medium	CGA-23xx-p5rw-vrp9	minio@0.20251015.172955-r10	0.20260922.192518-r2
Medium	GO-2026-6612	stdlib@go1.26.8	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.58.0	0.60.0
Medium	CGA-jp68-hqr9-4hcg	minio@0.20251015.172955-r10	0.20260512.133534-r0
Medium	GHSA-wf45-q9ch-q8gh	github.com/apache/thrift@v0.21.0	0.23.0
Medium	ALPINE-CVE-2026-66046	expat@2.7.5-r0	2.8.4-r0
Medium	CGA-mr42-j6xm-qp5c	minio@0.20251015.172955-r10	0.20260604.005411-r0
Medium	GO-2026-5284	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Medium	CGA-3w9x-5397-xrgx	minio@0.20251015.172955-r10	0.20260520.234452-r2
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.51.0	0.52.0
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	UBUNTU-CVE-2023-6237	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	UBUNTU-CVE-2022-41409	pcre2@10.39-3ubuntu0.1	no fix listed
Medium	CGA-5xqc-7w65-8f5v	minio@0.20251015.172955-r10	0.20260604.005411-r0
Medium	GHSA-5cx5-wh4m-82fh	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Medium	CGA-fc4v-3c8f-q86r	minio@0.20251015.172955-r10	0.20260520.234452-r2
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.51.0	0.52.0
Medium	UBUNTU-CVE-2024-9143	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GO-2026-6604	stdlib@go1.26.8	1.26.9
Medium	CGA-p574-4xrh-jg2x	minio@0.20251015.172955-r10	0.20260717.120751-r8
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.5.19	3.5.33
Medium	GHSA-c5pq-fr2g-9jpf	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.21.0	0.24.0
Medium	UBUNTU-CVE-2026-31790	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-34180	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-7383	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	CGA-542f-9xjv-v8f8	minio@0.20251015.172955-r10	0.20260717.120751-r15
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.79.3	1.82.2
Medium	ALPINE-CVE-2026-3805	curl@8.14.1-r2	8.14.1-r4
Medium	CGA-4rvm-c85q-pqrp	minio@0.20251015.172955-r10	0.20260504.002721-r0
Medium	GHSA-jv87-32hw-hh99	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Medium	CGA-8m64-xwf9-5m44	minio@0.20251015.172955-r10	0.20260520.234452-r0
Medium	GO-2026-5437	github.com/minio/minio@v0.0.0-20251015172955-9e49d5e7a648+dirty	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	CGA-9g46-4xm6-mjvv	minio@0.20251015.172955-r10	0.20260717.120751-r12
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.