openreplay 1.1.1 Helm chart

Name: openreplay Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.1.1 todayapp version 1.28.0 0Artifact Hub

openreplay 1.1.1 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,348 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,638252501,091

1,348 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.16	1235120	1,911
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

702 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2025-15467	openssl@3.5.4-r0	3.5.5-r0
Critical	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.30	no fix listed
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.30	no fix listed
High	ALPINE-CVE-2018-18312	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.42.2-r0	5.26.3-r0
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.30	no fix listed
High	GHSA-h8cp-697h-8c8p	github.com/smallstep/certificates@v0.28.4	0.29.0
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	ALPINE-CVE-2021-27219	glib@2.88.1-r1	2.66.6-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.73.0	1.79.3
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2022-40735	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4	no fix listed
Medium	ALPINE-CVE-2026-8925	curl@8.19.0-r0	8.22.0-r0
Medium	GO-2026-4341	stdlib@go1.25.0	1.24.12
Medium	UBUNTU-CVE-2023-31486	perl@5.34.0-3ubuntu1.9	no fix listed
Medium	UBUNTU-CVE-2016-20013	glibc@2.35-0ubuntu3.15	no fix listed
Medium	UBUNTU-CVE-2018-5709	krb5@1.19.2-2ubuntu0.10	no fix listed
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-34182	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	GHSA-5r3v-vc8m-m96g	github.com/caddyserver/caddy/v2@v2.10.2	2.11.1
Medium	ALPINE-CVE-2026-19931	curl@8.19.0-r0	8.22.0-r0
Medium	GO-2026-4337	stdlib@go1.25.0	1.24.13
Medium	CGA-2r7j-jqq2-92fw	minio@0.20251015.172955-r10	0.20260717.120751-r12
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-63076	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	UBUNTU-CVE-2022-4899	libzstd@1.4.8+dfsg-3build1	no fix listed
Medium	UBUNTU-CVE-2023-5678	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	CGA-8cc3-gp7v-g6cc	minio@0.20251015.172955-r10	0.20260717.120751-r6
Medium	GO-2026-5026	stdlib@go1.25.10	1.25.13
Medium	GO-2026-5026	golang.org/x/net@v0.53.0	0.55.0
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.19.0-r0	8.22.0-r0
Medium	CGA-4jxh-fxw5-q8gm	minio@0.20251015.172955-r10	0.20260520.234452-r2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.