openreplay 1.1.1 Helm chart

Name: openreplay Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.1.1 todayapp version 1.28.0 0Artifact Hub

openreplay 1.1.1 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,348 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,638252501,091

1,348 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.16	1235120	1,911
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

555 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45446	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	GHSA-x6fh-7qmf-69xh	github.com/slackhq/nebula@v1.9.5	1.9.7
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.0	0.29.0
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r7	2.44-r8
Low	UBUNTU-CVE-2026-86805	glibc@2.35-0ubuntu3.15	no fix listed
Low	DEBIAN-CVE-2024-7883	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	CGA-mh7g-48fq-vcgc	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	UBUNTU-CVE-2026-102473	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.9	no fix listed
Low	GHSA-v3r7-h72x-cjcm	undici@6.27.0	6.28.0
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u4	no fix listed
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-2ubuntu2.2	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2026-88648	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-8xcm-r25x-g524	undici@6.27.0	6.28.0
Low	DEBIAN-CVE-2026-13573	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-13574	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	GHSA-j7c9-79x7-8hpr	github.com/smallstep/certificates@v0.28.4	0.29.0
Low	DEBIAN-CVE-2011-4116	perl@5.40.1-6+deb13u1	no fix listed
Low	GHSA-mjcv-p78q-w5fw	github.com/moby/sys/user@v0.1.0	0.4.1
Low	UBUNTU-CVE-2026-88838	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-68160	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	GHSA-vcc4-2c75-vc9v	github.com/caddyserver/caddy/v2@v2.10.2	2.11.4
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r7	2.44-r8
Low	UBUNTU-CVE-2026-89092	glibc@2.35-0ubuntu3.15	no fix listed
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	DEBIAN-CVE-2026-16742	systemd@257.13-1~deb13u1	no fix listed
Low	ALPINE-CVE-2026-94284	libx11@1.8.13-r0	1.8.14-r0
Low	UBUNTU-CVE-2026-18374	glibc@2.35-0ubuntu3.15	no fix listed
Low	UBUNTU-CVE-2026-88841	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.2	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r7	no fix listed
Low	UBUNTU-CVE-2026-97399	glibc@2.35-0ubuntu3.15	no fix listed
Low	ALPINE-CVE-2026-94285	libx11@1.8.13-r0	1.8.14-r0
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-9qq8-cgcv-qmc9	github.com/smallstep/certificates@v0.28.4	0.30.0
Low	GHSA-m8rv-5g2x-5cg5	undici@6.27.0	6.28.0
Low	UBUNTU-CVE-2026-89160	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-54872	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30
Low	UBUNTU-CVE-2026-77696	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	2 days ago	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.