openreplay 1.1.1 Helm chart

Name: openreplay Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.1.1 todayapp version 1.28.0 0Artifact Hub

openreplay 1.1.1 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,348 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,638252501,091

1,348 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00010	109
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00020	135
public.ecr.aws/p1t3u8a3/api	v1.28.5	00321	272
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00216	198
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00013	65
public.ecr.aws/p1t3u8a3/db	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0005	29
public.ecr.aws/p1t3u8a3/http	v1.28.0	00318	253
public.ecr.aws/p1t3u8a3/images	v1.28.0	00320	265
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00214	186
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00432	368
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00216	198
library/caddy	2.10.2-alpine	0145154	2,424
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.16	1235120	1,911
library/postgres	18.6-trixie	0020155	1,815
library/redis	8.10.2	00663	640
alpine/git	2.52.0	0234112	1,911
ghcr.io/openreplay/minio	2025	0056152	2,564
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

555 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GHSA-8988-9cw3-xx77	urllib3@2.7.0	2.8.0
Low	CGA-6xxp-522c-cw36	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4980	stdlib@go1.25.8	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.34.0-3ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	CGA-4m52-xq38-74fx	busybox@1.37.0-r60	1.38.0-r0
Low	CGA-qgph-x37w-3c5g	busybox@1.37.0-r60	1.38.0-r1
Low	UBUNTU-CVE-2026-38752	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-38755	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	UBUNTU-CVE-2026-102010	gcc-12@12.3.0-1ubuntu1~22.04.3	no fix listed
Low	UBUNTU-CVE-2025-60876	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	GO-2026-4440	golang.org/x/net@v0.42.0	0.45.0
Low	GHSA-3wwx-pv8p-q78v	undici@6.27.0	6.28.1
Low	ALPINE-CVE-2026-88806	libx11@1.8.13-r0	1.8.14-r0
Low	UBUNTU-CVE-2026-67693	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.40.0	0.45.0
Low	GO-2025-4011	stdlib@go1.25.0	1.24.8
Low	GO-2025-4015	stdlib@go1.25.0	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.42.0	0.45.0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.4	7.1.6
Low	CGA-5f25-83x6-g6g7	minio@0.20251015.172955-r10	0.20260330.001845-r3
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	GHSA-69x3-g4r3-p962	github.com/slackhq/nebula@v1.9.5	1.10.3
Low	GHSA-52v5-jr5w-gjxr	sigstore@4.1.0	4.1.1
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.2.2	5.3.0
Low	PYSEC-2026-4183	pyjwt@2.14.0	2.15.0
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4603	stdlib@go1.25.0	1.25.8
Low	ALPINE-CVE-2026-3783	curl@8.14.1-r2	8.14.1-r4
Low	GO-2025-4175	stdlib@go1.25.0	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	UBUNTU-CVE-2026-95184	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	CGA-4j3c-3r24-cxjx	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.51.0	0.52.0
Low	CGA-57vw-6576-rc46	minio@0.20251015.172955-r10	0.20260520.234452-r2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.51.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.8	1.25.9
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.40.0	0.45.0
Low	CGA-4xrm-f3rh-9x9c	minio@0.20251015.172955-r10	0.20260520.234452-r3
Low	CGA-cv7r-xh94-7h54	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4982	stdlib@go1.25.8	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.53.0	0.55.0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252501,091	15,638
1.0.0	yesterday	1.28.0	252501,098	15,694

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.