openreplay 1.1.1 Helm chart

Name: openreplay Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 24 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.1.1 todayapp version 1.28.0 0Artifact Hub

openreplay 1.1.1 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,409 findings — 2 critical, 5 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.2-0ubuntu1.30, with no fix listed. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

16,183252611,141

1,409 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00011	115
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00026	173
public.ecr.aws/p1t3u8a3/api	v1.28.5	00422	293
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00317	219
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001050	728
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00421	285
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00019	104
public.ecr.aws/p1t3u8a3/db	v1.28.0	00315	207
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00315	207
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0006	35
public.ecr.aws/p1t3u8a3/http	v1.28.0	00419	273
public.ecr.aws/p1t3u8a3/images	v1.28.0	00421	285
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00315	207
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00026	266
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00533	388
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00317	219
library/caddy	2.10.2-alpine	0145157	2,465
rustfs/rustfs	1.0.0	0012	37
clickhouse/clickhouse-server	26.9.16	1235125	1,932
library/postgres	18.6-trixie	0019157	1,801
library/redis	8.10.2	00663	641
alpine/git	2.52.0	0235118	1,995
ghcr.io/openreplay/minio	2025	0056156	2,604
clickhouse/clickhouse-server	25.9-alpine	101830	704

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

726 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-18374	glibc@2.35-0ubuntu3.15	no fix listed
Low	UBUNTU-CVE-2026-88841	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.2	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r7	no fix listed
Low	UBUNTU-CVE-2026-97399	glibc@2.35-0ubuntu3.15	no fix listed
Low	ALPINE-CVE-2026-94285	libx11@1.8.13-r0	1.8.14-r0
Low	GHSA-9qq8-cgcv-qmc9	github.com/smallstep/certificates@v0.28.4	0.30.0
Low	GHSA-m8rv-5g2x-5cg5	undici@6.27.0	6.28.0
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-j6qf-3m9c-vwj3	github.com/go-chi/chi/v5@v5.2.2	5.4.0
Low	UBUNTU-CVE-2026-95210	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-54872	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30
Low	UBUNTU-CVE-2026-77696	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30
Low	DEBIAN-CVE-2026-39113	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	GHSA-r53p-7pc4-xj5r	undici@6.27.0	6.28.1
Low	UBUNTU-CVE-2026-18508	tar@1.34+dfsg-1ubuntu0.1.22.04.6	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	UBUNTU-CVE-2026-88834	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.27-3ubuntu2.5	no fix listed
Low	UBUNTU-CVE-2026-88648	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	UBUNTU-CVE-2026-102474	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69418	openssl@3.0.2-0ubuntu1.30	no fix listed
Low	GHSA-gx7w-56w6-g48x	github.com/caddyserver/caddy/v2@v2.10.2	2.11.3
Low	UBUNTU-CVE-2026-67693	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.6	no fix listed
Low	CGA-j8gq-8cr8-w3p3	minio@0.20251015.172955-r10	no fix listed
Low	CGA-jjrj-499w-c2pj	minio@0.20251015.172955-r10	no fix listed
Low	CGA-qrf7-phc7-6xc2	minio@0.20251015.172955-r10	0.20260717.120751-r4
Low	GO-2026-5932	golang.org/x/crypto@v0.51.0	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0173	proc-macro-error2@2.0.1	no fix listed
Low	RUSTSEC-2026-0186	memmap2@0.9.10	0.9.11
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0221	event-listener@5.4.1	5.4.2
Low	RUSTSEC-2026-0258	h2@0.4.15	0.4.16
Low	RUSTSEC-2026-0346	rustls@0.23.45	0.23.46
Low	RUSTSEC-2026-0370	zvariant@5.11.0	no fix listed
Low	RUSTSEC-2026-0371	zbus_names@4.3.2	no fix listed
Low	RUSTSEC-2026-0372	zvariant_derive@5.11.0	no fix listed
Low	RUSTSEC-2026-0385	ctutils@0.4.2	0.4.4
Low	RUSTSEC-2026-0386	tokio@1.53.1	1.51.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	1.28.0	252611,141	16,183
1.0.0	5 days ago	1.28.0	252611,143	16,218

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.