openreplay 1.1.1 Helm chart

Name: openreplay Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 21 Oct 2026

Production-ready OpenReplay session replay stack without a bundled ingress controller

Version 1.1.1 yesterdayapp version 1.28.0 0Artifact Hub

openreplay 1.1.1 deploys 24 container images: ghcr.io/openreplay/postgres, public.ecr.aws/p1t3u8a3/alerts, public.ecr.aws/p1t3u8a3/api, public.ecr.aws/p1t3u8a3/assets and 19 more. Across them, 1,382 findings — 2 critical, 5 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.2-0ubuntu1.30, with no fix listed. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.

Radar Score

15,737252461,129

1,382 findings over 24 of 24 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

24 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openreplay/postgres×16	17	00011	113
public.ecr.aws/p1t3u8a3/alerts	v1.28.0	00024	161
public.ecr.aws/p1t3u8a3/api	v1.28.5	00322	276
public.ecr.aws/p1t3u8a3/assets	v1.28.0	00217	202
public.ecr.aws/p1t3u8a3/assist	v1.28.0	001048	709
public.ecr.aws/p1t3u8a3/canvases	v1.28.0	00321	269
public.ecr.aws/p1t3u8a3/chalice	v1.28.6	00017	91
public.ecr.aws/p1t3u8a3/db	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/ender	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/frontend	v1.28.3	0006	33
public.ecr.aws/p1t3u8a3/http	v1.28.0	00319	257
public.ecr.aws/p1t3u8a3/images	v1.28.0	00321	269
public.ecr.aws/p1t3u8a3/sink	v1.28.0	00215	190
public.ecr.aws/p1t3u8a3/sourcemapreader	v1.28.1	00022	226
public.ecr.aws/p1t3u8a3/spot	v1.28.0	00433	372
public.ecr.aws/p1t3u8a3/storage	v1.28.0	00217	202
library/caddy	2.10.2-alpine	0145156	2,441
rustfs/rustfs	1.0.0	0002	21
clickhouse/clickhouse-server	26.9.16	1235122	1,924
library/postgres	18.6-trixie	0017159	1,748
library/redis	8.10.2	00564	604
alpine/git	2.52.0	0234118	1,963
ghcr.io/openreplay/minio	2025	0056155	2,584
clickhouse/clickhouse-server	25.9-alpine	101830	702

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

714 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	CGA-9g46-4xm6-mjvv	minio@0.20251015.172955-r10	0.20260717.120751-r12
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1
Medium	CGA-5m5m-vh7g-gjvc	minio@0.20251015.172955-r10	0.20260717.120751-r14
Medium	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	ALPINE-CVE-2026-80231	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28388	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.40.0	1.41.0
Medium	CGA-47p8-7c96-6fph	minio@0.20251015.172955-r10	0.20260520.234452-r2
Medium	CGA-vx9c-cq9q-hgpw	minio@0.20251015.172955-r10	0.20260520.234452-r2
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.51.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.51.0	0.52.0
Medium	GHSA-g7pc-pc7g-h8jh	github.com/caddyserver/caddy/v2@v2.10.2	2.11.1
Medium	GHSA-x76f-jf84-rqj8	github.com/caddyserver/caddy/v2@v2.10.2	2.11.1
Medium	CGA-rw68-w8qg-8c6v	busybox@1.37.0-r57	1.37.0-r58
Medium	UBUNTU-CVE-2023-39810	busybox@1:1.30.1-7ubuntu3.1	no fix listed
Medium	GHSA-m675-2p33-xv9g	github.com/caddyserver/caddy/v2@v2.10.2	2.11.3
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	GO-2026-4601	stdlib@go1.25.0	1.25.8
Medium	CGA-3278-qw42-4f3r	minio@0.20251015.172955-r10	0.20260520.234452-r0
Medium	CGA-4fh3-cr96-mhr6	minio@0.20251015.172955-r10	0.20260504.002721-r1
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.303.0	0.305.2
Medium	GO-2026-4981	stdlib@go1.25.8	1.25.10
Medium	ALPINE-CVE-2026-28389	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28389	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	UBUNTU-CVE-2026-28390	openssl@3.0.2-0ubuntu1.30	no fix listed
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	CGA-24vg-ww3h-jmhg	minio@0.20251015.172955-r10	0.20260504.002721-r1
Low	GO-2026-4977	stdlib@go1.25.8	1.25.10
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	CGA-5r6c-pjcp-hw4c	minio@0.20251015.172955-r10	0.20260504.002721-r1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	yesterday	1.28.0	252461,129	15,737
1.0.0	2 days ago	1.28.0	252461,134	15,780

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/openreplay.svg)](https://charts.stackradar.io/charts/helmforge/openreplay)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.