opentelemetry-demo 0.41.0 Helm chart

Name: opentelemetry-demo Helm chart 0.41.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Version 0.41.0 1 month agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.0 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	535
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×5	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001183	877
ghcr.io/open-telemetry/demo	3.0.0-ad	0127176	2,006
ghcr.io/open-telemetry/demo	3.0.0-agent	0015155	1,609
library/postgres	18.4	0019166	1,661
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	475
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015166	1,743
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	435
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,514
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	676
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	033396	1,657
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	549
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	609
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015157	1,629
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	246
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	626
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	318
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	197
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	405
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	695
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	167
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

619 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.133.Final	4.1.136.Final
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-68g3-v927-f742	next@16.2.10	16.2.11
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.34.5	0.35.4
Low	DEBIAN-CVE-2026-11979	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2025-68973	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4
Low	ALPINE-CVE-2026-7168	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.15	3.3.16
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0
Low	DSA-6189-1	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u4
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.133.Final	4.1.137.Final
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	UBUNTU-CVE-2026-34743	xz-utils@5.6.1+really5.4.5-1ubuntu0.2	5.6.1+really5.4.5-1ubuntu0.3
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@2.21.2	2.21.4
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.2	2.21.4
Low	DEBIAN-CVE-2026-22693	harfbuzz@6.0.0+dfsg-3	no fix listed
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.15	3.3.18
Low	DEBIAN-CVE-2026-3441	binutils@2.44-3	no fix listed
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20260427112133-525d1bab07e0	2.10.3
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-87pf-fpwv-p7m7	net-imap@0.6.2	0.6.4
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.133.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-19487	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.9
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.66-5ubuntu2.2	1:2.66-5ubuntu2.4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.49.0	0.52.0
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-27587	openssl@3.0.18-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-46968	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.0.0-20260710080347-73ff57ce2b81+dirty	0.311.2-0.20260410083055-07c6232d159b
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-5hh8-q8hv-fr38	jackson-databind@2.21.2	2.21.4
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3.5	no fix listed
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.140.0	0.144.0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.21.2	2.21.4
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3.2	no fix listed
Low	GHSA-j3f2-48v5-ccww	protobufjs@7.6.4	7.6.5
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.1.1	2.1.2
Low	GHSA-cf98-j28v-49v6	github.com/openfga/openfga@v1.14.2	1.18.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.