opentelemetry-demo 0.41.0 Helm chart

Name: opentelemetry-demo Helm chart 0.41.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Version 0.41.0 1 month agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.0 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	535
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×5	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001183	877
ghcr.io/open-telemetry/demo	3.0.0-ad	0127176	2,006
ghcr.io/open-telemetry/demo	3.0.0-agent	0015155	1,609
library/postgres	18.4	0019166	1,661
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	475
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015166	1,743
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	435
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,514
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	676
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	033396	1,657
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	549
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	609
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015157	1,629
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	246
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	626
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	318
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	197
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	405
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	695
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	167
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

737 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-63076	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Medium	UBUNTU-CVE-2025-59375	expat@2.6.1-2ubuntu0.3	no fix listed
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.133.Final	4.1.135.Final
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	UBUNTU-CVE-2024-0727	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-25646	libpng@1.6.54-r0	1.6.55-r0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-89xv-2m56-2m9x	next@16.2.10	16.2.11
Medium	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Medium	GHSA-3m6g-2423-7cp3	json@2.18.0	2.19.2
Medium	ALPINE-CVE-2026-2100	p11-kit@0.25.5-r2	0.26.2-r0
Medium	UBUNTU-CVE-2025-13151	libtasn1-6@4.19.0-3ubuntu0.24.04.1	4.19.0-3ubuntu0.24.04.2
Medium	GHSA-p9j2-gv94-2wf4	next@16.2.10	16.2.11
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u13	no fix listed
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.21.2	2.21.4
Medium	UBUNTU-CVE-2023-6237	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	UBUNTU-CVE-2022-41409	pcre2@10.39-3ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-5450	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.49.0	0.52.0
Medium	UBUNTU-CVE-2024-9143	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.21.2	2.21.4
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-34182	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-m93f-wj8c-rp8p	Microsoft.NETCore.App.Runtime.linux-x64@10.0.10	10.0.11
Medium	ALPINE-CVE-2026-33416	libpng@1.6.54-r0	1.6.56-r0
Medium	UBUNTU-CVE-2026-33416	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-31790	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-34180	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-7383	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-8924	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2025-69720	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1
Medium	UBUNTU-CVE-2026-8376	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-14457	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2026-58016	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.133.Final	4.1.136.Final
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2025-29070	lcms2@2.14-2	no fix listed
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.49.0	0.52.0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	DEBIAN-CVE-2026-66046	expat@2.5.0-1+deb12u2	no fix listed
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	2 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.