opentelemetry-demo 0.41.0 Helm chart

Name: opentelemetry-demo Helm chart 0.41.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Version 0.41.0 1 month agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.0 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	535
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×5	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001183	877
ghcr.io/open-telemetry/demo	3.0.0-ad	0127176	2,006
ghcr.io/open-telemetry/demo	3.0.0-agent	0015155	1,609
library/postgres	18.4	0019166	1,661
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	475
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015166	1,743
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	435
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,514
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	676
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	033396	1,657
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	549
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	609
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015157	1,629
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	246
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	626
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	318
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	197
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	405
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	695
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	167
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

737 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63075	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-58011	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-xhj3-7xw9-vr34	github.com/getkin/kin-openapi@v0.140.0	0.142.0
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.7	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.1.1	2.1.3
Low	UBUNTU-CVE-2025-15281	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2025-6297	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	UBUNTU-CVE-2026-42011	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.133.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	UBUNTU-CVE-2026-9538	perl@5.34.0-3ubuntu1.7	no fix listed
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.133.Final	4.1.136.Final
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.133.Final	4.1.136.Final
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.133.Final	4.1.136.Final
Low	GHSA-45hq-cxwh-f6vc	pillow@12.2.0	12.3.0
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.140.0	0.141.0
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	GHSA-5x94-69rx-g8h2	pillow@12.2.0	12.3.0
Low	GHSA-phj9-mv4w-65pm	pillow@12.2.0	12.3.0
Low	UBUNTU-CVE-2026-2219	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.7	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3.1	1.12-1ubuntu3.2
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.133.Final	4.1.136.Final
Low	GHSA-8v84-f9pq-wr9x	pillow@12.2.0	12.3.0
Low	GHSA-q8wf-6r8g-63ch	next@16.2.10	16.2.11
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	ALPINE-CVE-2026-12064	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Low	GHSA-6r8x-57c9-28j4	pillow@12.2.0	12.3.0
Low	GHSA-9hw9-ch79-4vh6	pillow@12.2.0	12.3.0
Low	GHSA-jjj6-mw9f-p565	pillow@12.2.0	12.3.0
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-r28c-9q8g-f849	postcss@8.5.14	8.5.18

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.