opentelemetry-demo 0.41.1 Helm chart

Name: opentelemetry-demo Helm chart 0.41.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Version 0.41.1 2 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	535
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001183	877
ghcr.io/open-telemetry/demo	3.0.0-ad	0127176	2,006
ghcr.io/open-telemetry/demo	3.0.0-agent	0015155	1,609
library/postgres	18.4	0019166	1,661
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	475
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015166	1,743
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	435
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,514
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	676
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	033396	1,657
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	549
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	609
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015157	1,629
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	246
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	626
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	318
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	197
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	405
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	695
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	167
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

737 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2025-15467	openssl@3.5.4-r0	3.5.5-r0
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.25	no fix listed
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.25	no fix listed
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.49.0	0.52.0
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2018-6951	patch@2.8-2	no fix listed
Medium	DEBIAN-CVE-2018-6952	patch@2.8-2	no fix listed
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u13	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u13	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u13	no fix listed
Medium	GHSA-p293-qw3h-jr36	next@16.2.10	16.3.3
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	ALPINE-CVE-2021-27219	glib@2.88.1-r1	2.66.6-r0
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u13	no fix listed
Medium	UBUNTU-CVE-2022-40735	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-9079	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2016-20013	glibc@2.35-0ubuntu3.13	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.34.0-3ubuntu1.7	no fix listed
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63073	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	UBUNTU-CVE-2018-5709	krb5@1.19.2-2ubuntu0.7	no fix listed
Medium	DEBIAN-CVE-2012-0039	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	DEBIAN-CVE-2024-28757	expat@2.5.0-1+deb12u2	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.19.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2023-25193	harfbuzz@6.0.0+dfsg-3	no fix listed
Medium	GHSA-m99w-x7hq-7vfj	next@16.2.10	16.2.11
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	DEBIAN-CVE-2018-20712	binutils@2.44-3	no fix listed
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2022-4899	libzstd@1.4.8+dfsg-3build1	no fix listed
Medium	UBUNTU-CVE-2023-5678	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-11856	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-8925	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	GHSA-6gpp-xcg3-4w24	next@16.2.10	16.2.11
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	2 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.