opentelemetry-demo 0.41.1 Helm chart

Name: opentelemetry-demo Helm chart 0.41.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 15 Sept 2026

opentelemetry demo helm chart

Version 0.41.1 3 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,203 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,678053401,855

2,203 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	536
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	916
ghcr.io/open-telemetry/demo	3.0.0-ad	0127183	2,045
ghcr.io/open-telemetry/demo	3.0.0-agent	0015159	1,640
library/postgres	18.4	0019166	1,673
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	476
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015170	1,775
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,519
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	682
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0333103	1,696
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	610
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015161	1,661
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	632
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	411
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

623 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-56288	patch@2.8-2	no fix listed
Low	DEBIAN-CVE-2026-56289	patch@2.8-2	no fix listed
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2025-69645	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.4.0-11ubuntu2.6	no fix listed
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.21.2	2.21.5
Low	ALPINE-CVE-2026-32776	expat@2.7.3-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-50812	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.7
Low	GO-2025-4014	stdlib@go1.24.6	1.24.8
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Low	DEBIAN-CVE-2025-69646	binutils@2.44-3	no fix listed
Low	GHSA-46q3-7gv7-qmgg	net-imap@0.6.2	0.6.4.1
Low	UBUNTU-CVE-2026-18938	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1
Low	DEBIAN-CVE-2025-8225	binutils@2.44-3	no fix listed
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.9	3.5.33
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.28.0	0.29.0
Low	GHSA-mpwr-8vm7-h73f	software.sslmate.com/src/go-pkcs12@v0.7.0	0.7.2
Low	GO-2026-4976	stdlib@go1.25.7	1.25.10
Low	UBUNTU-CVE-2025-5278	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4
Low	GO-2026-5856	stdlib@go1.25.11	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22795	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.54.0	0.56.0
Low	UBUNTU-CVE-2025-28162	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	UBUNTU-CVE-2025-28164	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	GO-2026-4980	stdlib@go1.25.7	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	DEBIAN-CVE-2024-7883	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	DEBIAN-CVE-2026-1484	glib2.0@2.74.6-2+deb12u8	2.74.6-2+deb12u9
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	GO-2026-4946	stdlib@go1.25.7	1.25.9
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	ALPINE-CVE-2026-4367	libxpm@3.5.17-r0	3.5.19-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	UBUNTU-CVE-2026-56131	expat@2.6.1-2ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.7	no fix listed
Low	GO-2026-4603	stdlib@go1.25.7	1.25.8
Low	UBUNTU-CVE-2026-23865	freetype@2.13.2+dfsg-1build3	2.13.2+dfsg-1ubuntu0.1
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-0988	glib2.0@2.74.6-2+deb12u8	2.74.6-2+deb12u9
Low	GO-2026-6303	golang.org/x/crypto@v0.54.0	0.55.0
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,855	22,678
0.41.0	1 month ago	3.0.0	053401,855	22,678

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.