opentelemetry-demo 0.41.2 Helm chart

Name: opentelemetry-demo Helm chart 0.41.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 17 Sept 2026

opentelemetry demo helm chart

Version 0.41.2 2 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,229 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

23,064053431,878

2,229 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	222
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001495	1,079
jaegertracing/jaeger	2.19.0	001041	543
quay.io/prometheus/prometheus	v3.13.1	00124	189
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001191	939
ghcr.io/open-telemetry/demo	3.0.0-ad	0128182	2,063
ghcr.io/open-telemetry/demo	3.0.0-agent	0015167	1,698
library/postgres	18.4	0019166	1,702
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	482
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015178	1,832
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	152
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	440
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,539
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	701
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0334102	1,706
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012166	1,030
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	552
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	616
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015169	1,719
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	650
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	130
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	429
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	689
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

631 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5025	golang.org/x/net@v0.49.0	0.55.0
Low	GHSA-g3pg-frfm-pr2m	github.com/openfga/openfga@v1.14.2	1.18.1
Low	GO-2026-4970	stdlib@go1.25.11	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5544	github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension@v0.156.0	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5build1	1.0.8-5ubuntu0.1
Low	DEBIAN-CVE-2026-90803	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-22018	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.5	no fix listed
Low	DEBIAN-CVE-2026-60589	openjdk-17@17.0.18+8-1~deb12u1	17.0.20.1+1-1~deb12u1
Low	DEBIAN-CVE-2026-91781	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-47010	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	GO-2026-4602	stdlib@go1.25.7	1.25.8
Low	GHSA-8396-jffm-qx4w	github.com/openfga/openfga@v1.14.2	1.16.0
Low	DEBIAN-CVE-2026-91779	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-91780	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	UBUNTU-CVE-2026-27456	util-linux@2.37.2-4ubuntu3.5	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-18508	tar@1.34+dfsg-1ubuntu0.1.22.04.4	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-89160	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.27-3ubuntu2.5	no fix listed
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	UBUNTU-CVE-2026-41080	expat@2.6.1-2ubuntu0.3	no fix listed
Low	DEBIAN-CVE-2026-90802	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69418	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.44-3	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.39.0	0.44.0
Low	DEBIAN-CVE-2025-1182	binutils@2.44-3	no fix listed
Low	GO-2026-6179	golang.org/x/mod@v0.37.0	0.40.0
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.4	no fix listed
Low	GHSA-xhgw-qwwf-pg32	github.com/cilium/ebpf@v0.21.0	0.22.0
Low	GO-2026-5048	github.com/hamba/avro/v2@v2.31.0	no fix listed
Low	GO-2026-5052	software.sslmate.com/src/go-pkcs12@v0.7.0	0.7.2
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.54.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.28.0	0.30.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.2latest	2 days ago	3.0.0	053431,878	23,064
0.41.1	6 days ago	3.0.0	053431,878	23,064
0.41.0	1 month ago	3.0.0	053431,878	23,064

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.