opentelemetry-demo 0.41.2 Helm chart

Name: opentelemetry-demo Helm chart 0.41.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 16 Sept 2026

opentelemetry demo helm chart

Version 0.41.2 todayapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,215 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,916053431,864

2,215 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	222
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,080
jaegertracing/jaeger	2.19.0	001041	543
quay.io/prometheus/prometheus	v3.13.1	00124	189
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	921
ghcr.io/open-telemetry/demo	3.0.0-ad	0128182	2,051
ghcr.io/open-telemetry/demo	3.0.0-agent	0015163	1,676
library/postgres	18.4	0019166	1,684
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	482
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015174	1,811
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	152
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	440
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,530
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	693
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0334102	1,699
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012166	1,028
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	616
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015165	1,697
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	642
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	130
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	422
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

115 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.49.0	0.52.0
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2018-6951	patch@2.8-2	no fix listed
Medium	DEBIAN-CVE-2018-6952	patch@2.8-2	no fix listed
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u13	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u13	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u13	no fix listed
Medium	GHSA-p293-qw3h-jr36	next@16.2.10	16.3.3
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	ALPINE-CVE-2021-27219	glib@2.88.1-r1	2.66.6-r0
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2022-40735	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u13	no fix listed
Medium	ALPINE-CVE-2026-9079	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2016-20013	glibc@2.35-0ubuntu3.13	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.34.0-3ubuntu1.7	no fix listed
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63073	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	UBUNTU-CVE-2018-5709	krb5@1.19.2-2ubuntu0.7	no fix listed
Medium	DEBIAN-CVE-2012-0039	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	DEBIAN-CVE-2024-28757	expat@2.5.0-1+deb12u2	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.19.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2023-25193	harfbuzz@6.0.0+dfsg-3	no fix listed
Medium	GHSA-m99w-x7hq-7vfj	next@16.2.10	16.2.11
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	DEBIAN-CVE-2018-20712	binutils@2.44-3	no fix listed
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2022-4899	libzstd@1.4.8+dfsg-3build1	no fix listed
Medium	UBUNTU-CVE-2023-5678	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-11856	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2026-8925	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	GHSA-6gpp-xcg3-4w24	next@16.2.10	16.2.11
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-63076	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	UBUNTU-CVE-2025-59375	expat@2.6.1-2ubuntu0.3	no fix listed
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.133.Final	4.1.135.Final
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.2latest	today	3.0.0	053431,864	22,916
0.41.1	4 days ago	3.0.0	053431,864	22,916
0.41.0	1 month ago	3.0.0	053431,864	22,916

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.