opentelemetry-demo 0.41.2 Helm chart

Name: opentelemetry-demo Helm chart 0.41.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Not scored yet

opentelemetry demo helm chart

Version 0.41.2 todayapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 34 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	536
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	916
ghcr.io/open-telemetry/demo	3.0.0-ad	0127183	2,045
ghcr.io/open-telemetry/demo	3.0.0-agent	0015159	1,640
library/postgres	18.4	0019166	1,673
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	476
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015170	1,775
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,519
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	682
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0333103	1,696
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	610
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015161	1,661
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	632
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	411
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

741 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28388	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.133.Final	4.1.135.Final
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.0.0-20260710080347-73ff57ce2b81+dirty	0.305.2
Medium	ALPINE-CVE-2026-28389	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28389	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	UBUNTU-CVE-2026-28390	openssl@3.0.2-0ubuntu1.25	no fix listed
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u13	no fix listed
Low	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	UBUNTU-CVE-2026-57433	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.5
Low	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.39.0	1.41.0
Low	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1
Low	UBUNTU-CVE-2026-13221	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-42496	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Low	ALPINE-CVE-2026-33636	libpng@1.6.54-r0	1.6.56-r0
Low	UBUNTU-CVE-2026-33636	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@12.0.34	12.0.36
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.49.0	0.52.0
Low	UBUNTU-CVE-2024-10963	pam@1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.49.0	0.52.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-14456	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	ALPINE-CVE-2026-11352	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GHSA-62p4-gmf7-7g93	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-22016	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.1	no fix listed
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Low	UBUNTU-CVE-2026-12087	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8
Low	DEBIAN-CVE-2026-58015	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-1153	binutils@2.44-3	no fix listed
Low	PYSEC-2026-3452	pillow@12.2.0	12.3.0
Low	DEBIAN-CVE-2026-58013	glib2.0@2.74.6-2+deb12u8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.2latest	today	3.0.0	—	—
0.41.1	4 days ago	3.0.0	053401,855	22,678
0.41.0	1 month ago	3.0.0	053401,855	22,678

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.