opentelemetry-demo 0.41.2 Helm chart

Name: opentelemetry-demo Helm chart 0.41.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Not scored yet

opentelemetry demo helm chart

Version 0.41.2 todayapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 34 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	222
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,080
jaegertracing/jaeger	2.19.0	001041	543
quay.io/prometheus/prometheus	v3.13.1	00124	189
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	921
ghcr.io/open-telemetry/demo	3.0.0-ad	0128182	2,051
ghcr.io/open-telemetry/demo	3.0.0-agent	0015163	1,676
library/postgres	18.4	0019166	1,684
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	482
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015174	1,811
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	152
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	440
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,530
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	693
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0334102	1,699
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012166	1,028
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	616
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015165	1,697
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	642
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	130
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	422
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

745 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-58013	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.1	1.83.1
Low	DEBIAN-CVE-2018-20673	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-58010	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-58012	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20260427112133-525d1bab07e0	2.8.4
Low	DEBIAN-CVE-2026-34282	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Low	UBUNTU-CVE-2026-0915	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.2	no fix listed
Low	DEBIAN-CVE-2026-58014	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.1.1	2.1.4
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.140.0	0.144.0
Low	GHSA-vjc4-5qp5-m44j	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-11586	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58	0.24.0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.30.4	3.30.14
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.1	no fix listed
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Low	GHSA-xj96-63gp-2gmr	pillow@12.2.0	12.3.0
Low	GHSA-w5vr-8v7q-w6rv	baseline-browser-mapping@2.10.38	2.11.0
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.133.Final	4.1.137.Final
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	UBUNTU-CVE-2026-42013	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2017-13716	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	UBUNTU-CVE-2026-0861	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.9.4-3ubuntu3.2	1.9.4-3ubuntu3.3
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2025-32990	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2018-9996	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-69650	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2021-32256	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.2latest	today	3.0.0	—	—
0.41.1	4 days ago	3.0.0	053401,855	22,678
0.41.0	1 month ago	3.0.0	053401,855	22,678

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.