opentelemetry-demo 0.41.2 Helm chart

Name: opentelemetry-demo Helm chart 0.41.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 16 Sept 2026

opentelemetry demo helm chart

Version 0.41.2 todayapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,215 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,916053431,864

2,215 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	222
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,080
jaegertracing/jaeger	2.19.0	001041	543
quay.io/prometheus/prometheus	v3.13.1	00124	189
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	921
ghcr.io/open-telemetry/demo	3.0.0-ad	0128182	2,051
ghcr.io/open-telemetry/demo	3.0.0-agent	0015163	1,676
library/postgres	18.4	0019166	1,684
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	482
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015174	1,811
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	152
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	440
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,530
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	693
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0334102	1,699
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012166	1,028
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	616
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015165	1,697
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	642
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	130
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	422
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

745 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-r28c-9q8g-f849	postcss@8.5.14	8.5.18
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.7	no fix listed
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14
Low	DEBIAN-CVE-2025-66863	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2026-41254	lcms2@2.14-2	2.14-2+deb12u1
Low	DEBIAN-CVE-2026-41254	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	DEBIAN-CVE-2025-66862	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2022-27943	gcc-12@12.3.0-1ubuntu1~22.04.3	no fix listed
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.1
Low	ALPINE-CVE-2026-8458	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-76641	expat@2.6.1-2ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-58469	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3
Low	ALPINE-CVE-2026-6253	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.3	0.6.4
Low	UBUNTU-CVE-2025-5222	icu@74.2-1ubuntu3.1	no fix listed
Low	GHSA-r6mh-95jw-g7qg	Microsoft.NETCore.App.Runtime.linux-x64@10.0.10	10.0.11
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.3	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.3	0.6.4
Low	DEBIAN-CVE-2026-18220	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	GHSA-vcgp-9326-pqcp	net-imap@0.6.2	0.6.4
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	DEBIAN-CVE-2025-66866	binutils@2.44-3	no fix listed
Low	GHSA-4c39-4ccg-62r3	next@16.2.10	16.2.11
Low	DEBIAN-CVE-2025-5244	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-5245	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-955p-x3mx-jcvp	next@16.2.10	16.2.11
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GHSA-hcxc-wf8j-23hv	github.com/openfga/openfga@v1.14.2	1.18.0
Low	DEBIAN-CVE-2025-7545	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	UBUNTU-CVE-2025-66293	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.3
Low	UBUNTU-CVE-2026-42012	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2026-40355	krb5@1.19.2-2ubuntu0.7	1.19.2-2ubuntu0.8
Low	UBUNTU-CVE-2026-57432	perl@5.34.0-3ubuntu1.7	5.34.0-3ubuntu1.8
Low	ALPINE-CVE-2026-6276	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-xx22-p4ch-683r	lz4-java@1.10.2	1.11.1
Low	UBUNTU-CVE-2026-40356	krb5@1.19.2-2ubuntu0.7	1.19.2-2ubuntu0.8
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	DEBIAN-CVE-2025-11083	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11082	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2016-2781	coreutils@8.32-4.1ubuntu1.3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.2latest	today	3.0.0	053431,864	22,916
0.41.1	4 days ago	3.0.0	053431,864	22,916
0.41.0	1 month ago	3.0.0	053431,864	22,916

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.