opentelemetry-demo 0.42.0 Helm chart

Name: opentelemetry-demo Helm chart 0.42.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 21 Sept 2026

opentelemetry demo helm chart

Version 0.42.0 2 days agoapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.0 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,007 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

20,109052681,731

2,007 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00115	160
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	40
grafana/grafana	13.2.2-distroless	00064	449
jaegertracing/jaeger	2.20.0	00431	320
quay.io/prometheus/prometheus	v3.14.0	00115	112
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00639	409
ghcr.io/open-telemetry/demo	3.1.0-ad	0126174	1,966
ghcr.io/open-telemetry/demo	3.1.0-agent	009143	1,363
library/postgres	18.4	0014174	1,653
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	009142	1,356
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001124	437
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00549	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	00780	834
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0016110	1,272
ghcr.io/open-telemetry/demo	3.1.0-frontend	00614	259
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	033387	1,544
ghcr.io/open-telemetry/demo	3.1.0-image-provider	012166	1,032
ghcr.io/open-telemetry/demo	3.1.0-kafka	00843	552
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0032202	2,389
ghcr.io/open-telemetry/demo	3.1.0-mcp	009143	1,363
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00411	189
ghcr.io/open-telemetry/demo	3.1.0-payment	001732	659
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	140
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	34
ghcr.io/open-telemetry/demo	3.1.0-shipping	00614	259
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001536	689
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

634 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5024	golang.org/x/sys@v0.39.0	0.44.0
Low	DEBIAN-CVE-2025-1182	binutils@2.44-3	no fix listed
Low	GO-2026-6179	golang.org/x/mod@v0.33.0	0.40.0
Low	DEBIAN-CVE-2026-18477	tar@1.35+dfsg-3.1	no fix listed
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r19	1.37.0-r20
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.2	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	USN-8091-1	util-linux@2.39.3-9ubuntu6.3	2.39.3-9ubuntu6.5
Low	USN-8436-1	ca-certificates@20240203	20260601~24.04.1
Low	USN-8543-2	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.5
Low	USN-8625-1	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.12
Low	USN-8688-1	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	GHSA-q2mw-fvj9-vvcw	net-imap@0.6.2	0.6.4
Low	UBUNTU-CVE-2026-24515	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	UBUNTU-CVE-2026-57062	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.6
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u8	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed
Low	DEBIAN-CVE-2026-22007	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-34268	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r19	1.37.0-r20
Low	DEBIAN-CVE-2025-66861	binutils@2.44-3	no fix listed
Low	GHSA-c4fp-cxrr-mj66	net-imap@0.6.2	0.6.4.1
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0
Low	UBUNTU-CVE-2026-5958	sed@4.9-2build1	4.9-2ubuntu0.24.04.1
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.0latest	2 days ago	3.1.0	052681,731	20,109
0.41.2	5 days ago	3.0.0	053391,939	23,371
0.41.1	9 days ago	3.0.0	053391,939	23,371
0.41.0	1 month ago	3.0.0	053391,939	23,371

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.