opentelemetry-demo 0.42.0 Helm chart

Name: opentelemetry-demo Helm chart 0.42.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 20 Sept 2026

opentelemetry demo helm chart

Version 0.42.0 yesterdayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.0 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,005 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

20,163052731,724

2,005 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00115	160
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	40
grafana/grafana	13.2.2-distroless	00064	449
jaegertracing/jaeger	2.20.0	00431	320
quay.io/prometheus/prometheus	v3.14.0	00115	112
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00639	409
ghcr.io/open-telemetry/demo	3.1.0-ad	0126174	1,966
ghcr.io/open-telemetry/demo	3.1.0-agent	009143	1,362
library/postgres	18.4	0019169	1,734
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	009142	1,355
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001124	437
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00549	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	00780	833
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0016109	1,261
ghcr.io/open-telemetry/demo	3.1.0-frontend	00614	259
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	033387	1,544
ghcr.io/open-telemetry/demo	3.1.0-image-provider	012166	1,032
ghcr.io/open-telemetry/demo	3.1.0-kafka	00843	552
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0032201	2,377
ghcr.io/open-telemetry/demo	3.1.0-mcp	009143	1,362
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00411	189
ghcr.io/open-telemetry/demo	3.1.0-payment	001732	659
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	140
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	34
ghcr.io/open-telemetry/demo	3.1.0-shipping	00614	259
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001536	689
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

754 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.83.1	1.83.2
Low	ALPINE-CVE-2026-80255	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	DEBIAN-CVE-2025-1352	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-58015	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-1153	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-58013	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Low	DEBIAN-CVE-2018-20673	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-58010	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-58012	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.8.4
Low	DEBIAN-CVE-2026-34282	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Low	UBUNTU-CVE-2026-0915	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.2	no fix listed
Low	DEBIAN-CVE-2026-58014	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	ALPINE-CVE-2026-13608	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-11586	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58	0.24.0
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.30.4	3.30.14
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.1	no fix listed
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Low	DEBIAN-CVE-2017-11697	nss@2:3.87.1-1+deb12u4	no fix listed
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.2.16.Final	4.2.17.Final
Low	ALPINE-CVE-2026-80230	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2017-13716	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	UBUNTU-CVE-2026-0861	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	no fix listed
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	GHSA-rm6m-hrcw-jw33	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	DEBIAN-CVE-2023-5388	nss@2:3.87.1-1+deb12u4	no fix listed
Low	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	UBUNTU-CVE-2025-32990	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2023-5574	xorg-server@2:21.1.7-3+deb12u13	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.0latest	yesterday	3.1.0	052731,724	20,163
0.41.2	4 days ago	3.0.0	053441,934	23,452
0.41.1	8 days ago	3.0.0	053441,934	23,452
0.41.0	1 month ago	3.0.0	053441,934	23,452

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.