opentelemetry-demo 0.42.1 Helm chart

Name: opentelemetry-demo Helm chart 0.42.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 26 Sept 2026

opentelemetry demo helm chart

Version 0.42.1 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,058 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

21,387323581,692

2,058 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00610	172
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	42
grafana/grafana	13.2.2-distroless	00460	462
jaegertracing/jaeger	2.20.0	00926	343
quay.io/prometheus/prometheus	v3.14.0	00313	119
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00643	464
ghcr.io/open-telemetry/demo	3.1.0-ad	1030175	2,093
ghcr.io/open-telemetry/demo	3.1.0-agent	0010144	1,419
library/postgres	18.4	0025165	1,820
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010143	1,412
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001322	458
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00945	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	001079	889
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024104	1,329
ghcr.io/open-telemetry/demo	3.1.0-frontend	00715	274
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	123689	1,655
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102662	1,080
ghcr.io/open-telemetry/demo	3.1.0-kafka	001441	623
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0044203	2,583
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010144	1,419
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0078	203
ghcr.io/open-telemetry/demo	3.1.0-payment	002031	709
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	132
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	37
ghcr.io/open-telemetry/demo	3.1.0-shipping	00715	274
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001834	732
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0066	183
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

149 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-2fvj-hgj9-j2gr	jetty-security@12.0.34	12.0.36
Medium	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	DEBIAN-CVE-2018-18064	cairo@1.16.0-7	no fix listed
Medium	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Medium	DEBIAN-CVE-2025-29070	lcms2@2.14-2	no fix listed
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	UBUNTU-CVE-2026-42496	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Medium	DEBIAN-CVE-2026-58015	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	DEBIAN-CVE-2026-44950	libxfont@1:2.0.6-1+deb12u1	no fix listed
Medium	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-80231	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.305.2
Medium	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1
Medium	DEBIAN-CVE-2026-34282	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Medium	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.30.4	3.30.14
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-7383	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	ALPINE-CVE-2026-80229	curl@8.19.0-r0	8.22.0-r0
Medium	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.39.0	1.41.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2017-11695	nss@2:3.87.1-1+deb12u4	no fix listed
Medium	DEBIAN-CVE-2017-11696	nss@2:3.87.1-1+deb12u4	no fix listed
Medium	DEBIAN-CVE-2017-11698	nss@2:3.87.1-1+deb12u4	no fix listed
Medium	GHSA-c4c3-7fpv-j4q5	netty-handler@4.2.16.Final	4.2.17.Final
Medium	DEBIAN-CVE-2026-58011	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	ALPINE-CVE-2026-25646	libpng@1.6.54-r0	1.6.55-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28390	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.1latest	today	3.1.0	323581,692	21,387
0.42.0	7 days ago	3.1.0	323581,692	21,387
0.41.2	10 days ago	3.0.0	053751,905	23,639
0.41.1	14 days ago	3.0.0	053751,905	23,639
0.41.0	1 month ago	3.0.0	053751,905	23,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.