opentelemetry-demo 0.42.1 Helm chart

Name: opentelemetry-demo Helm chart 0.42.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 26 Sept 2026

opentelemetry demo helm chart

Version 0.42.1 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,058 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

21,387323581,692

2,058 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00610	172
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	42
grafana/grafana	13.2.2-distroless	00460	462
jaegertracing/jaeger	2.20.0	00926	343
quay.io/prometheus/prometheus	v3.14.0	00313	119
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00643	464
ghcr.io/open-telemetry/demo	3.1.0-ad	1030175	2,093
ghcr.io/open-telemetry/demo	3.1.0-agent	0010144	1,419
library/postgres	18.4	0025165	1,820
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010143	1,412
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001322	458
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00945	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	001079	889
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024104	1,329
ghcr.io/open-telemetry/demo	3.1.0-frontend	00715	274
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	123689	1,655
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102662	1,080
ghcr.io/open-telemetry/demo	3.1.0-kafka	001441	623
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0044203	2,583
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010144	1,419
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0078	203
ghcr.io/open-telemetry/demo	3.1.0-payment	002031	709
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	132
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	37
ghcr.io/open-telemetry/demo	3.1.0-shipping	00715	274
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001834	732
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0066	183
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

774 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-11856	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.49.0	0.52.0
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.7.9-2+deb12u7	no fix listed
Medium	DEBIAN-CVE-2019-6462	cairo@1.16.0-7	no fix listed
Medium	DEBIAN-CVE-2019-6461	cairo@1.16.0-7	no fix listed
Medium	GHSA-3m6g-2423-7cp3	json@2.18.0	2.19.2
Medium	ALPINE-CVE-2026-10536	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2025-59375	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.5
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-34180	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-9079	curl@8.19.0-r0	8.22.0-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.21.2	2.21.4
Medium	UBUNTU-CVE-2024-0727	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	UBUNTU-CVE-2026-57433	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-8924	curl@8.19.0-r0	8.22.0-r0
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.49.0	0.52.0
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	DEBIAN-CVE-2026-66046	expat@2.5.0-1+deb12u2	no fix listed
Medium	ALPINE-CVE-2026-2100	p11-kit@0.25.5-r2	0.26.2-r0
Medium	UBUNTU-CVE-2025-13151	libtasn1-6@4.19.0-3ubuntu0.24.04.1	4.19.0-3ubuntu0.24.04.2
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.49.0	0.52.0
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	DEBIAN-CVE-2024-26461	krb5@1.20.1-2+deb12u5	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2023-6237	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	UBUNTU-CVE-2022-41409	pcre2@10.39-3ubuntu0.1	no fix listed
Medium	DEBIAN-CVE-2026-58010	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	DEBIAN-CVE-2026-58012	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	DEBIAN-CVE-2026-58013	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.49.0	0.52.0
Medium	UBUNTU-CVE-2024-9143	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	DEBIAN-CVE-2026-58014	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	UBUNTU-CVE-2026-8376	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Medium	GHSA-c5pq-fr2g-9jpf	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.19.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2023-45931	mesa@22.3.6-1+deb12u2	no fix listed
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58	0.24.0
Medium	UBUNTU-CVE-2026-31790	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-14457	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.1latest	today	3.1.0	323581,692	21,387
0.42.0	7 days ago	3.1.0	323581,692	21,387
0.41.2	10 days ago	3.0.0	053751,905	23,639
0.41.1	14 days ago	3.0.0	053751,905	23,639
0.41.0	1 month ago	3.0.0	053751,905	23,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.