opentelemetry-demo 0.42.1 Helm chart

Name: opentelemetry-demo Helm chart 0.42.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 26 Sept 2026

opentelemetry demo helm chart

Version 0.42.1 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,058 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

21,387323581,692

2,058 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00610	172
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	42
grafana/grafana	13.2.2-distroless	00460	462
jaegertracing/jaeger	2.20.0	00926	343
quay.io/prometheus/prometheus	v3.14.0	00313	119
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00643	464
ghcr.io/open-telemetry/demo	3.1.0-ad	1030175	2,093
ghcr.io/open-telemetry/demo	3.1.0-agent	0010144	1,419
library/postgres	18.4	0025165	1,820
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010143	1,412
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001322	458
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00945	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	001079	889
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024104	1,329
ghcr.io/open-telemetry/demo	3.1.0-frontend	00715	274
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	123689	1,655
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102662	1,080
ghcr.io/open-telemetry/demo	3.1.0-kafka	001441	623
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0044203	2,583
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010144	1,419
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0078	203
ghcr.io/open-telemetry/demo	3.1.0-payment	002031	709
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	132
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	37
ghcr.io/open-telemetry/demo	3.1.0-shipping	00715	274
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001834	732
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0066	183
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

774 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-6653	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63075	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	UBUNTU-CVE-2026-13221	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2024-10963	pam@1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5
Low	DEBIAN-CVE-2026-59679	libxfont@1:2.0.6-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-14456	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2017-7475	cairo@1.16.0-7	no fix listed
Low	ALPINE-CVE-2026-11352	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2026-22016	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.1	no fix listed
Low	ALPINE-CVE-2026-82209	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-12087	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	DEBIAN-CVE-2025-1352	elfutils@0.188-2.1	no fix listed
Low	UBUNTU-CVE-2026-4046	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	DEBIAN-CVE-2025-1153	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2018-20673	binutils@2.44-3	no fix listed
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.8.4
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-0915	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.2	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.49.0	0.52.0
Low	ALPINE-CVE-2026-11586	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2026-76641	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.6
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.1	no fix listed
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2017-11697	nss@2:3.87.1-1+deb12u4	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-91187	dash@0.5.12-6ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.1latest	today	3.1.0	323581,692	21,387
0.42.0	7 days ago	3.1.0	323581,692	21,387
0.41.2	10 days ago	3.0.0	053751,905	23,639
0.41.1	14 days ago	3.0.0	053751,905	23,639
0.41.0	1 month ago	3.0.0	053751,905	23,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.