opentelemetry-demo 0.42.1 Helm chart

Name: opentelemetry-demo Helm chart 0.42.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 26 Sept 2026

opentelemetry demo helm chart

Version 0.42.1 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,058 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

21,387323581,692

2,058 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00610	172
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	0005	42
grafana/grafana	13.2.2-distroless	00460	462
jaegertracing/jaeger	2.20.0	00926	343
quay.io/prometheus/prometheus	v3.14.0	00313	119
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00643	464
ghcr.io/open-telemetry/demo	3.1.0-ad	1030175	2,093
ghcr.io/open-telemetry/demo	3.1.0-agent	0010144	1,419
library/postgres	18.4	0025165	1,820
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010143	1,412
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001322	458
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00945	457
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	001079	889
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024104	1,329
ghcr.io/open-telemetry/demo	3.1.0-frontend	00715	274
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	123689	1,655
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102662	1,080
ghcr.io/open-telemetry/demo	3.1.0-kafka	001441	623
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0044203	2,583
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010144	1,419
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0078	203
ghcr.io/open-telemetry/demo	3.1.0-payment	002031	709
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0045	132
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	37
ghcr.io/open-telemetry/demo	3.1.0-shipping	00715	274
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001834	732
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0066	183
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

774 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-93990	expat@2.8.2-r0	2.8.5-r0
Low	DEBIAN-CVE-2026-93990	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	GHSA-33mj-cw25-m34h	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	DEBIAN-CVE-2017-13716	binutils@2.44-3	no fix listed
Low	GHSA-82r6-8w77-94w6	anyio@4.14.1	4.14.2
Low	UBUNTU-CVE-2026-0861	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	ALPINE-CVE-2026-80230	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-88807	libxrender@1:0.9.10-1.1	no fix listed
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu1.1+Fips2
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	GHSA-rm6m-hrcw-jw33	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.2.16.Final	4.2.17.Final
Low	DEBIAN-CVE-2023-5388	nss@2:3.87.1-1+deb12u4	no fix listed
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.5
Low	ALPINE-CVE-2026-33416	libpng@1.6.54-r0	1.6.56-r0
Low	UBUNTU-CVE-2026-33416	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Low	DEBIAN-CVE-2026-86145	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	UBUNTU-CVE-2025-32990	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2023-5574	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2025-69650	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	UBUNTU-CVE-2025-15281	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2025-6297	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5
Low	DEBIAN-CVE-2018-9996	binutils@2.44-3	no fix listed
Low	GHSA-r2xf-8xr9-62gw	jline-builtins@3.30.4	3.30.15
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-58469	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3
Low	UBUNTU-CVE-2026-5928	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2021-32256	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2024-31852	llvm-toolchain-15@1:15.0.6-4+b1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.8	no fix listed
Low	ALPINE-CVE-2026-13608	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-48962	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-9080	curl@8.19.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-75xq-5h9v-w6px	net-imap@0.6.2	0.6.4
Low	DEBIAN-CVE-2026-41254	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.1latest	today	3.1.0	323581,692	21,387
0.42.0	7 days ago	3.1.0	323581,692	21,387
0.41.2	10 days ago	3.0.0	053751,905	23,639
0.41.1	14 days ago	3.0.0	053751,905	23,639
0.41.0	1 month ago	3.0.0	053751,905	23,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.