opentelemetry-demo 0.42.2 Helm chart

Name: opentelemetry-demo Helm chart 0.42.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 3 Oct 2026

opentelemetry demo helm chart

Version 0.42.2 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.2 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,335 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

24,359323461,981

2,335 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	0069	178
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00011	97
grafana/grafana	13.2.2-distroless	00856	687
jaegertracing/jaeger	2.20.0	00926	426
quay.io/prometheus/prometheus	v3.14.0	00313	137
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00652	522
ghcr.io/open-telemetry/demo	3.1.0-ad	1029195	2,267
ghcr.io/open-telemetry/demo	3.1.0-agent	0010179	1,712
library/postgres	18.4	0026183	2,190
ghcr.io/open-telemetry/demo	3.1.0-cart	0000	0
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010165	1,597
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0000	0
ghcr.io/open-telemetry/demo	3.1.0-email	001223	452
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001143	599
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	008100	1,037
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024118	1,477
ghcr.io/open-telemetry/demo	3.1.0-frontend	00737	463
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1235100	1,723
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102565	1,093
ghcr.io/open-telemetry/demo	3.1.0-kafka	001251	712
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0040228	2,732
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010179	1,712
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0069	197
ghcr.io/open-telemetry/demo	3.1.0-payment	001946	820
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0037	135
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0004	38
ghcr.io/open-telemetry/demo	3.1.0-shipping	00731	408
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001542	757
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0058	187
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

837 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-58469	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3
Low	UBUNTU-CVE-2026-5928	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.21.2	2.21.7
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.7.0	2.8.0
Low	DEBIAN-CVE-2021-32256	binutils@2.44-3	no fix listed
Low	GO-2026-4342	stdlib@go1.24.6	1.24.12
Low	ALPINE-CVE-2026-82209	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2024-31852	llvm-toolchain-15@1:15.0.6-4+b1	no fix listed
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	ALPINE-CVE-2026-80255	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2026-54873	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	ALPINE-CVE-2026-13608	curl@8.19.0-r0	8.22.0-r0
Low	GO-2025-4155	stdlib@go1.24.6	1.24.11
Low	UBUNTU-CVE-2026-48962	perl@5.34.0-3ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	ALPINE-CVE-2026-9080	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.21.2	2.21.7
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.21.2	2.21.7
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	GO-2025-4014	stdlib@go1.24.6	1.24.8
Low	GHSA-75xq-5h9v-w6px	net-imap@0.6.2	0.6.4
Low	DEBIAN-CVE-2026-41254	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	DEBIAN-CVE-2026-41254	lcms2@2.14-2	2.14-2+deb12u1
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	DEBIAN-CVE-2026-88807	libxrender@1:0.9.10-1.1	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	DEBIAN-CVE-2026-11822	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	USN-8249-1	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-9545	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.19.0-r0	8.22.0-r0
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-84784	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.29	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.2latest	today	3.1.0	323461,981	24,359
0.42.1	7 days ago	3.1.0	323461,981	24,359
0.42.0	14 days ago	3.1.0	323461,981	24,359
0.41.2	17 days ago	3.0.0	053821,922	24,544
0.41.1	21 days ago	3.0.0	053821,922	24,544
0.41.0	2 months ago	3.0.0	053821,922	24,544

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.