opentelemetry-demo 0.42.3 Helm chart

Name: opentelemetry-demo Helm chart 0.42.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 7 Oct 2026

opentelemetry demo helm chart

Version 0.42.3 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.3 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,372 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

24,711323582,006

2,372 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00610	185
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00111	112
grafana/grafana	13.2.2-distroless	00856	686
jaegertracing/jaeger	2.20.0	001026	440
quay.io/prometheus/prometheus	v3.14.0	00313	137
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00653	525
ghcr.io/open-telemetry/demo	3.1.0-ad	1029197	2,275
ghcr.io/open-telemetry/demo	3.1.0-agent	0010181	1,730
library/postgres	18.4	0026184	2,195
ghcr.io/open-telemetry/demo	3.1.0-cart	0010	15
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0010165	1,603
ghcr.io/open-telemetry/demo	3.1.0-checkout	0001	4
ghcr.io/open-telemetry/demo	3.1.0-currency	0010	15
ghcr.io/open-telemetry/demo	3.1.0-email	001323	467
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001143	597
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	008100	1,038
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0024119	1,483
ghcr.io/open-telemetry/demo	3.1.0-frontend	00739	485
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1235101	1,725
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102665	1,108
ghcr.io/open-telemetry/demo	3.1.0-kafka	001351	727
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0040232	2,750
ghcr.io/open-telemetry/demo	3.1.0-mcp	0010181	1,730
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	0079	212
ghcr.io/open-telemetry/demo	3.1.0-payment	001954	882
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	0000	0
ghcr.io/open-telemetry/demo	3.1.0-quote	0047	150
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0014	53
ghcr.io/open-telemetry/demo	3.1.0-shipping	00731	408
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001642	772
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0068	202
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

704 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-14831	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GO-2025-4012	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-103111	pcre2@10.46-1~deb13u1	10.46-1~deb13u3
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-6846	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2025-65018	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.1
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-7546	binutils@2.44-3	no fix listed
Low	GHSA-g6x2-hccm-hh4m	werkzeug@3.1.8	3.1.9
Low	ALPINE-CVE-2026-78408	util-linux@2.41.4-r0	2.41.6-r1
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2018-15853	x11-xkb-utils@7.7+7	no fix listed
Low	DEBIAN-CVE-2018-15859	x11-xkb-utils@7.7+7	no fix listed
Low	DEBIAN-CVE-2018-15861	x11-xkb-utils@7.7+7	no fix listed
Low	DEBIAN-CVE-2018-15863	x11-xkb-utils@7.7+7	no fix listed
Low	GO-2026-4980	stdlib@go1.25.7	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.34.0-3ubuntu1.8	no fix listed
Low	DEBIAN-CVE-2026-18220	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	ALPINE-CVE-2026-7168	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	USN-8510-1	tar@1.35+dfsg-3build1	1.35+dfsg-3ubuntu0.2
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	UBUNTU-CVE-2026-102010	gcc-12@12.3.0-1ubuntu1~22.04.3	no fix listed
Low	GHSA-vcvr-r3jv-pc5j	next@16.3.5	16.3.6
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	DEBIAN-CVE-2025-1176	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-m9gg-hp2v-232j	@grpc/grpc-js@1.14.4	1.14.5
Low	DEBIAN-CVE-2026-88806	libx11@2:1.8.4-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2024-52615	avahi@0.8-10+deb12u1	no fix listed
Low	GO-2025-4011	stdlib@go1.24.6	1.24.8
Low	GO-2025-4015	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-24401	avahi@0.8-10+deb12u1	no fix listed
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	PYSEC-2026-3721	pip@26.1.2	26.2
Low	UBUNTU-CVE-2026-58471	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3
Low	UBUNTU-CVE-2026-58472	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3
Low	DEBIAN-CVE-2026-60147	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-wjgm-6hv5-3cvf	jackson-databind@2.21.2	2.21.6
Low	GO-2026-4603	stdlib@go1.25.7	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.3latest	today	3.1.0	323582,006	24,711
0.42.2	4 days ago	3.1.0	323582,006	24,711
0.42.1	11 days ago	3.1.0	323582,006	24,711
0.42.0	18 days ago	3.1.0	323582,006	24,711
0.41.2	21 days ago	3.0.0	053851,924	24,596
0.41.1	25 days ago	3.0.0	053851,924	24,596
0.41.0	2 months ago	3.0.0	053851,924	24,596

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.