opentelemetry-demo 0.42.4 Helm chart

Name: opentelemetry-demo Helm chart 0.42.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Oct 2026

opentelemetry demo helm chart

Version 0.42.4 yesterdayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.4 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,622 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

27,137323482,266

2,622 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00926	404
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00012	117
grafana/grafana	13.2.2-distroless	001171	893
jaegertracing/jaeger	2.20.0	001242	646
quay.io/prometheus/prometheus	v3.14.0	00628	346
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	001463	781
ghcr.io/open-telemetry/demo	3.1.0-ad	1028203	2,324
ghcr.io/open-telemetry/demo	3.1.0-agent	009182	1,728
library/postgres	18.4	0027206	2,434
ghcr.io/open-telemetry/demo	3.1.0-cart	00316	221
ghcr.io/open-telemetry/demo	3.1.0-chatbot	009166	1,596
ghcr.io/open-telemetry/demo	3.1.0-checkout	00316	213
ghcr.io/open-telemetry/demo	3.1.0-currency	0001	13
ghcr.io/open-telemetry/demo	3.1.0-email	001125	467
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001458	804
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	007101	1,031
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0017131	1,503
ghcr.io/open-telemetry/demo	3.1.0-frontend	00646	518
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1234106	1,755
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102468	1,104
ghcr.io/open-telemetry/demo	3.1.0-kafka	001257	763
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0032264	2,853
ghcr.io/open-telemetry/demo	3.1.0-mcp	009182	1,728
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00821	358
ghcr.io/open-telemetry/demo	3.1.0-payment	001855	864
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	00315	209
ghcr.io/open-telemetry/demo	3.1.0-quote	0038	147
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0005	51
ghcr.io/open-telemetry/demo	3.1.0-shipping	00632	404
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001544	780
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0059	200
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

775 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-105326	cups@2.4.2-3+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-22007	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r19	1.37.0-r20
Low	DEBIAN-CVE-2025-66861	binutils@2.44-3	no fix listed
Low	GO-2026-4602	stdlib@go1.25.7	1.25.8
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0
Low	UBUNTU-CVE-2026-5958	sed@4.9-2build1	4.9-2ubuntu0.24.04.1
Low	DEBIAN-CVE-2026-107886	cups@2.4.2-3+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-88648	gnutls28@3.7.9-2+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-88812	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93515	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93516	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93517	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93518	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93519	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93520	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93521	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93523	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93524	xorg-server@2:21.1.7-3+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-93536	xorg-server@2:21.1.7-3+deb12u13	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.4latest	yesterday	3.1.0	323482,266	27,137
0.42.3	8 days ago	3.1.0	323482,266	27,137
0.42.2	12 days ago	3.1.0	323482,266	27,137
0.42.1	19 days ago	3.1.0	323482,266	27,137
0.42.0	26 days ago	3.1.0	323482,266	27,137
0.41.2	29 days ago	3.0.0	053911,996	25,456
0.41.1	1 month ago	3.0.0	053911,996	25,456
0.41.0	2 months ago	3.0.0	053911,996	25,456

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.