opentelemetry-demo 0.42.4 Helm chart

Name: opentelemetry-demo Helm chart 0.42.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Oct 2026

opentelemetry demo helm chart

Version 0.42.4 yesterdayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.4 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,622 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

27,137323482,266

2,622 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00926	404
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00012	110
grafana/grafana	13.2.2-distroless	001171	893
jaegertracing/jaeger	2.20.0	001242	646
quay.io/prometheus/prometheus	v3.14.0	00628	346
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00671	679
ghcr.io/open-telemetry/demo	3.1.0-ad	1028203	2,325
ghcr.io/open-telemetry/demo	3.1.0-agent	009182	1,726
library/postgres	18.4	0027206	2,429
ghcr.io/open-telemetry/demo	3.1.0-cart	00316	221
ghcr.io/open-telemetry/demo	3.1.0-chatbot	009166	1,595
ghcr.io/open-telemetry/demo	3.1.0-checkout	00316	213
ghcr.io/open-telemetry/demo	3.1.0-currency	0001	13
ghcr.io/open-telemetry/demo	3.1.0-email	001125	467
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001458	805
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	007101	1,032
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0017131	1,505
ghcr.io/open-telemetry/demo	3.1.0-frontend	00646	518
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1234106	1,755
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102468	1,104
ghcr.io/open-telemetry/demo	3.1.0-kafka	001257	762
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0033263	2,852
ghcr.io/open-telemetry/demo	3.1.0-mcp	009182	1,726
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00821	358
ghcr.io/open-telemetry/demo	3.1.0-payment	001855	863
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	00315	209
ghcr.io/open-telemetry/demo	3.1.0-quote	0038	147
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0005	51
ghcr.io/open-telemetry/demo	3.1.0-shipping	00632	403
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001544	780
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0059	200
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

782 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-89160	pcre2@10.47-r0	10.48-r0
Low	DEBIAN-CVE-2026-89160	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-p4g4-x82p-q773	pyjwt@2.13.0	2.14.0
Low	DEBIAN-CVE-2022-0563	util-linux@2.41.5-0+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-102633	expat@2.6.1-2ubuntu0.3	no fix listed
Low	DEBIAN-CVE-2026-15588	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-3441	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-3442	binutils@2.44-3	no fix listed
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-w2cx-738m-mc7w	pyjwt@2.13.0	2.14.0
Low	GHSA-wq5f-xc86-pv6w	sharp@0.35.4	0.35.5
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.10.3
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	DEBIAN-CVE-2026-89158	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-93542	libxi@2:1.8-1+b1	no fix listed
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.2.16.Final	4.2.17.Final
Low	DSA-6189-1	libpng1.6@1.6.39-2+deb12u3	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2026-22693	harfbuzz@6.0.0+dfsg-3	no fix listed
Low	DEBIAN-CVE-2026-93541	libxi@2:1.8-1+b1	no fix listed
Low	DEBIAN-CVE-2026-93544	libxi@2:1.8-1+b1	no fix listed
Low	GHSA-cjq9-62q9-8jv4	next@16.3.5	16.3.8
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@2.21.2	2.21.4
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2023-45913	mesa@22.3.6-1+deb12u2	no fix listed
Low	GHSA-gvp8-978c-rx2q	pyjwt@2.13.0	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.21.2	2.21.5
Low	GO-2026-4865	stdlib@go1.25.7	1.25.9
Low	DEBIAN-CVE-2026-27447	cups@2.4.2-3+deb12u9	no fix listed
Low	GHSA-465g-fh3v-9jw4	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	DEBIAN-CVE-2025-27587	openssl@3.0.18-1~deb12u2	no fix listed
Low	GHSA-9v7f-9g4p-ffgj	pyjwt@2.13.0	2.14.0
Low	DEBIAN-CVE-2026-41079	cups@2.4.2-3+deb12u9	no fix listed
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	DEBIAN-CVE-2026-90803	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-86138	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	GHSA-2gx3-rcp4-g85q	pyjwt@2.13.0	2.14.0
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.4	5.38.2-3.2ubuntu0.6
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-34979	cups@2.4.2-3+deb12u9	no fix listed
Low	GO-2026-4976	stdlib@go1.25.7	1.25.10
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	GO-2026-5039	stdlib@go1.25.7	1.25.11
Low	DEBIAN-CVE-2026-107708	krb5@1.20.1-2+deb12u5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.4latest	yesterday	3.1.0	323482,266	27,137
0.42.3	8 days ago	3.1.0	323482,266	27,137
0.42.2	12 days ago	3.1.0	323482,266	27,137
0.42.1	19 days ago	3.1.0	323482,266	27,137
0.42.0	26 days ago	3.1.0	323482,266	27,137
0.41.2	29 days ago	3.0.0	053911,996	25,456
0.41.1	1 month ago	3.0.0	053911,996	25,456
0.41.0	2 months ago	3.0.0	053911,996	25,456

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.