opentelemetry-demo 0.42.4 Helm chart

Name: opentelemetry-demo Helm chart 0.42.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Oct 2026

opentelemetry demo helm chart

Version 0.42.4 todayapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.4 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,622 findings — 3 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

27,137323482,266

2,622 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00926	404
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00012	110
grafana/grafana	13.2.2-distroless	001171	893
jaegertracing/jaeger	2.20.0	001242	646
quay.io/prometheus/prometheus	v3.14.0	00628	346
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	00671	679
ghcr.io/open-telemetry/demo	3.1.0-ad	1028203	2,325
ghcr.io/open-telemetry/demo	3.1.0-agent	009182	1,726
library/postgres	18.4	0027206	2,429
ghcr.io/open-telemetry/demo	3.1.0-cart	00316	221
ghcr.io/open-telemetry/demo	3.1.0-chatbot	009166	1,595
ghcr.io/open-telemetry/demo	3.1.0-checkout	00316	213
ghcr.io/open-telemetry/demo	3.1.0-currency	0001	13
ghcr.io/open-telemetry/demo	3.1.0-email	001125	467
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001458	805
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	007101	1,032
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0017131	1,505
ghcr.io/open-telemetry/demo	3.1.0-frontend	00646	518
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1234106	1,755
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102468	1,104
ghcr.io/open-telemetry/demo	3.1.0-kafka	001257	762
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0033263	2,852
ghcr.io/open-telemetry/demo	3.1.0-mcp	009182	1,726
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00821	358
ghcr.io/open-telemetry/demo	3.1.0-payment	001855	863
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	00315	209
ghcr.io/open-telemetry/demo	3.1.0-quote	0038	147
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0005	51
ghcr.io/open-telemetry/demo	3.1.0-shipping	00632	403
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001544	780
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0059	200
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

931 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-34980	cups@2.4.2-3+deb12u9	no fix listed
Low	ALPINE-CVE-2026-5545	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	DEBIAN-CVE-2025-61915	cups@2.4.2-3+deb12u9	no fix listed
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-vcgp-9326-pqcp	net-imap@0.6.2	0.6.4
Low	DEBIAN-CVE-2025-5245	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.49.0	0.52.0
Low	DEBIAN-CVE-2025-5244	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-7545	binutils@2.44-3	no fix listed
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GHSA-xx22-p4ch-683r	lz4-java@1.10.2	1.11.1
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	UBUNTU-CVE-2025-66293	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.3
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.51.0	0.55.0
Low	GHSA-gx83-3vf8-gh7j	jackson-databind@2.21.2	2.21.6
Low	GO-2026-6180	golang.org/x/mod@v0.33.0	0.40.0
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-w6r9-248c-frg8	github.com/rabbitmq/amqp091-go@v1.12.0	1.14.0
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.2.16.Final	4.2.17.Final
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u5	no fix listed
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	DEBIAN-CVE-2025-11083	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63074	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	DEBIAN-CVE-2025-11082	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2024-7531	nss@2:3.87.1-1+deb12u4	no fix listed
Low	UBUNTU-CVE-2026-95209	gnutls28@3.8.3-1.1ubuntu3.6	no fix listed
Low	GHSA-ph9c-7hw9-vhhw	jline-builtins@3.30.4	3.30.15
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.3	no fix listed
Low	DEBIAN-CVE-2021-45261	patch@2.8-2	no fix listed
Low	UBUNTU-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-5ubuntu3.1	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.21.2	2.21.4
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-34978	cups@2.4.2-3+deb12u9	no fix listed
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.29	no fix listed
Low	GHSA-6xff-cpcq-vpw2	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	1.5.1-0.20260303204923-b13f74291d48
Low	DEBIAN-CVE-2026-89157	pcre2@10.46-1~deb13u1	10.46-1~deb13u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.4latest	today	3.1.0	323482,266	27,137
0.42.3	7 days ago	3.1.0	323482,266	27,137
0.42.2	11 days ago	3.1.0	323482,266	27,137
0.42.1	18 days ago	3.1.0	323482,266	27,137
0.42.0	25 days ago	3.1.0	323482,266	27,137
0.41.2	28 days ago	3.0.0	053911,996	25,456
0.41.1	1 month ago	3.0.0	053911,996	25,456
0.41.0	2 months ago	3.0.0	053911,996	25,456

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.