opentelemetry-demo 0.42.6 Helm chart

Name: opentelemetry-demo Helm chart 0.42.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 24 Oct 2026

opentelemetry demo helm chart

Version 0.42.6 2 days agoapp version 3.1.0 1Artifact Hub

opentelemetry-demo 0.42.6 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,849 findings — 3 critical, 2 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.2-0ubuntu1.29, with no fix listed.

Radar Score

29,432323632,478

2,849 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.160.0	00927	423
quay.io/kiwigrid/k8s-sidecar×3	2.11.2	00016	149
grafana/grafana	13.2.2-distroless	001081	1,001
jaegertracing/jaeger	2.20.0	001244	676
quay.io/prometheus/prometheus	v3.14.0	00630	375
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.1.0-accounting	001466	773
ghcr.io/open-telemetry/demo	3.1.0-ad	1028207	2,341
ghcr.io/open-telemetry/demo	3.1.0-agent	009196	1,845
library/postgres	18.4	0026208	2,433
ghcr.io/open-telemetry/demo	3.1.0-cart	00317	240
ghcr.io/open-telemetry/demo	3.1.0-chatbot	0012214	2,157
ghcr.io/open-telemetry/demo	3.1.0-checkout	00317	232
ghcr.io/open-telemetry/demo	3.1.0-currency	0001	13
ghcr.io/open-telemetry/demo	3.1.0-email	001125	467
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	001460	850
ghcr.io/open-telemetry/demo	3.1.0-flagd-ui	007101	1,031
ghcr.io/open-telemetry/demo	3.1.0-fraud-detection	0017176	1,850
ghcr.io/open-telemetry/demo	3.1.0-frontend	00650	559
ghcr.io/open-telemetry/demo	3.1.0-frontend-proxy	1234113	1,791
ghcr.io/open-telemetry/demo	3.1.0-image-provider	102794	1,413
ghcr.io/open-telemetry/demo	3.1.0-kafka	001260	798
ghcr.io/open-telemetry/demo	3.1.0-load-generator	0034272	2,956
ghcr.io/open-telemetry/demo	3.1.0-mcp	009196	1,845
ghcr.io/open-telemetry/demo	3.1.0-opamp-server	00822	372
ghcr.io/open-telemetry/demo	3.1.0-payment	001855	863
ghcr.io/open-telemetry/demo	3.1.0-product-catalog	00316	228
ghcr.io/open-telemetry/demo	3.1.0-quote	0048	163
ghcr.io/open-telemetry/demo	3.1.0-recommendation	0009	83
ghcr.io/open-telemetry/demo	3.1.0-shipping	00632	403
ghcr.io/open-telemetry/demo	3.1.0-telemetry-docs	001653	879
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	00512	223
opensearchproject/opensearch×2	3.8.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,073 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GO-2026-6612	stdlib@go1.27.1	1.27.2
Medium	GO-2026-6612	golang.org/x/net@v0.58.0	0.60.0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-34180	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-7383	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.83.1	1.83.2
Medium	ALPINE-CVE-2026-3805	curl@8.14.1-r2	8.14.1-r4
Medium	GHSA-2fvj-hgj9-j2gr	jetty-security@12.0.34	12.0.36
Medium	GHSA-332p-7hrc-92wf	pillow@12.3.0	13.0.0
Medium	DEBIAN-CVE-2026-58016	glib2.0@2.74.6-2+deb12u8	no fix listed
Medium	USN-8039-1	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.5
Medium	DEBIAN-CVE-2018-18064	cairo@1.16.0-7	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Medium	DEBIAN-CVE-2025-29070	lcms2@2.14-2	no fix listed
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1
Medium	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Medium	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-25646	libpng@1.6.54-r0	1.6.55-r0
Medium	ALPINE-CVE-2026-80231	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-111497	brotli@1.2.0-r0	1.2.1-r0
Medium	DEBIAN-CVE-2026-111497	brotli@1.0.9-2+b6	1.0.9-2+deb12u1
Medium	PYSEC-2026-4322	brotli@1.2.0	1.2.1
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28388	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.39.0	1.41.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	GHSA-mf4x-w4gh-4656	Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.12	10.0.13
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.29	no fix listed
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.49.0	0.52.0
Medium	DEBIAN-CVE-2017-11695	nss@2:3.87.1-1+deb12u4	no fix listed
Medium	DEBIAN-CVE-2017-11696	nss@2:3.87.1-1+deb12u4	no fix listed
Medium	DEBIAN-CVE-2017-11698	nss@2:3.87.1-1+deb12u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.42.6latest	2 days ago	3.1.0	323632,478	29,432
0.42.5	3 days ago	3.1.0	323632,478	29,432
0.42.4	10 days ago	3.1.0	323632,478	29,432
0.42.3	17 days ago	3.1.0	323632,478	29,432
0.42.2	21 days ago	3.1.0	323632,478	29,432
0.42.1	28 days ago	3.1.0	323632,478	29,432
0.42.0	1 month ago	3.1.0	323632,478	29,432
0.41.2	1 month ago	3.0.0	053892,021	25,719
0.41.1	1 month ago	3.0.0	053892,021	25,719
0.41.0	2 months ago	3.0.0	053892,021	25,719

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.