opentelemetry-demo Helm chart

Name: opentelemetry-demo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Latest 0.41.1 3 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	535
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001183	877
ghcr.io/open-telemetry/demo	3.0.0-ad	0127176	2,006
ghcr.io/open-telemetry/demo	3.0.0-agent	0015155	1,609
library/postgres	18.4	0019166	1,661
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	475
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015166	1,743
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	435
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,514
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	676
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	033396	1,657
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	549
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	609
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015157	1,629
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	246
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	626
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	318
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	197
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	405
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	695
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	167
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

619 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58	0.24.0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.30.4	3.30.14
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.1	no fix listed
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Low	GHSA-xj96-63gp-2gmr	pillow@12.2.0	12.3.0
Low	GHSA-w5vr-8v7q-w6rv	baseline-browser-mapping@2.10.38	2.11.0
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.133.Final	4.1.137.Final
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2017-13716	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	UBUNTU-CVE-2026-0861	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.9.4-3ubuntu3.2	1.9.4-3ubuntu3.3
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.12.0	1.13.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.29
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2025-32990	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	DEBIAN-CVE-2018-9996	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-69650	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2021-32256	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63075	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-58011	glib2.0@2.74.6-2+deb12u8	no fix listed
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-xhj3-7xw9-vr34	github.com/getkin/kin-openapi@v0.140.0	0.142.0
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.7	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.49.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.1.1	2.1.3
Low	UBUNTU-CVE-2025-15281	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.7
Low	UBUNTU-CVE-2025-6297	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	UBUNTU-CVE-2026-42011	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.133.Final	4.1.135.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.