opentelemetry-demo Helm chart

Name: opentelemetry-demo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 14 Sept 2026

opentelemetry demo helm chart

Latest 0.41.1 3 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,170 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,420053401,822

2,170 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	536
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	916
ghcr.io/open-telemetry/demo	3.0.0-ad	0127183	2,045
ghcr.io/open-telemetry/demo	3.0.0-agent	0015159	1,640
library/postgres	18.4	0019166	1,673
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	476
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015170	1,775
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,519
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	682
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0333103	1,696
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	610
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015161	1,661
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	632
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	411
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

741 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-53613	util-linux@2.37.2-4ubuntu3.5	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-53614	util-linux@2.39.3-9ubuntu6.3	2.39.3-9ubuntu6.6
Low	UBUNTU-CVE-2026-53615	util-linux@2.37.2-4ubuntu3.5	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-77117	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-80489	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.15
Low	ALPINE-CVE-2026-34757	libpng@1.6.54-r0	1.6.57-r0
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-68160	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	GHSA-4x4j-2g7c-83w6	pillow@12.2.0	12.3.0
Low	DEBIAN-CVE-2025-69644	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-47059	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.2	no fix listed
Low	GO-2026-5025	golang.org/x/net@v0.49.0	0.55.0
Low	DEBIAN-CVE-2026-90801	binutils@2.44-3	no fix listed
Low	GO-2026-4970	stdlib@go1.25.11	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5544	github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension@v0.156.0	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2+deb12u3	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5build1	1.0.8-5ubuntu0.1
Low	DEBIAN-CVE-2026-22018	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.9	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.5	no fix listed
Low	DEBIAN-CVE-2026-60589	openjdk-17@17.0.18+8-1~deb12u1	17.0.20.1+1-1~deb12u1
Low	DEBIAN-CVE-2026-47010	openjdk-17@17.0.18+8-1~deb12u1	17.0.20+8-1~deb12u1
Low	GO-2026-4602	stdlib@go1.25.7	1.25.8
Low	GHSA-8396-jffm-qx4w	github.com/openfga/openfga@v1.14.2	1.16.0
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	UBUNTU-CVE-2026-27456	util-linux@2.37.2-4ubuntu3.5	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-18508	tar@1.34+dfsg-1ubuntu0.1.22.04.4	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.4.7-21+deb13u1+b4	no fix listed
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-89160	pcre2@10.39-3ubuntu0.1	no fix listed
Low	DEBIAN-CVE-2026-90803	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-90804	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.27-3ubuntu2.5	no fix listed
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	UBUNTU-CVE-2026-41080	expat@2.6.1-2ubuntu0.3	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-90802	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69418	openssl@3.0.2-0ubuntu1.25	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.44-3	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.39.0	0.44.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,822	22,420
0.41.0	1 month ago	3.0.0	053401,822	22,420

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.