opentelemetry-demo Helm chart

Name: opentelemetry-demo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opentelemetry-helm

Scored 15 Sept 2026

opentelemetry demo helm chart

Latest 0.41.1 3 days agoapp version 3.0.0 1Artifact Hub

opentelemetry-demo 0.41.1 deploys 34 container images: otel/opentelemetry-collector-contrib, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, jaegertracing/jaeger and 7 more. Across the 33 measured, 2,203 findings — 0 critical, 5 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,678053401,855

2,203 findings over 33 of 34 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

34 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib	0.156.0	00031	215
quay.io/kiwigrid/k8s-sidecar×3	2.8.1	001025	445
grafana/grafana	13.1.0	001494	1,073
jaegertracing/jaeger	2.19.0	001041	536
quay.io/prometheus/prometheus	v3.13.1	00124	182
library/busybox×6	latest	0000	0
ghcr.io/open-telemetry/demo	3.0.0-accounting	001190	916
ghcr.io/open-telemetry/demo	3.0.0-ad	0127183	2,045
ghcr.io/open-telemetry/demo	3.0.0-agent	0015159	1,640
library/postgres	18.4	0019166	1,673
ghcr.io/open-telemetry/demo	3.0.0-cart	001032	476
ghcr.io/open-telemetry/demo	3.0.0-chatbot	0015170	1,775
ghcr.io/open-telemetry/demo	3.0.0-checkout	00021	145
ghcr.io/open-telemetry/demo	3.0.0-currency	0046	149
ghcr.io/open-telemetry/demo	3.0.0-email	001124	436
library/busybox	latest	0000	0
ghcr.io/open-feature/flagd	v0.16.0	00544	433
ghcr.io/open-telemetry/demo	3.0.0-flagd-ui	0000	0
ghcr.io/open-telemetry/demo	3.0.0-fraud-detection	0021131	1,519
ghcr.io/open-telemetry/demo	3.0.0-frontend	001637	682
ghcr.io/open-telemetry/demo	3.0.0-frontend-proxy	0333103	1,696
ghcr.io/open-telemetry/demo	3.0.0-image-provider	012067	1,027
ghcr.io/open-telemetry/demo	3.0.0-kafka	00843	550
ghcr.io/open-telemetry/demo	3.0.0-load-generator	001247	610
ghcr.io/open-telemetry/demo	3.0.0-mcp	0015161	1,661
ghcr.io/open-telemetry/demo	3.0.0-opamp-server	00419	247
ghcr.io/open-telemetry/demo	3.0.0-payment	001731	632
ghcr.io/open-telemetry/demo	3.0.0-product-catalog	00017	123
ghcr.io/open-telemetry/demo	3.0.0-quote	00814	319
ghcr.io/open-telemetry/demo	3.0.0-recommendation	00411	198
ghcr.io/open-telemetry/demo	3.0.0-shipping	001120	411
ghcr.io/open-telemetry/demo	3.0.0-telemetry-docs	001536	696
ghcr.io/valkey-io/valkey	9.0.4-alpine3.23	0048	168
opensearchproject/opensearch×2	3.7.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

741 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-1182	binutils@2.44-3	no fix listed
Low	GO-2026-6179	golang.org/x/mod@v0.37.0	0.40.0
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.4	no fix listed
Low	GHSA-xhgw-qwwf-pg32	github.com/cilium/ebpf@v0.21.0	0.22.0
Low	GO-2026-5048	github.com/hamba/avro/v2@v2.31.0	no fix listed
Low	GO-2026-5052	software.sslmate.com/src/go-pkcs12@v0.7.0	0.7.2
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.54.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.28.0	0.30.0
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0097	rand@0.9.1	0.8.6
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	USN-8091-1	util-linux@2.39.3-9ubuntu6.3	2.39.3-9ubuntu6.5
Low	USN-8436-1	ca-certificates@20240203	20260601~24.04.1
Low	USN-8543-2	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.5
Low	USN-8625-1	openssl@3.0.2-0ubuntu1.25	3.0.2-0ubuntu1.26
Low	USN-8688-1	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.8
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r19	1.37.0-r20
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-q2mw-fvj9-vvcw	net-imap@0.6.2	0.6.4
Low	UBUNTU-CVE-2026-24515	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4
Low	UBUNTU-CVE-2026-57062	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.6
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u8	2.74.6-2+deb12u9
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.8-0ubuntu2	1:3.8-0ubuntu2.1
Low	DEBIAN-CVE-2026-22007	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-34268	openjdk-17@17.0.18+8-1~deb12u1	17.0.19+10-1~deb12u2
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r19	1.37.0-r20
Low	UBUNTU-CVE-2026-89162	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.39-3ubuntu0.1	no fix listed
Low	DEBIAN-CVE-2025-66861	binutils@2.44-3	no fix listed
Low	GHSA-c4fp-cxrr-mj66	net-imap@0.6.2	0.6.4.1
Low	UBUNTU-CVE-2026-5958	sed@4.9-2build1	4.9-2ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-6368	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.15
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3
None	DEBIAN-CVE-2026-19582	binutils@2.44-3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.41.1latest	3 days ago	3.0.0	053401,855	22,678
0.41.0	1 month ago	3.0.0	053401,855	22,678

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opentelemetry-helm/opentelemetry-demo.svg)](https://charts.stackradar.io/charts/opentelemetry-helm/opentelemetry-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.