ghcr.io/open-telemetry/demo:1.12.0-kafka container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/open-telemetry/demo

ghcr.io/open-telemetry/demo:1.12.0-kafka resolved to 071a788162e8, scanned 14 Sept 2026: 76 findings, 0 critical; deployed by 1 chart, among them opentelemetry-demo.

Radar Score

1,162032647

76 findings on digest 071a788162e8 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.12.0-kafkaresolves to	071a788162e8	1 chart	7 days ago	032647	1,162

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

26 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 071a788162e8 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r5	3.1.6-r0
Medium	ALPINE-CVE-2024-45492	expat@2.5.0-r2	2.6.3-r0
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.4-r5	3.1.6-r0
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.23.4	3.25.5
Medium	ALPINE-CVE-2024-45491	expat@2.5.0-r2	2.6.3-r0
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.100.Final	4.1.118.Final
Medium	GHSA-xw7x-h9fj-p2c7	opentelemetry-javaagent@2.4.0	2.26.1
Medium	ALPINE-CVE-2024-28757	expat@2.5.0-r2	2.6.2-r0
Medium	GHSA-crhr-qqj8-rpxc	zookeeper@3.8.3	3.8.6
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r2	2.6.0-r0
Medium	ALPINE-CVE-2024-45490	expat@2.5.0-r2	2.6.3-r0
Medium	GHSA-76qp-h5mr-frr4	kafka_2.13@3.7.0	3.9.1
Medium	ALPINE-CVE-2025-9230	openssl@3.1.4-r5	3.1.8-r1
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.8.1	3.18.0
Medium	ALPINE-CVE-2025-59375	expat@2.5.0-r2	2.7.2-r0
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.11.0	2.14.0
Medium	ALPINE-CVE-2024-8176	expat@2.5.0-r2	2.7.0-r0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.100.Final	4.1.135.Final
Medium	GHSA-355h-qmc2-wpwf	jetty-http@9.4.53.v20231009	9.4.60
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.16.0	2.18.8
Medium	ALPINE-CVE-2024-9143	openssl@3.1.4-r5	3.1.7-r1
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.16.0	2.18.8
Medium	ALPINE-CVE-2025-9232	openssl@3.1.4-r5	3.1.8-r1
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.100.Final	4.1.135.Final
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.7.0	3.7.1

Used by

1 chart

Chart	Version	Tag	Containers
opentelemetry-demogpg-dev	0.33.8	1.12.0-kafka	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.