StackRadar

ghcr.io/open-telemetry/demo:3.1.0-image-provider container image

GitHub Container Registry

Scanned 19 Sept 2026

Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/open-telemetry/demo

ghcr.io/open-telemetry/demo:3.1.0-image-provider resolved to 46d1a7e95109, scanned 19 Sept 2026: 88 findings, 0 critical; deployed by 1 chart, among them opentelemetry-demo.

Radar Score

1,031012166

88 findings on digest 46d1a7e95109 · scanned 19 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
3.1.0-image-providerresolves to46d1a7e951091 charttoday0121661,031

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

66 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 46d1a7e95109 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-42768openssl@3.5.4-r03.5.7-r0
LowALPINE-CVE-2026-32778expat@2.7.3-r02.7.5-r0
LowALPINE-CVE-2026-32776expat@2.7.3-r02.7.5-r0
LowALPINE-CVE-2026-6042musl@1.2.5-r101.2.5-r11
LowALPINE-CVE-2026-42770openssl@3.5.4-r03.5.7-r0
LowALPINE-CVE-2026-22795openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2026-4367libxpm@3.5.17-r03.5.19-r0
LowALPINE-CVE-2026-56131expat@2.7.3-r02.8.2-r0
LowALPINE-CVE-2025-68160openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2026-34757libpng@1.6.54-r01.6.57-r0
LowALPINE-CVE-2026-27456util-linux@2.41-r92.41.6-r0
LowALPINE-CVE-2026-41080expat@2.7.3-r02.8.1-r0
LowALPINE-CVE-2025-69418openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2025-46394busybox@1.37.0-r191.37.0-r20
LowALPINE-CVE-2026-24515expat@2.7.3-r02.7.4-r0
LowALPINE-CVE-2024-58251busybox@1.37.0-r191.37.0-r20

Used by

1 chart
ChartVersionTagContainers
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.03.1.0-image-provider1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 19 Sept 2026 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.