onos 3.0.2 Helm chart
opencordScored 14 Sept 2026
Open Network Operating System
Version 3.0.2 5 years agoapp version 2.2.1 0Artifact Hub
onos 3.0.2 deploys 1 container image: onosproject/onos. Across them, 659 findings — 21 critical, 34 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in pax-logging-log4j2 1.11.4, fixed in 1.11.10.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| onosproject/ | 2.2.1 | 2134270334 | 12,927 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
659 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-6fmv-xxpf-w3cw | plexus-utils | 3.6.1 |
| Low | UBUNTU-CVE-2018-16869 | nettle | 3.4.1-0ubuntu0.18.04.1 |
| Low | UBUNTU-CVE-2020-14363 | libx11 | 2:1.6.4-3ubuntu0.3 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | UBUNTU-CVE-2020-11080 | nghttp2 | 1.30.0-1ubuntu1+esm1 |
| Low | GHSA-45q3-82m4-75jr | netty-handler-proxy | 4.1.133.Final |
| Low | UBUNTU-CVE-2026-0915 | glibc | 2.27-3ubuntu1.6+esm6 |
| Low | UBUNTU-CVE-2025-4802 | glibc | 2.27-3ubuntu1.6+esm5 |
| Low | UBUNTU-CVE-2023-50495 | ncurses | 6.1-1ubuntu1.18.04.1+esm2 |
| Low | UBUNTU-CVE-2026-5773 | curl | 7.58.0-2ubuntu3.24+esm10 |
| Low | UBUNTU-CVE-2023-5981 | gnutls28 | 3.5.18-1ubuntu1.6+esm1 |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
| Low | UBUNTU-CVE-2021-3997 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-63072 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| Low | GHSA-w33c-445m-f8w7 | okio | 1.17.6 |
| Low | GHSA-2r2c-cx56-8933 | jline-remote-telnet | 3.30.14 |
| Low | GHSA-47qp-hqvx-6r3f | jline-remote-telnet | 3.30.14 |
| Low | UBUNTU-CVE-2024-33600 | glibc | 2.27-3ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-66046 | expat | no fix listed |
| Low | UBUNTU-CVE-2022-48303 | tar | 1.29b-2ubuntu0.4 |
| Low | UBUNTU-CVE-2023-0466 | openssl | 1.1.1-1ubuntu2.1~18.04.22 |
| Low | GHSA-mf27-wg66-m8f5 | atomix | no fix listed |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | UBUNTU-CVE-2023-0465 | openssl | 1.1.1-1ubuntu2.1~18.04.22 |
| Low | UBUNTU-CVE-2026-42013 | gnutls28 | 3.5.18-1ubuntu1.6+esm4 |
| Low | UBUNTU-CVE-2018-7169 | shadow | 1:4.5-1ubuntu2.2 |
| Low | GHSA-g7p8-r2ch-4rmf | atomix | no fix listed |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2025-69419 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Low | UBUNTU-CVE-2022-23491 | ca-certificates | 20211016ubuntu0.18.04.1 |
| Low | UBUNTU-CVE-2026-54874 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| Low | UBUNTU-CVE-2026-42766 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm9 |
| Low | UBUNTU-CVE-2020-3810 | apt | 1.6.12ubuntu0.1 |
| Low | UBUNTU-CVE-2020-1712 | systemd | 237-3ubuntu10.38 |
| Low | UBUNTU-CVE-2025-32990 | gnutls28 | 3.5.18-1ubuntu1.6+esm2 |
| Low | GHSA-r7p8-xq5m-436c | jetty-jaspi | 9.4.61 |
| Low | UBUNTU-CVE-2024-50602 | expat | 2.2.5-3ubuntu0.9+esm2 |
| Low | GHSA-g8m5-722r-8whq | jetty-server | 9.4.56 |
| Low | UBUNTU-CVE-2018-20217 | krb5 | 1.16-2ubuntu0.3 |
| Low | UBUNTU-CVE-2025-6020 | pam | no fix listed |
| Low | UBUNTU-CVE-2023-27538 | curl | 7.58.0-2ubuntu3.24 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | UBUNTU-CVE-2023-7104 | sqlite3 | 3.22.0-1ubuntu0.7+esm1 |
| Low | UBUNTU-CVE-2022-45142 | heimdal | 7.5.0+dfsg-1ubuntu0.4 |
| Low | UBUNTU-CVE-2019-6488 | glibc | no fix listed |
| Low | GHSA-5jpm-x58v-624v | netty-codec-http | 4.1.108.Final |
| Low | UBUNTU-CVE-2018-7738 | util-linux | 2.31.1-0.4ubuntu3.7 |
| Low | UBUNTU-CVE-2023-43787 | libx11 | 2:1.6.4-3ubuntu0.4+esm2 |
| Low | GHSA-6xx3-rg99-gc3p | bcprov-jdk15on | 1.66 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/opencord/onos)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.