StackRadar

onos Helm chart

opencord

Scored 14 Sept 2026

Open Network Operating System

Latest 3.0.2 5 years agoapp version 2.2.1 0Artifact Hub

onos 3.0.2 deploys 1 container image: onosproject/onos. Across them, 659 findings — 21 critical, 34 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in pax-logging-log4j2 1.11.4, fixed in 1.11.10.

Radar Score

12,9272134270334

659 findings over 1 of 1 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
onosproject/onos2.2.1213427033412,927

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

659 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-2363-cqg2-863cjdom@1.0no fix listed
HighGHSA-288c-cq4h-88gqjackson-databind@2.10.22.10.5.1
HighUBUNTU-CVE-2018-11236glibc@2.27-3ubuntu12.27-3ubuntu1.2
HighGHSA-cqqj-4p63-rrmmnetty@3.10.5.Finalno fix listed
HighGHSA-cqqj-4p63-rrmmnetty-codec-http@4.1.35.Final4.1.44
MediumUBUNTU-CVE-2020-10543perl@5.26.1-6ubuntu0.35.26.1-6ubuntu0.5
MediumGHSA-4jrv-ppp4-jm57gson@2.72.8.9
MediumUBUNTU-CVE-2020-36230openldap@2.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.9
MediumGHSA-q446-82vq-w674jsch@0.1.530.1.54
MediumUBUNTU-CVE-2022-25235expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-22822expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-25315expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.7
MediumGHSA-4446-656p-f54gbcprov-jdk15on@1.591.60
MediumUBUNTU-CVE-2019-9169glibc@2.27-3ubuntu12.27-3ubuntu1.2
MediumUBUNTU-CVE-2022-23218glibc@2.27-3ubuntu12.27-3ubuntu1.5
MediumUBUNTU-CVE-2022-42898krb5@1.16-2ubuntu0.11.16-2ubuntu0.3
MediumUBUNTU-CVE-2022-42898heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.3
MediumUBUNTU-CVE-2021-36222krb5@1.16-2ubuntu0.11.16-2ubuntu0.4
MediumUBUNTU-CVE-2024-7264curl@7.58.0-2ubuntu3.87.58.0-2ubuntu3.24+esm5
MediumUBUNTU-CVE-2022-23852expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2024-5535openssl@1.1.1-1ubuntu2.1~18.04.51.1.1-1ubuntu2.1~18.04.23+esm10
MediumUBUNTU-CVE-2020-8285curl@7.58.0-2ubuntu3.87.58.0-2ubuntu3.12
MediumUBUNTU-CVE-2022-32221curl@7.58.0-2ubuntu3.87.58.0-2ubuntu3.21
MediumGHSA-mm9x-g8pc-w292netty-handler@4.1.35.Final4.1.46
MediumUBUNTU-CVE-2022-23219glibc@2.27-3ubuntu12.27-3ubuntu1.5
MediumGHSA-wm47-8v5p-wjpjnetty@3.10.5.Finalno fix listed
MediumGHSA-wm47-8v5p-wjpjnetty-codec-http2@4.1.35.Final4.1.60.Final
MediumGHSA-p979-4mfw-53vgnetty@3.10.5.Finalno fix listed
MediumUBUNTU-CVE-2019-19603sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.4
MediumUBUNTU-CVE-2022-1271xz-utils@5.2.2-1.35.2.2-1.3ubuntu0.1
MediumUBUNTU-CVE-2022-1271gzip@1.6-5ubuntu11.6-5ubuntu1.2
MediumGHSA-fhw8-8j55-vwgqsshd-core@1.7.02.9.2
MediumUBUNTU-CVE-2018-8740sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.4
MediumUBUNTU-CVE-2022-4304openssl@1.1.1-1ubuntu2.1~18.04.51.1.1-1ubuntu2.1~18.04.21
MediumUBUNTU-CVE-2022-22823expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-22824expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2020-10878perl@5.26.1-6ubuntu0.35.26.1-6ubuntu0.5
MediumUBUNTU-CVE-2022-1664dpkg@1.19.0.5ubuntu2.31.19.0.5ubuntu2.4
MediumUBUNTU-CVE-2019-1010022glibc@2.27-3ubuntu1no fix listed
MediumUBUNTU-CVE-2021-3520lz4@0.0~r131-2ubuntu30.0~r131-2ubuntu3.1
MediumUBUNTU-CVE-2019-19926sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.3
MediumUBUNTU-CVE-2021-45960expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2019-19923sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.3
MediumUBUNTU-CVE-2019-19925sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.3
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.35.Final4.1.68.Final
MediumGHSA-9vjp-v76f-g363netty@3.10.5.Finalno fix listed
MediumUBUNTU-CVE-2020-6096glibc@2.27-3ubuntu12.27-3ubuntu1.5
MediumUBUNTU-CVE-2022-24407cyrus-sasl2@2.1.27~101-g0780600+dfsg-3ubuntu2.12.1.27~101-g0780600+dfsg-3ubuntu2.4
MediumUBUNTU-CVE-2019-13734sqlite3@3.22.0-1ubuntu0.23.22.0-1ubuntu0.3
MediumUBUNTU-CVE-2021-33574glibc@2.27-3ubuntu1no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.0.2latest5 years ago2.2.1213427033412,927

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/opencord/onos.svg)](https://charts.stackradar.io/charts/opencord/onos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.