voltha-infra 2.14.0 Helm chart

Name: voltha-infra Helm chart 2.14.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 14 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Version 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,631 findings — 29 critical, 95 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,04429957771,730

2,631 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356266	3,714
freeradius/freeradius-server	3.0.21	1431281692	15,702
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267120	2,766
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1226211311	10,075

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

70 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.6	2.9.9
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.9.6	2.9.7
High	UBUNTU-CVE-2022-35737	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7
High	UBUNTU-CVE-2022-32206	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.19
High	UBUNTU-CVE-2023-24329	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13
High	UBUNTU-CVE-2022-4450	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.21
High	GHSA-2363-cqg2-863c	jdom@1.0	no fix listed
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.6	2.9.10.2
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.6	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.6	2.9.10.7
High	UBUNTU-CVE-2021-23336	python2.7@2.7.17-1~18.04	no fix listed
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.9.6	2.9.7
High	GHSA-vmfg-rjjm-rjrj	logback-core@1.1.2	1.2.0
High	GHSA-vmfg-rjjm-rjrj	logback-classic@1.1.2	1.2.0
High	UBUNTU-CVE-2018-11236	glibc@2.27-3ubuntu1	2.27-3ubuntu1.2
High	GHSA-cqqj-4p63-rrmm	netty@3.10.5.Final	no fix listed
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.27.Final	4.1.44
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.6	2.9.10.8
High	DLA-4323-1KEV	git@1:2.30.2-1	1:2.30.2-1+deb11u5
High	DSA-5514-1KEV	glibc@2.31-13+deb11u2	2.31-13+deb11u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	29957771,730	41,044

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.