voltha-infra 2.14.0 Helm chart

Name: voltha-infra Helm chart 2.14.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 15 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Version 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,638 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,08827977771,737

2,638 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,080 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-34272	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-34276	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-34303	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-34308	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-11822	sqlite3@3.22.0-1ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.22.0-1ubuntu0.5	no fix listed
Low	DLA-4267-1	gnutls28@3.7.1-5	3.7.1-5+deb11u8
Low	GHSA-f3fp-gc8g-vw66	github.com/opencontainers/runc@v0.1.1	1.1.2
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.4.4	1.5.18
Low	UBUNTU-CVE-2019-17594	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.27.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-21212	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21179	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-0450	python2.7@2.7.17-1~18.04	no fix listed
Low	GO-2023-2375	stdlib@go1.16.5	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm7
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0
Low	UBUNTU-CVE-2026-58224	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	GO-2023-1569	stdlib@go1.16.5	1.19.6
Low	UBUNTU-CVE-2025-12781	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2025-21540	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-15366	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2026-87910	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2025-21497	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-g2j6-57v7-gm8c	github.com/opencontainers/runc@v0.1.1	1.1.5
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.27.1	1.83.1
Low	GO-2023-2382	stdlib@go1.16.5	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.58.0-2ubuntu3.19	no fix listed
Low	UBUNTU-CVE-2022-21589	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.40-0ubuntu0.18.04.1
Low	GO-2022-1143	stdlib@go1.16.5	1.18.9
Low	UBUNTU-CVE-2023-43786	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.1.8-3.6ubuntu2.18.04.6	1.1.8-3.6ubuntu2.18.04.6+esm1
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.27.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0
Low	UBUNTU-CVE-2024-21008	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21013	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
Low	UBUNTU-CVE-2026-21968	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2024-2599	stdlib@go1.16.5	1.21.8
Low	UBUNTU-CVE-2026-15392	libdbi-perl@1.640-1	no fix listed
Low	UBUNTU-CVE-2025-53053	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-53054	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21519	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30722	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2022-1038	stdlib@go1.16.5	1.18.7
Low	DSA-5357-1	git@1:2.30.2-1	1:2.30.2-1+deb11u2
Low	UBUNTU-CVE-2024-20968	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-47064	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977771,737	41,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.