voltha-infra 2.14.0 Helm chart

Name: voltha-infra Helm chart 2.14.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 15 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Version 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,638 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,08827977771,737

2,638 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,080 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-21237	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20210225134936-a50acf3fe073	0.44.0
Low	UBUNTU-CVE-2025-50081	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.29b-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-12817	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-8713	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v0.1.1	1.3.6
Low	UBUNTU-CVE-2025-6141	ncurses@6.1-1ubuntu1.18.04.1	6.1-1ubuntu1.18.04.1+esm4
Low	DLA-3972-1	tzdata@2021a-1+deb11u2	2024b-0+deb11u1
Low	DLA-4016-1	ucf@3.0043	3.0043+deb11u2
Low	DLA-4085-1	tzdata@2021a-1+deb11u2	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DSA-5085-2	expat@2.2.10-2	2.2.10-2+deb11u3
Low	GO-2022-0360	github.com/containerd/containerd@v1.4.4	1.4.12
Low	GO-2022-0379	github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d	2.8.0+incompatible
Low	GO-2022-0396	github.com/opencontainers/runc@v0.1.1	1.0.0-rc91
Low	GO-2022-1107	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.20+incompatible
Low	GO-2023-2048	github.com/cyphar/filepath-securejoin@v0.2.2	0.2.4
Low	GO-2023-2153	google.golang.org/grpc@v1.27.1	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.4.4	1.6.26
Low	GO-2024-2846	github.com/containerd/containerd@v1.4.4	1.5.11
Low	GO-2024-2914	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.11+incompatible
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.27.1	1.82.1
Low	USN-3911-2	file@1:5.32-2ubuntu0.3	1:5.32-2ubuntu0.4
Low	USN-4360-2	json-c@0.12.1-1.3	0.12.1-1.3ubuntu0.2
Low	USN-4377-1	ca-certificates@20180409	20190110~18.04.1
Low	USN-4608-1	ca-certificates@20190110~18.04.1	20201027ubuntu0.18.04.1
Low	USN-4719-1	ca-certificates@20190110~18.04.1	20210119~18.04.1
Low	USN-4754-2	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.5
Low	USN-5089-1	ca-certificates@20190110~18.04.1	20210119~18.04.2
Low	USN-5174-2	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.27
Low	USN-5473-1	ca-certificates@20190110~18.04.1	20211016~18.04.1
Low	USN-6105-1	ca-certificates@20190110~18.04.1	20230311ubuntu0.18.04.1
Low	USN-6663-1	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm5
Low	USN-7015-6	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm8
Low	USN-7034-2	ca-certificates@20190110~18.04.1	202402031ubuntu0.18.04.1+esm1
Low	USN-7582-2	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2
Low	USN-8119-2	systemd@237-3ubuntu10.57	237-3ubuntu10.57+esm3
Low	USN-8226-2	kmod@22-1ubuntu5.2	22-1ubuntu5.2+esm1
Low	USN-8688-1	pam@1.1.8-3.6ubuntu2.18.04.6	1.1.8-3.6ubuntu2.18.04.6+esm2
Low	UBUNTU-CVE-2026-21965	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-v994-f8vw-g7j4	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.9
Low	GHSA-58qw-p7qm-5rvh	jetty-xml@9.4.43.v20210629	9.4.52.v20230823
Low	UBUNTU-CVE-2025-13462	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2021-43566	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	25.0.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977771,737	41,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.