voltha-infra 2.14.0 Helm chart

Name: voltha-infra Helm chart 2.14.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 14 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Version 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,631 findings — 29 critical, 95 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,04429957771,730

2,631 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,670 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9
Low	GO-2021-0242	stdlib@go1.16.2	1.15.13
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.24
Low	UBUNTU-CVE-2020-14393	libdbi-perl@1.640-1	1.640-1ubuntu0.3
Low	UBUNTU-CVE-2020-3810	apt@1.6.12	1.6.12ubuntu0.1
Low	UBUNTU-CVE-2025-32990	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm2
Low	UBUNTU-CVE-2025-30682	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30687	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30688	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-r7p8-xq5m-436c	jetty-jaspi@9.4.43.v20210629	9.4.61
Low	UBUNTU-CVE-2022-21303	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2022-21304	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2024-50602	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm2
Low	UBUNTU-CVE-2020-14869	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.43.v20210629	9.4.56
Low	UBUNTU-CVE-2018-20217	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.3
Low	UBUNTU-CVE-2022-21515	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.39-0ubuntu0.18.04.2
Low	UBUNTU-CVE-2020-25720	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	UBUNTU-CVE-2025-21577	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2021-0264	stdlib@go1.16.5	1.16.10
Low	UBUNTU-CVE-2023-22084	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.44-0ubuntu0.18.04.1+esm1
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.27.Final	4.1.135.Final
Low	GO-2022-0969	stdlib@go1.16.5	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.1.8-3.6ubuntu2.18.04.6	no fix listed
Low	UBUNTU-CVE-2023-27538	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24
Low	UBUNTU-CVE-2024-21177	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.18	1.31
Low	UBUNTU-CVE-2023-7104	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7+esm1
Low	UBUNTU-CVE-2022-45142	heimdal@7.5.0+dfsg-1	7.5.0+dfsg-1ubuntu0.4
Low	UBUNTU-CVE-2020-14350	postgresql-10@10.12-0ubuntu0.18.04.1	10.14-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2019-6488	glibc@2.27-3ubuntu1.6	no fix listed
Low	GO-2021-0239	stdlib@go1.16.2	1.15.13
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.27.Final	4.1.108.Final
Low	UBUNTU-CVE-2018-7738	util-linux@2.31.1-0.4ubuntu3.6	2.31.1-0.4ubuntu3.7
Low	UBUNTU-CVE-2024-5642	python2.7@2.7.17-1~18.04	no fix listed
Low	GO-2021-0347	stdlib@go1.16.5	1.16.15
Low	UBUNTU-CVE-2023-43787	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2
Low	UBUNTU-CVE-2026-3644	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm15
Low	UBUNTU-CVE-2024-8096	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10
Low	GO-2021-0245	stdlib@go1.16.5	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
Low	GHSA-c72p-9xmj-rx3w	github.com/containerd/containerd@v1.4.4	1.4.8
Low	UBUNTU-CVE-2026-46863	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6479	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2023-34968	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	GO-2021-0319	stdlib@go1.16.5	1.16.14
Low	UBUNTU-CVE-2023-47039	perl@5.26.1-6ubuntu0.7	no fix listed
Low	UBUNTU-CVE-2020-8284	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.27.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	29957771,730	41,044

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.