voltha-infra 2.14.0 Helm chart

Name: voltha-infra Helm chart 2.14.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 15 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Version 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,638 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,08827977771,737

2,638 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,670 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.69	1.78
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.27.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-33602	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm3
Low	UBUNTU-CVE-2021-2226	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.34-0ubuntu0.18.04.1
Low	GHSA-mjmq-gwgm-5qhm	sshd-sftp@2.5.1	2.9.3
Low	GHSA-mjmq-gwgm-5qhm	sshd-core@1.7.0	2.1.0
Low	UBUNTU-CVE-2025-30693	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v20.10.5+incompatible	29.2.0
Low	UBUNTU-CVE-2021-2022	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.33-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2026-14679	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2020-14867	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2026-4046	glibc@2.27-3ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2019-14855	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.3
Low	UBUNTU-CVE-2019-14855	gnupg@1.4.20-1ubuntu3.3	no fix listed
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.66	1.84
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.43.v20210629	9.4.52
Low	GO-2022-0537	stdlib@go1.16.5	1.17.13
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.69	1.78
Low	GHSA-4c37-7m5h-c8m9	org.apache.felix.webconsole@4.7.0	4.9.10
Low	UBUNTU-CVE-2026-48959	perl@5.26.1-6ubuntu0.7	no fix listed
Low	UBUNTU-CVE-2021-20251	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	UBUNTU-CVE-2026-5928	glibc@2.27-3ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2020-14553	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.31-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2026-3833	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm3
Low	GHSA-rc4r-wh2q-q6c4	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.18
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.69	no fix listed
Low	DSA-5202-1	unzip@6.0-26	6.0-26+deb11u1
Low	UBUNTU-CVE-2025-50078	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-60163	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	23.0.11
Low	UBUNTU-CVE-2026-60081	libdbi-perl@1.640-1	no fix listed
Low	UBUNTU-CVE-2021-2171	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.34-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2026-6478	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	GHSA-v2xm-76pq-phcf	classgraph@4.2.3	4.8.112
Low	UBUNTU-CVE-2020-14559	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.31-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2024-20964	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.27-3ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2026-60315	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21490	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21504	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21166	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.34-1ubuntu0.18.04.2	1.6.34-1ubuntu0.18.04.2+esm1
Low	UBUNTU-CVE-2026-8458	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm9
Low	UBUNTU-CVE-2025-4207	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-76641	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-50083	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6253	curl@7.58.0-2ubuntu3.19	no fix listed
Low	UBUNTU-CVE-2020-27618	glibc@2.27-3ubuntu1.2	2.27-3ubuntu1.5
Low	UBUNTU-CVE-2025-50076	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-50082	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977771,737	41,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.