voltha-infra Helm chart

Name: voltha-infra Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 15 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Latest 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,638 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,08827977771,737

2,638 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,080 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-31912	libpcap@1.8.1-6ubuntu1.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6244	libpcap@1.8.1-6ubuntu1.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6554	libpcap@1.8.1-6ubuntu1.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-50096	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-14678	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-18024	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6470	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	GO-2026-4403	stdlib@go1.16.5	1.23.9
Low	UBUNTU-CVE-2023-29383	shadow@1:4.5-1ubuntu2.5	no fix listed
Low	GO-2026-5025	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
Low	GO-2026-4970	stdlib@go1.16.5	1.25.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v0.1.1	1.1.14
Low	UBUNTU-CVE-2025-30681	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2019-19126	glibc@2.27-3ubuntu1	2.27-3ubuntu1.2
Low	UBUNTU-CVE-2025-15224	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm7
Low	UBUNTU-CVE-2025-30721	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.6-8.1ubuntu0.2	1.0.6-8.1ubuntu0.2+esm1
Low	UBUNTU-CVE-2026-32777	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2020-14771	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2025-9820	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm3
Low	UBUNTU-CVE-2026-39113	sqlite3@3.22.0-1ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-14666	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	GO-2026-4602	stdlib@go1.16.5	1.25.8
Low	UBUNTU-CVE-2010-3192	glibc@2.23-0ubuntu11.3	no fix listed
Low	UBUNTU-CVE-2023-2602	libcap2@1:2.24-12	no fix listed
Low	DLA-4156-1	openssh@1:8.4p1-5	1:8.4p1-5+deb11u5
Low	UBUNTU-CVE-2026-76957	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-60191	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.29b-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-45186	expat@2.2.5-3ubuntu0.2	no fix listed
Low	GO-2026-5622	github.com/containerd/containerd@v1.4.4	no fix listed
Low	UBUNTU-CVE-2024-10977	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-16241	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30703	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.4-1ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg@1.4.20-1ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-6469	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-41080	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-14673	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-6638	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.27.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-50098	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-50104	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.43.v20210629	no fix listed
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977771,737	41,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.