voltha-infra Helm chart

Name: voltha-infra Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 14 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Latest 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,631 findings — 29 critical, 95 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,04429957771,730

2,631 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356266	3,714
freeradius/freeradius-server	3.0.21	1431281692	15,702
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267120	2,766
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1226211311	10,075

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,076 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-69419	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	UBUNTU-CVE-2022-23491	ca-certificates@20190110~18.04.1	20211016ubuntu0.18.04.1
Low	UBUNTU-CVE-2016-4484	cryptsetup@2:1.6.6-5ubuntu2.1	no fix listed
Low	GO-2021-0240	stdlib@go1.16.2	1.15.13
Low	UBUNTU-CVE-2026-54874	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm10
Low	UBUNTU-CVE-2026-6475	postgresql-10@10.12-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2023-5868	postgresql-10@10.12-0ubuntu0.18.04.1	10.23-0ubuntu0.18.04.2+esm1
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v0.1.1	1.2.8
Low	UBUNTU-CVE-2022-21367	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9
Low	GO-2021-0242	stdlib@go1.16.2	1.15.13
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.24
Low	UBUNTU-CVE-2020-14393	libdbi-perl@1.640-1	1.640-1ubuntu0.3
Low	UBUNTU-CVE-2020-3810	apt@1.6.12	1.6.12ubuntu0.1
Low	UBUNTU-CVE-2025-32990	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm2
Low	UBUNTU-CVE-2025-30682	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30687	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30688	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-r7p8-xq5m-436c	jetty-jaspi@9.4.43.v20210629	9.4.61
Low	UBUNTU-CVE-2022-21303	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2022-21304	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2024-50602	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm2
Low	UBUNTU-CVE-2020-14869	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.43.v20210629	9.4.56
Low	UBUNTU-CVE-2018-20217	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.3
Low	UBUNTU-CVE-2022-21515	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.39-0ubuntu0.18.04.2
Low	UBUNTU-CVE-2020-25720	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	UBUNTU-CVE-2025-21577	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2021-0264	stdlib@go1.16.5	1.16.10
Low	UBUNTU-CVE-2023-22084	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.44-0ubuntu0.18.04.1+esm1
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.27.Final	4.1.135.Final
Low	GO-2022-0969	stdlib@go1.16.5	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.1.8-3.6ubuntu2.18.04.6	no fix listed
Low	UBUNTU-CVE-2023-27538	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24
Low	UBUNTU-CVE-2024-21177	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.18	1.31
Low	UBUNTU-CVE-2023-7104	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7+esm1
Low	UBUNTU-CVE-2022-45142	heimdal@7.5.0+dfsg-1	7.5.0+dfsg-1ubuntu0.4
Low	UBUNTU-CVE-2020-14350	postgresql-10@10.12-0ubuntu0.18.04.1	10.14-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2019-6488	glibc@2.27-3ubuntu1.6	no fix listed
Low	GO-2021-0239	stdlib@go1.16.2	1.15.13
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.27.Final	4.1.108.Final
Low	UBUNTU-CVE-2018-7738	util-linux@2.31.1-0.4ubuntu3.6	2.31.1-0.4ubuntu3.7
Low	UBUNTU-CVE-2024-5642	python2.7@2.7.17-1~18.04	no fix listed
Low	GO-2021-0347	stdlib@go1.16.5	1.16.15
Low	UBUNTU-CVE-2023-43787	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2
Low	UBUNTU-CVE-2026-3644	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm15
Low	UBUNTU-CVE-2024-8096	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm10
Low	GO-2021-0245	stdlib@go1.16.5	1.15.15

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	29957771,730	41,044

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.