voltha-infra Helm chart

Name: voltha-infra Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 15 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Latest 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,638 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,08827977771,737

2,638 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,720
freeradius/freeradius-server	3.0.21	1332281695	15,722
opencord/onos-classic-helm-utils	0.1.0	1866223	3,880
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,772
atomix/atomix	3.1.12	02596118	4,907
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127211313	10,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,670 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-21559	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-20971	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-20981	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	no fix listed
Low	UBUNTU-CVE-2026-3276	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2024-26458	krb5@1.16-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2024-20978	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21525	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GO-2023-1704	stdlib@go1.16.5	1.19.8
Low	UBUNTU-CVE-2024-21236	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21239	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	DSA-5726-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u5
Low	UBUNTU-CVE-2025-21491	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2022-21245	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.37-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2025-12084	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm14
Low	GO-2022-0289	stdlib@go1.16.5	1.16.12
Low	UBUNTU-CVE-2023-40217	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm4
Low	UBUNTU-CVE-2016-2781	coreutils@8.28-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-1299	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2025-30695	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21051	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	DLA-3893-1	expat@2.2.10-2	2.2.10-2+deb11u6
Low	UBUNTU-CVE-2024-21049	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21050	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.27.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.66	1.79
Low	UBUNTU-CVE-2021-2007	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.30-0ubuntu0.18.04.1
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.69	no fix listed
Low	UBUNTU-CVE-2026-61109	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21534	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-21536	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21057	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.26.1-6ubuntu0.7	no fix listed
Low	UBUNTU-CVE-2025-21499	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-20998	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21053	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2024-21054	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm8
Low	UBUNTU-CVE-2025-21492	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2022-21460	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.38-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2025-21523	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2023-28322	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm1
Low	UBUNTU-CVE-2024-21219	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-4519	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2025-15282	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm14
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.27.Final	4.1.136.Final
Low	UBUNTU-CVE-2014-10402	libdbi-perl@1.640-1	1.640-1ubuntu0.3
Low	UBUNTU-CVE-2023-2455	postgresql-10@10.12-0ubuntu0.18.04.1	10.23-0ubuntu0.18.04.2
Low	UBUNTU-CVE-2024-21047	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30705	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977771,737	41,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.