voltha-infra Helm chart

Name: voltha-infra Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opencord

Scored 16 Sept 2026

A Helm chart to install the required infrastructure for VOLTHA

Latest 2.14.0 1 year agodeploys tag 0.3.5 0Artifact Hub

voltha-infra 2.14.0 deploys 10 container images: voltha/bbsim-sadis-server, freeradius/freeradius-server, opencord/onos-classic-helm-utils, bitnami/etcd and 6 more. Across the 6 measured, 2,637 findings — 27 critical, 97 high — 11 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

41,10127977791,734

2,637 findings over 6 of 10 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
voltha/bbsim-sadis-server	0.3.5	1356267	3,722
freeradius/freeradius-server	3.0.21	1332282693	15,718
opencord/onos-classic-helm-utils	0.1.0	1866223	3,889
bitnami/etcd	3.5.6-debian-11-r10	—	unmeasured
bitnami/zookeeper	3.8.0-debian-11-r65	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r25	—	unmeasured
library/ubuntu	16.04	1267121	2,774
atomix/atomix	3.1.12	02596118	4,908
tutum/dnsutils	latest	—	not yet scanned
voltha/voltha-onos	5.1.8	1127212312	10,090

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,669 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DLA-4105-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DSA-5085-2	expat@2.2.10-2	2.2.10-2+deb11u3
Low	GO-2022-0360	github.com/containerd/containerd@v1.4.4	1.4.12
Low	GO-2022-0379	github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d	2.8.0+incompatible
Low	GO-2022-0396	github.com/opencontainers/runc@v0.1.1	1.0.0-rc91
Low	GO-2022-1107	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.20+incompatible
Low	GO-2023-2048	github.com/cyphar/filepath-securejoin@v0.2.2	0.2.4
Low	GO-2023-2153	google.golang.org/grpc@v1.27.1	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.4.4	1.6.26
Low	GO-2024-2846	github.com/containerd/containerd@v1.4.4	1.5.11
Low	GO-2024-2914	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.11+incompatible
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.27.1	1.82.1
Low	USN-3911-2	file@1:5.32-2ubuntu0.3	1:5.32-2ubuntu0.4
Low	USN-4360-2	json-c@0.12.1-1.3	0.12.1-1.3ubuntu0.2
Low	USN-4377-1	ca-certificates@20180409	20190110~18.04.1
Low	USN-4608-1	ca-certificates@20190110~18.04.1	20201027ubuntu0.18.04.1
Low	USN-4719-1	ca-certificates@20190110~18.04.1	20210119~18.04.1
Low	USN-4754-2	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.5
Low	USN-5089-1	ca-certificates@20190110~18.04.1	20210119~18.04.2
Low	USN-5174-2	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.27
Low	USN-5473-1	ca-certificates@20190110~18.04.1	20211016~18.04.1
Low	USN-6105-1	ca-certificates@20190110~18.04.1	20230311ubuntu0.18.04.1
Low	USN-6663-1	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm5
Low	USN-7015-6	python2.7@2.7.17-1~18.04	2.7.17-1~18.04ubuntu1.13+esm8
Low	USN-7034-2	ca-certificates@20190110~18.04.1	202402031ubuntu0.18.04.1+esm1
Low	USN-7582-2	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2
Low	USN-8119-2	systemd@237-3ubuntu10.57	237-3ubuntu10.57+esm3
Low	USN-8226-2	kmod@22-1ubuntu5.2	22-1ubuntu5.2+esm1
Low	USN-8688-1	pam@1.1.8-3.6ubuntu2.18.04.6	1.1.8-3.6ubuntu2.18.04.6+esm2
Low	UBUNTU-CVE-2026-21965	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-v994-f8vw-g7j4	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.9
Low	GHSA-58qw-p7qm-5rvh	jetty-xml@9.4.43.v20210629	9.4.52.v20230823
Low	UBUNTU-CVE-2025-13462	python2.7@2.7.17-1~18.04	no fix listed
Low	UBUNTU-CVE-2021-43566	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	no fix listed
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	25.0.13
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.27.Final	4.1.125.Final
Low	UBUNTU-CVE-2026-22001	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-61081	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v0.1.1	1.1.5
Low	UBUNTU-CVE-2025-66382	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-61096	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-24515	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3
Low	UBUNTU-CVE-2026-40228	systemd@237-3ubuntu10.57	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2023-4016	procps@2:3.3.12-3ubuntu1.2	2:3.3.12-3ubuntu1.2+esm1
Low	UBUNTU-CVE-2025-50100	mysql-5.7@5.7.29-0ubuntu0.18.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.14.0latest	1 year ago	0.3.5	27977791,734	41,101

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opencord/voltha-infra.svg)](https://charts.stackradar.io/charts/opencord/voltha-infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.