StackRadar

sdc Helm chart

smo-helm-chart

Scored 14 Sept 2026

Service Design and Creation Umbrella Helm charts

Latest 6.0.0 4 years agoApp version not verified against the render 0Artifact Hub

sdc 6.0.0 deploys 14 container images: oomk8s/readiness-check, dibi/envsubst, nexus3.onap.org:10001/onap/sdc-backend, docker.elastic.co/beats/filebeat and 10 more. Across the 2 measured, 1,437 findings — 18 critical, 66 high — 1 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.15, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

25,7691866589763

1,437 findings over 2 of 14 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images
ImageTagVulnerabilitiesRadar Score
oomk8s/readiness-check×142.0.2176056876024,776
dibi/envsubst×6latest16213993
nexus3.onap.org:10001/onap/sdc-backend1.6.5—unmeasured
docker.elastic.co/beats/filebeat×85.5.0—unmeasured
nexus3.onap.org:10001/onap/dcae-be1.3.4—unmeasured
nexus3.onap.org:10001/onap/dcae-dt1.3.4—unmeasured
nexus3.onap.org:10001/onap/dcae-fe1.3.4—unmeasured
nexus3.onap.org:10001/onap/dcae-tosca-app1.3.3—unmeasured
nexus3.onap.org:10001/onap/sdc-frontend1.6.5—unmeasured
registry.hub.docker.com/library/busyboxlatest—unmeasured
nexus3.onap.org:10001/onap/sdc-onboard-backend1.6.5—unmeasured
nexus3.onap.org:10001/onap/sdc-workflow-backend1.7.0—unmeasured
nexus3.onap.org:10001/onap/sdc-workflow-frontend1.7.0—unmeasured
nexus3.onap.org:10001/onap/sdc-workflow-init1.7.0—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

66 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighUBUNTU-CVE-2020-8625bind9@1:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.18
HighUBUNTU-CVE-2022-25236expat@2.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.5+esm2
HighUBUNTU-CVE-2020-36222openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
HighUBUNTU-CVE-2020-36227openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
HighALPINE-CVE-2022-0778openssl@1.1.1g-r01.1.1n-r0
HighUBUNTU-CVE-2022-0778openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm2
HighUBUNTU-CVE-2021-27212openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.13
HighUBUNTU-CVE-2007-4559python3.5@3.5.2-2ubuntu0~16.04.5no fix listed
HighUBUNTU-CVE-2007-4559python2.7@2.7.12-1ubuntu0~16.04.4no fix listed
HighGHSA-x4qr-2fvf-3mr5cryptography@2.6.139.0.1
HighUBUNTU-CVE-2023-0286openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm6
HighUBUNTU-CVE-2019-5436curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.13
HighUBUNTU-CVE-2019-1349git@1:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.7
HighUBUNTU-CVE-2024-2398curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.19+esm12
HighUBUNTU-CVE-2021-3177python3.5@3.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.13
HighUBUNTU-CVE-2021-3177python2.7@2.7.12-1ubuntu0~16.04.42.7.12-1ubuntu0~16.04.18
HighUBUNTU-CVE-2023-25652git@1:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.10+esm7
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighUBUNTU-CVE-2018-25032zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm1
HighUBUNTU-CVE-2018-25032rsync@3.1.1-3ubuntu1.23.1.1-3ubuntu1.3+esm1
HighALPINE-CVE-2021-23840openssl@1.1.1g-r01.1.1j-r0
HighUBUNTU-CVE-2021-23840openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.19
HighUBUNTU-CVE-2023-2650openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm9
HighALPINE-CVE-2021-3712openssl@1.1.1g-r01.1.1l-r0
HighUBUNTU-CVE-2021-3712openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm1
HighUBUNTU-CVE-2020-8617bind9@1:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.16
HighUBUNTU-CVE-2023-48795openssh@1:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.10+esm5
HighUBUNTU-CVE-2019-1350git@1:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.7
HighUBUNTU-CVE-2019-5482curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.14
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighUBUNTU-CVE-2022-37434rsync@3.1.1-3ubuntu1.23.1.1-3ubuntu1.3+esm2
HighUBUNTU-CVE-2022-37434zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm2
HighUBUNTU-CVE-2019-1352git@1:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.7
HighUBUNTU-CVE-2019-1354git@1:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.7
HighUBUNTU-CVE-2016-2775bind9@1:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.19+esm5
HighALPINE-CVE-2021-3449openssl@1.1.1g-r01.1.1k-r0
HighUBUNTU-CVE-2022-0572vim@2:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.5+esm6
HighUBUNTU-CVE-2016-8858openssh@1:7.2p2-4ubuntu2.8no fix listed
HighUBUNTU-CVE-2019-12735vim@2:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.3
HighUBUNTU-CVE-2019-6111openssh@1:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.fips.2.8.1
HighUBUNTU-CVE-2016-6170bind9@1:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.19+esm5
HighUBUNTU-CVE-2024-2511openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm18
HighUBUNTU-CVE-2024-3596krb5@1.13.2+dfsg-5ubuntu2.11.13.2+dfsg-5ubuntu2.2+esm6
HighUBUNTU-CVE-2021-31535libx11@2:1.6.3-1ubuntu2.12:1.6.3-1ubuntu2.2+esm1
HighUBUNTU-CVE-2019-19012libonig@5.9.6-1ubuntu0.15.9.6-1ubuntu0.1+esm2
HighUBUNTU-CVE-2022-40303libxml2@2.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.7+esm4
HighUBUNTU-CVE-2022-35737sqlite3@3.11.0-1ubuntu1.13.11.0-1ubuntu1.5+esm2
HighUBUNTU-CVE-2019-9948python2.7@2.7.12-1ubuntu0~16.04.42.7.12-1ubuntu0~16.04.8
HighUBUNTU-CVE-2019-9948python3.5@3.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.8
HighUBUNTU-CVE-2019-5010python3.5@3.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.0.0latest4 years ago—186658976325,769

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/smo-helm-chart/sdc.svg)](https://charts.stackradar.io/charts/smo-helm-chart/sdc)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.