finance-portal 5.1.4 Helm chart

Name: finance-portal Helm chart 5.1.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mojaloop

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 5.1.4 4 days agodeploys tag v0.0.9 0Artifact Hub

finance-portal 5.1.4 deploys 11 container images: mojaloop/reporting-aggregator-svc, mojaloop/reporting-events-processor-svc, mojaloop/reporting-hub-bop-api-svc, mojaloop/reporting-hub-bop-experience-api-svc and 7 more. Across them, 1,017 findings — 5 critical, 37 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

14,809537263712

1,017 findings over 11 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
mojaloop/reporting-aggregator-svc	v0.0.9	021347	800
mojaloop/reporting-events-processor-svc	v3.5.1	0344166	2,631
mojaloop/reporting-hub-bop-api-svc	v4.1.2	062681	1,661
mojaloop/reporting-hub-bop-experience-api-svc	v2.0.4	0333158	2,318
mojaloop/reporting-hub-bop-positions-ui	v0.0.9	13145	627
mojaloop/reporting-hub-bop-role-ui	v1.5.5	13145	627
mojaloop/reporting-hub-bop-settlements-ui	v0.0.25	13145	627
mojaloop/reporting-hub-bop-shell	v2.3.3	13145	627
mojaloop/reporting-hub-bop-trx-ui	v2.0.2	13145	627
mojaloop/reporting	v12.1.0	044096	1,948
mojaloop/role-assignment-service	v2.1.0	0437139	2,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

365 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
High	ALPINE-CVE-2025-15467	openssl@3.3.3-r0	3.3.6-r0
High	GHSA-phwq-j96m-2c2q	ejs@2.7.4	3.1.7
High	ALPINE-CVE-2024-6119	openssl@3.1.4-r5	3.1.7-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1n-r0	1.1.1t-r0
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1n-r0	1.1.1u-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.12-r0	1.2.12-r2
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	GHSA-r5fr-rjxr-66jc	lodash-es@4.17.21	4.18.0
High	ALPINE-CVE-2024-2511	openssl@3.1.4-r5	3.1.4-r6
High	GHSA-hw8r-x6gr-5gjp	jsonpath-plus@0.19.0	10.3.0
High	ALPINE-CVE-2022-4450	openssl@1.1.1n-r0	1.1.1t-r0
High	GHSA-pppg-cpfq-h7wr	jsonpath-plus@0.19.0	10.2.0
High	GHSA-35jh-r3h4-6jhm	lodash@3.10.1	4.17.21
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
Medium	GHSA-hrpp-h998-j3pp	qs@0.6.5	6.2.4
Medium	GHSA-2p57-rm9w-gvfp	ip@2.0.0	no fix listed
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r5	3.1.6-r0
Medium	GHSA-jf85-cpcp-j695	lodash@3.10.1	4.17.12
Medium	GHSA-jjv7-qpx3-h62q	qs@0.6.5	1.0.0
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2019-14697	musl@1.1.20-r4	1.1.20-r5
Medium	ALPINE-CVE-2026-45447	openssl@3.5.1-r0	3.5.7-r0
Medium	ALPINE-CVE-2019-19956	libxml2@2.9.9-r1	2.9.9-r2
Medium	ALPINE-CVE-2019-1551	openssl@1.1.1b-r1	1.1.1d-r2
Medium	GHSA-p6mc-m468-83gw	lodash@3.10.1	4.17.19
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2019-18197	libxslt@1.1.33-r1	1.1.33-r2
Medium	GHSA-hj9c-8jmm-8c52	npm@8.5.5	8.11.0
Medium	GHSA-2w6w-674q-4c4q	handlebars@4.7.8	4.7.9
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1n-r0	1.1.1t-r2
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1b-r1	1.1.1j-r0
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.3	2.5.4
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1b-r1	1.1.1i-r0
Medium	GHSA-5j98-mcp5-4vw2	glob@10.4.2	10.5.0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.4-r5	3.1.6-r0
Medium	ALPINE-CVE-2019-2201	libjpeg-turbo@1.5.3-r4	1.5.3-r6
Medium	GHSA-c2qf-rxjj-qqgw	semver@7.3.5	7.5.2
Medium	GHSA-43fc-jf86-j433	axios@0.21.4	0.30.3
Medium	ALPINE-CVE-2025-11187	openssl@3.5.1-r0	3.5.5-r0
Medium	ALPINE-CVE-2020-24977	libxml2@2.9.9-r1	2.9.9-r3
Medium	GHSA-gqgv-6jq5-jjj9	qs@0.6.5	6.0.4
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1n-r0	1.1.1u-r2
Medium	ALPINE-CVE-2019-13117	libxslt@1.1.33-r1	1.1.33-r3
Medium	GHSA-q8pj-2vqx-8ggc	css-what@4.0.0	5.0.1
Medium	GHSA-wf6x-7x77-mvgw	immutable@4.3.4	4.3.8
Medium	ALPINE-CVE-2019-1549	openssl@1.1.1b-r1	1.1.1d-r0
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.1.4latest	4 days ago	v0.0.9	537263712	14,809

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mojaloop/finance-portal.svg)](https://charts.stackradar.io/charts/mojaloop/finance-portal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.