StackRadar

finance-portal Helm chart

mojaloop

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 5.1.4 4 days agodeploys tag v0.0.9 0Artifact Hub

finance-portal 5.1.4 deploys 11 container images: mojaloop/reporting-aggregator-svc, mojaloop/reporting-events-processor-svc, mojaloop/reporting-hub-bop-api-svc, mojaloop/reporting-hub-bop-experience-api-svc and 7 more. Across them, 1,017 findings5 critical, 37 high 5 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

14,809537263712

1,017 findings over 11 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images
ImageTagVulnerabilitiesRadar Score
mojaloop/reporting-aggregator-svcv0.0.9021347800
mojaloop/reporting-events-processor-svcv3.5.103441662,631
mojaloop/reporting-hub-bop-api-svcv4.1.20626811,661
mojaloop/reporting-hub-bop-experience-api-svcv2.0.403331582,318
mojaloop/reporting-hub-bop-positions-uiv0.0.913145627
mojaloop/reporting-hub-bop-role-uiv1.5.513145627
mojaloop/reporting-hub-bop-settlements-uiv0.0.2513145627
mojaloop/reporting-hub-bop-shellv2.3.313145627
mojaloop/reporting-hub-bop-trx-uiv2.0.213145627
mojaloop/reportingv12.1.00440961,948
mojaloop/role-assignment-servicev2.1.004371392,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

16 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighALPINE-CVE-2025-15467openssl@3.3.3-r03.3.6-r0
HighGHSA-phwq-j96m-2c2qejs@2.7.43.1.7
HighALPINE-CVE-2024-6119openssl@3.1.4-r53.1.7-r0
HighALPINE-CVE-2023-0286openssl@1.1.1n-r01.1.1t-r0
HighALPINE-CVE-2021-23840openssl@1.1.1b-r11.1.1j-r0
HighALPINE-CVE-2023-2650openssl@1.1.1n-r01.1.1u-r0
HighALPINE-CVE-2022-37434zlib@1.2.12-r01.2.12-r2
HighALPINE-CVE-2021-3449openssl@1.1.1b-r11.1.1k-r0
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.214.18.0
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighALPINE-CVE-2024-2511openssl@3.1.4-r53.1.4-r6
HighGHSA-hw8r-x6gr-5gjpjsonpath-plus@0.19.010.3.0
HighALPINE-CVE-2022-4450openssl@1.1.1n-r01.1.1t-r0
HighGHSA-pppg-cpfq-h7wrjsonpath-plus@0.19.010.2.0
HighGHSA-35jh-r3h4-6jhmlodash@3.10.14.17.21
HighALPINE-CVE-2019-12900bzip2@1.0.6-r61.0.6-r7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.1.4latest4 days agov0.0.953726371214,809

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mojaloop/finance-portal.svg)](https://charts.stackradar.io/charts/mojaloop/finance-portal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 10 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.