StackRadar

finance-portal Helm chart

mojaloop

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 5.1.4 4 days agodeploys tag v0.0.9 0Artifact Hub

finance-portal 5.1.4 deploys 11 container images: mojaloop/reporting-aggregator-svc, mojaloop/reporting-events-processor-svc, mojaloop/reporting-hub-bop-api-svc, mojaloop/reporting-hub-bop-experience-api-svc and 7 more. Across them, 1,017 findings5 critical, 37 high 5 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

14,809537263712

1,017 findings over 11 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images
ImageTagVulnerabilitiesRadar Score
mojaloop/reporting-aggregator-svcv0.0.9021347800
mojaloop/reporting-events-processor-svcv3.5.103441662,631
mojaloop/reporting-hub-bop-api-svcv4.1.20626811,661
mojaloop/reporting-hub-bop-experience-api-svcv2.0.403331582,318
mojaloop/reporting-hub-bop-positions-uiv0.0.913145627
mojaloop/reporting-hub-bop-role-uiv1.5.513145627
mojaloop/reporting-hub-bop-settlements-uiv0.0.2513145627
mojaloop/reporting-hub-bop-shellv2.3.313145627
mojaloop/reporting-hub-bop-trx-uiv2.0.213145627
mojaloop/reportingv12.1.00440961,948
mojaloop/role-assignment-servicev2.1.004371392,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

365 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-7rx3-28cr-v5whhandlebars@4.7.84.7.9
LowGHSA-xhjh-pmcv-23jwaxios@0.21.40.31.1
LowGHSA-jgmv-j7ww-jx2xkoa@3.0.03.0.1
LowGHSA-r8jr-wg88-fq5c@keycloak/keycloak-admin-client@18.0.2no fix listed
LowALPINE-CVE-2025-69418openssl@3.3.3-r03.3.6-r0
LowGHSA-76c9-3jph-rj3qon-headers@1.0.21.1.0
LowALPINE-CVE-2025-46394busybox@1.37.0-r121.37.0-r14
LowGHSA-pxg6-pf52-xh8xcookie@0.1.00.7.0
LowGHSA-52f5-9888-hmc6tmp@0.2.30.2.4
LowGHSA-442j-39wm-28r2handlebars@4.7.84.7.9
LowGHSA-4x5r-pxfx-6jf8@babel/core@7.23.77.29.6
LowGHSA-vpq2-c234-7xj6@tootallnate/once@2.0.02.0.1
LowALPINE-CVE-2024-58251busybox@1.37.0-r121.37.0-r14
LowGHSA-xffm-g5w8-qvg7@eslint/plugin-kit@0.3.20.3.4
LowGHSA-j5g3-5c8r-7qfx@apollo/server@4.6.04.9.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.1.4latest4 days agov0.0.953726371214,809

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mojaloop/finance-portal.svg)](https://charts.stackradar.io/charts/mojaloop/finance-portal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 10 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.