StackRadar

reporting-legacy-api 2.2.0 Helm chart

mojaloop

Scored 14 Sept 2026

Reporting Legacy API

Version 2.2.0 4 days agodeploys tag v12.1.0 0Artifact Hub

reporting-legacy-api 2.2.0 deploys 1 container image: mojaloop/reporting. Across them, 140 findings — 0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.

Radar Score

1,948044096

140 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
mojaloop/reportingv12.1.00440961,948

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

140 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-40200musl@1.2.5-r91.2.5-r11
LowALPINE-CVE-2025-66199openssl@3.3.3-r03.3.6-r0
LowGHSA-52v5-jr5w-gjxrsigstore@2.3.14.1.1
LowGHSA-92vm-wfm5-mxvvcookie-signature@1.0.11.0.4
LowALPINE-CVE-2026-22796openssl@3.3.3-r03.3.6-r0
LowGHSA-gvwx-54wh-qm9jtar@6.2.17.5.17
LowGHSA-v2v4-37r5-5v8gip-address@9.0.510.1.1
LowGHSA-m6fv-jmcg-4jfgsend@0.1.40.19.0
LowGHSA-w9j2-pvgh-6h63axios@0.21.40.31.1
LowGHSA-qw6h-vgh9-j6wxexpress@3.4.04.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@4.1.04.1.1
LowGHSA-7q8q-rj6j-mhjqaxios@0.21.40.33.0
LowGHSA-h67p-54hq-rp68js-yaml@4.1.04.2.0
LowGHSA-3f6p-5ww8-9rcrmysql2@3.14.23.22.0
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowGHSA-vmf3-w455-68vhtar@6.2.17.5.16
LowGHSA-5c9x-8gcm-mpgxaxios@0.21.40.31.1
LowGHSA-vf2m-468p-8v99axios@0.21.40.31.1
LowGHSA-5p4m-2wfm-xmqjjs-yaml@4.1.04.3.1
LowGHSA-jfc7-64v2-mr8c@sigstore/core@1.1.03.2.1
LowGHSA-4mjr-xmp4-gh2gqs@6.5.36.16.0
LowALPINE-CVE-2026-27171zlib@1.3.1-r21.3.2-r0
LowGHSA-xx6v-rp6x-q39caxios@0.21.40.31.1
LowGHSA-xwg4-93c6-3h42send@0.1.40.8.4
LowGHSA-898c-q2cr-xwhgaxios@0.21.40.32.0
LowGHSA-cm5g-3pgc-8rg4express@3.4.04.0.0-rc1
LowALPINE-CVE-2026-6042musl@1.2.5-r91.2.5-r10
LowGHSA-w9m9-85wc-3x92postcss-selector-parser@6.1.06.1.3
LowALPINE-CVE-2026-22795openssl@3.3.3-r03.3.6-r0
LowGHSA-6rw7-vpxm-498pqs@0.6.56.14.1
LowGHSA-rgwj-5xj2-c3m3mysql2@3.14.23.23.1
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowALPINE-CVE-2025-68160openssl@3.3.3-r03.3.6-r0
LowGHSA-xhjh-pmcv-23jwaxios@0.21.40.31.1
LowGHSA-jgmv-j7ww-jx2xkoa@3.0.03.0.1
LowALPINE-CVE-2025-69418openssl@3.3.3-r03.3.6-r0
LowALPINE-CVE-2025-46394busybox@1.37.0-r121.37.0-r14
LowGHSA-pxg6-pf52-xh8xcookie@0.1.00.7.0
LowGHSA-52f5-9888-hmc6tmp@0.2.30.2.4
LowALPINE-CVE-2024-58251busybox@1.37.0-r121.37.0-r14

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.2.0latest4 days agov12.1.00440961,948

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mojaloop/reporting-legacy-api.svg)](https://charts.stackradar.io/charts/mojaloop/reporting-legacy-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 10 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.